Jul 11 00:45:51.715162 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 11 00:45:51.715180 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Thu Jul 10 23:22:35 -00 2025 Jul 11 00:45:51.715187 kernel: efi: EFI v2.70 by EDK II Jul 11 00:45:51.715193 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 11 00:45:51.715198 kernel: random: crng init done Jul 11 00:45:51.715203 kernel: ACPI: Early table checksum verification disabled Jul 11 00:45:51.715209 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 11 00:45:51.715216 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 11 00:45:51.715222 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715227 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715232 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715238 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715243 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715248 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715256 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715262 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715268 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 11 00:45:51.715273 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 11 00:45:51.715279 kernel: NUMA: Failed to initialise from firmware Jul 11 00:45:51.715284 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:45:51.715290 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 11 00:45:51.715296 kernel: Zone ranges: Jul 11 00:45:51.715301 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:45:51.715308 kernel: DMA32 empty Jul 11 00:45:51.715314 kernel: Normal empty Jul 11 00:45:51.715319 kernel: Movable zone start for each node Jul 11 00:45:51.715325 kernel: Early memory node ranges Jul 11 00:45:51.715330 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 11 00:45:51.715336 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 11 00:45:51.715342 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 11 00:45:51.715347 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 11 00:45:51.715353 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 11 00:45:51.715358 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 11 00:45:51.715364 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 11 00:45:51.715370 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 11 00:45:51.715376 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 11 00:45:51.715382 kernel: psci: probing for conduit method from ACPI. Jul 11 00:45:51.715387 kernel: psci: PSCIv1.1 detected in firmware. Jul 11 00:45:51.715393 kernel: psci: Using standard PSCI v0.2 function IDs Jul 11 00:45:51.715399 kernel: psci: Trusted OS migration not required Jul 11 00:45:51.715406 kernel: psci: SMC Calling Convention v1.1 Jul 11 00:45:51.715413 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 11 00:45:51.715420 kernel: ACPI: SRAT not present Jul 11 00:45:51.715426 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 11 00:45:51.715432 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 11 00:45:51.715438 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 11 00:45:51.715444 kernel: Detected PIPT I-cache on CPU0 Jul 11 00:45:51.715450 kernel: CPU features: detected: GIC system register CPU interface Jul 11 00:45:51.715456 kernel: CPU features: detected: Hardware dirty bit management Jul 11 00:45:51.715462 kernel: CPU features: detected: Spectre-v4 Jul 11 00:45:51.715468 kernel: CPU features: detected: Spectre-BHB Jul 11 00:45:51.715475 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 11 00:45:51.715481 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 11 00:45:51.715487 kernel: CPU features: detected: ARM erratum 1418040 Jul 11 00:45:51.715493 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 11 00:45:51.715499 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 11 00:45:51.715505 kernel: Policy zone: DMA Jul 11 00:45:51.715512 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:45:51.715518 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 11 00:45:51.715524 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 11 00:45:51.715530 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 11 00:45:51.715536 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 11 00:45:51.715544 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 11 00:45:51.715550 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 11 00:45:51.715556 kernel: trace event string verifier disabled Jul 11 00:45:51.715562 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 11 00:45:51.715569 kernel: rcu: RCU event tracing is enabled. Jul 11 00:45:51.715575 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 11 00:45:51.715581 kernel: Trampoline variant of Tasks RCU enabled. Jul 11 00:45:51.715587 kernel: Tracing variant of Tasks RCU enabled. Jul 11 00:45:51.715593 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 11 00:45:51.715599 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 11 00:45:51.715605 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 11 00:45:51.715612 kernel: GICv3: 256 SPIs implemented Jul 11 00:45:51.715618 kernel: GICv3: 0 Extended SPIs implemented Jul 11 00:45:51.715624 kernel: GICv3: Distributor has no Range Selector support Jul 11 00:45:51.715630 kernel: Root IRQ handler: gic_handle_irq Jul 11 00:45:51.715636 kernel: GICv3: 16 PPIs implemented Jul 11 00:45:51.715641 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 11 00:45:51.715647 kernel: ACPI: SRAT not present Jul 11 00:45:51.715653 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 11 00:45:51.715659 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 11 00:45:51.715666 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 11 00:45:51.715672 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 11 00:45:51.715680 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 11 00:45:51.715688 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:45:51.715695 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 11 00:45:51.715701 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 11 00:45:51.715707 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 11 00:45:51.715713 kernel: arm-pv: using stolen time PV Jul 11 00:45:51.715719 kernel: Console: colour dummy device 80x25 Jul 11 00:45:51.715725 kernel: ACPI: Core revision 20210730 Jul 11 00:45:51.715732 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 11 00:45:51.715738 kernel: pid_max: default: 32768 minimum: 301 Jul 11 00:45:51.715744 kernel: LSM: Security Framework initializing Jul 11 00:45:51.715751 kernel: SELinux: Initializing. Jul 11 00:45:51.715757 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:45:51.715764 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 11 00:45:51.715770 kernel: rcu: Hierarchical SRCU implementation. Jul 11 00:45:51.715776 kernel: Platform MSI: ITS@0x8080000 domain created Jul 11 00:45:51.715782 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 11 00:45:51.715788 kernel: Remapping and enabling EFI services. Jul 11 00:45:51.715794 kernel: smp: Bringing up secondary CPUs ... Jul 11 00:45:51.715800 kernel: Detected PIPT I-cache on CPU1 Jul 11 00:45:51.715807 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 11 00:45:51.715813 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 11 00:45:51.715819 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:45:51.715825 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 11 00:45:51.715832 kernel: Detected PIPT I-cache on CPU2 Jul 11 00:45:51.715838 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 11 00:45:51.715844 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 11 00:45:51.715850 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:45:51.715856 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 11 00:45:51.715862 kernel: Detected PIPT I-cache on CPU3 Jul 11 00:45:51.715869 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 11 00:45:51.715876 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 11 00:45:51.715882 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 11 00:45:51.715888 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 11 00:45:51.715898 kernel: smp: Brought up 1 node, 4 CPUs Jul 11 00:45:51.715905 kernel: SMP: Total of 4 processors activated. Jul 11 00:45:51.715911 kernel: CPU features: detected: 32-bit EL0 Support Jul 11 00:45:51.715918 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 11 00:45:51.715968 kernel: CPU features: detected: Common not Private translations Jul 11 00:45:51.715978 kernel: CPU features: detected: CRC32 instructions Jul 11 00:45:51.715985 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 11 00:45:51.715991 kernel: CPU features: detected: LSE atomic instructions Jul 11 00:45:51.716002 kernel: CPU features: detected: Privileged Access Never Jul 11 00:45:51.716009 kernel: CPU features: detected: RAS Extension Support Jul 11 00:45:51.716016 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 11 00:45:51.716022 kernel: CPU: All CPU(s) started at EL1 Jul 11 00:45:51.716029 kernel: alternatives: patching kernel code Jul 11 00:45:51.716037 kernel: devtmpfs: initialized Jul 11 00:45:51.716043 kernel: KASLR enabled Jul 11 00:45:51.716050 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 11 00:45:51.716062 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 11 00:45:51.716069 kernel: pinctrl core: initialized pinctrl subsystem Jul 11 00:45:51.716075 kernel: SMBIOS 3.0.0 present. Jul 11 00:45:51.716082 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 11 00:45:51.716088 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 11 00:45:51.716095 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 11 00:45:51.716103 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 11 00:45:51.716109 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 11 00:45:51.716116 kernel: audit: initializing netlink subsys (disabled) Jul 11 00:45:51.716122 kernel: audit: type=2000 audit(0.030:1): state=initialized audit_enabled=0 res=1 Jul 11 00:45:51.716129 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 11 00:45:51.716135 kernel: cpuidle: using governor menu Jul 11 00:45:51.716142 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 11 00:45:51.716148 kernel: ASID allocator initialised with 32768 entries Jul 11 00:45:51.716154 kernel: ACPI: bus type PCI registered Jul 11 00:45:51.716162 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 11 00:45:51.716168 kernel: Serial: AMBA PL011 UART driver Jul 11 00:45:51.716175 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 11 00:45:51.716182 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 11 00:45:51.716189 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 11 00:45:51.716196 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 11 00:45:51.716202 kernel: cryptd: max_cpu_qlen set to 1000 Jul 11 00:45:51.716209 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 11 00:45:51.716216 kernel: ACPI: Added _OSI(Module Device) Jul 11 00:45:51.716223 kernel: ACPI: Added _OSI(Processor Device) Jul 11 00:45:51.716230 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 11 00:45:51.716236 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 11 00:45:51.716242 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 11 00:45:51.716249 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 11 00:45:51.716255 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 11 00:45:51.716262 kernel: ACPI: Interpreter enabled Jul 11 00:45:51.716268 kernel: ACPI: Using GIC for interrupt routing Jul 11 00:45:51.716274 kernel: ACPI: MCFG table detected, 1 entries Jul 11 00:45:51.716282 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 11 00:45:51.716289 kernel: printk: console [ttyAMA0] enabled Jul 11 00:45:51.716295 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 11 00:45:51.716423 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 11 00:45:51.716486 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 11 00:45:51.716543 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 11 00:45:51.716599 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 11 00:45:51.716657 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 11 00:45:51.716665 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 11 00:45:51.716672 kernel: PCI host bridge to bus 0000:00 Jul 11 00:45:51.716733 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 11 00:45:51.716785 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 11 00:45:51.716836 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 11 00:45:51.716887 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 11 00:45:51.716971 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 11 00:45:51.717044 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 11 00:45:51.717113 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 11 00:45:51.717172 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 11 00:45:51.717230 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:45:51.717288 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 11 00:45:51.717346 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 11 00:45:51.717406 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 11 00:45:51.717458 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 11 00:45:51.717510 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 11 00:45:51.717561 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 11 00:45:51.717570 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 11 00:45:51.717576 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 11 00:45:51.717583 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 11 00:45:51.717591 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 11 00:45:51.719386 kernel: iommu: Default domain type: Translated Jul 11 00:45:51.719396 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 11 00:45:51.719403 kernel: vgaarb: loaded Jul 11 00:45:51.719424 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 11 00:45:51.719431 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 11 00:45:51.719438 kernel: PTP clock support registered Jul 11 00:45:51.719445 kernel: Registered efivars operations Jul 11 00:45:51.719451 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 11 00:45:51.719458 kernel: VFS: Disk quotas dquot_6.6.0 Jul 11 00:45:51.719468 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 11 00:45:51.719474 kernel: pnp: PnP ACPI init Jul 11 00:45:51.719559 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 11 00:45:51.719570 kernel: pnp: PnP ACPI: found 1 devices Jul 11 00:45:51.719577 kernel: NET: Registered PF_INET protocol family Jul 11 00:45:51.719584 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 11 00:45:51.719590 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 11 00:45:51.719597 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 11 00:45:51.719606 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 11 00:45:51.719613 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 11 00:45:51.719620 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 11 00:45:51.719626 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:45:51.719633 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 11 00:45:51.719639 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 11 00:45:51.719646 kernel: PCI: CLS 0 bytes, default 64 Jul 11 00:45:51.719652 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 11 00:45:51.719658 kernel: kvm [1]: HYP mode not available Jul 11 00:45:51.719666 kernel: Initialise system trusted keyrings Jul 11 00:45:51.719673 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 11 00:45:51.719679 kernel: Key type asymmetric registered Jul 11 00:45:51.719685 kernel: Asymmetric key parser 'x509' registered Jul 11 00:45:51.719692 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 11 00:45:51.719698 kernel: io scheduler mq-deadline registered Jul 11 00:45:51.719705 kernel: io scheduler kyber registered Jul 11 00:45:51.719711 kernel: io scheduler bfq registered Jul 11 00:45:51.719718 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 11 00:45:51.719726 kernel: ACPI: button: Power Button [PWRB] Jul 11 00:45:51.719733 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 11 00:45:51.719823 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 11 00:45:51.719834 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 11 00:45:51.719840 kernel: thunder_xcv, ver 1.0 Jul 11 00:45:51.719847 kernel: thunder_bgx, ver 1.0 Jul 11 00:45:51.719853 kernel: nicpf, ver 1.0 Jul 11 00:45:51.719860 kernel: nicvf, ver 1.0 Jul 11 00:45:51.719936 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 11 00:45:51.720000 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-11T00:45:51 UTC (1752194751) Jul 11 00:45:51.720010 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 11 00:45:51.720016 kernel: NET: Registered PF_INET6 protocol family Jul 11 00:45:51.720023 kernel: Segment Routing with IPv6 Jul 11 00:45:51.720029 kernel: In-situ OAM (IOAM) with IPv6 Jul 11 00:45:51.720036 kernel: NET: Registered PF_PACKET protocol family Jul 11 00:45:51.720042 kernel: Key type dns_resolver registered Jul 11 00:45:51.720049 kernel: registered taskstats version 1 Jul 11 00:45:51.720065 kernel: Loading compiled-in X.509 certificates Jul 11 00:45:51.720072 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: e29f2f0310c2b60e0457f826e7476605fb3b6ab2' Jul 11 00:45:51.720079 kernel: Key type .fscrypt registered Jul 11 00:45:51.720085 kernel: Key type fscrypt-provisioning registered Jul 11 00:45:51.720092 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 11 00:45:51.720099 kernel: ima: Allocated hash algorithm: sha1 Jul 11 00:45:51.720106 kernel: ima: No architecture policies found Jul 11 00:45:51.720112 kernel: clk: Disabling unused clocks Jul 11 00:45:51.720119 kernel: Freeing unused kernel memory: 36416K Jul 11 00:45:51.720127 kernel: Run /init as init process Jul 11 00:45:51.720134 kernel: with arguments: Jul 11 00:45:51.720141 kernel: /init Jul 11 00:45:51.720147 kernel: with environment: Jul 11 00:45:51.720153 kernel: HOME=/ Jul 11 00:45:51.720160 kernel: TERM=linux Jul 11 00:45:51.720166 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 11 00:45:51.720175 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:45:51.720185 systemd[1]: Detected virtualization kvm. Jul 11 00:45:51.720192 systemd[1]: Detected architecture arm64. Jul 11 00:45:51.720199 systemd[1]: Running in initrd. Jul 11 00:45:51.720206 systemd[1]: No hostname configured, using default hostname. Jul 11 00:45:51.720213 systemd[1]: Hostname set to . Jul 11 00:45:51.720220 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:45:51.720227 systemd[1]: Queued start job for default target initrd.target. Jul 11 00:45:51.720234 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:45:51.720242 systemd[1]: Reached target cryptsetup.target. Jul 11 00:45:51.720248 systemd[1]: Reached target paths.target. Jul 11 00:45:51.720255 systemd[1]: Reached target slices.target. Jul 11 00:45:51.720262 systemd[1]: Reached target swap.target. Jul 11 00:45:51.720269 systemd[1]: Reached target timers.target. Jul 11 00:45:51.720276 systemd[1]: Listening on iscsid.socket. Jul 11 00:45:51.720283 systemd[1]: Listening on iscsiuio.socket. Jul 11 00:45:51.720292 systemd[1]: Listening on systemd-journald-audit.socket. Jul 11 00:45:51.720299 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 11 00:45:51.720306 systemd[1]: Listening on systemd-journald.socket. Jul 11 00:45:51.720313 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:45:51.720320 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:45:51.720327 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:45:51.720334 systemd[1]: Reached target sockets.target. Jul 11 00:45:51.720341 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:45:51.720348 systemd[1]: Finished network-cleanup.service. Jul 11 00:45:51.720356 systemd[1]: Starting systemd-fsck-usr.service... Jul 11 00:45:51.720363 systemd[1]: Starting systemd-journald.service... Jul 11 00:45:51.720370 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:45:51.720377 systemd[1]: Starting systemd-resolved.service... Jul 11 00:45:51.720384 systemd[1]: Starting systemd-vconsole-setup.service... Jul 11 00:45:51.720391 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:45:51.720398 systemd[1]: Finished systemd-fsck-usr.service. Jul 11 00:45:51.720405 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 11 00:45:51.720412 systemd[1]: Finished systemd-vconsole-setup.service. Jul 11 00:45:51.720420 systemd[1]: Starting dracut-cmdline-ask.service... Jul 11 00:45:51.720427 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 11 00:45:51.720434 kernel: audit: type=1130 audit(1752194751.717:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.720444 systemd-journald[291]: Journal started Jul 11 00:45:51.720488 systemd-journald[291]: Runtime Journal (/run/log/journal/6982f669690c4fd6bf4bb8f9c94402f2) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:45:51.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.710371 systemd-modules-load[292]: Inserted module 'overlay' Jul 11 00:45:51.724944 systemd[1]: Started systemd-journald.service. Jul 11 00:45:51.724975 kernel: audit: type=1130 audit(1752194751.723:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.727354 systemd-resolved[293]: Positive Trust Anchors: Jul 11 00:45:51.727367 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:45:51.727397 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:45:51.731605 systemd-resolved[293]: Defaulting to hostname 'linux'. Jul 11 00:45:51.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.732427 systemd[1]: Started systemd-resolved.service. Jul 11 00:45:51.742270 kernel: audit: type=1130 audit(1752194751.734:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.742299 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 11 00:45:51.742317 kernel: audit: type=1130 audit(1752194751.738:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.735180 systemd[1]: Finished dracut-cmdline-ask.service. Jul 11 00:45:51.742198 systemd[1]: Reached target nss-lookup.target. Jul 11 00:45:51.744953 kernel: Bridge firewalling registered Jul 11 00:45:51.743422 systemd[1]: Starting dracut-cmdline.service... Jul 11 00:45:51.744907 systemd-modules-load[292]: Inserted module 'br_netfilter' Jul 11 00:45:51.752142 dracut-cmdline[309]: dracut-dracut-053 Jul 11 00:45:51.754370 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=8fd3ef416118421b63f30b3d02e5d4feea39e34704e91050cdad11fae31df42c Jul 11 00:45:51.759947 kernel: SCSI subsystem initialized Jul 11 00:45:51.767539 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 11 00:45:51.767577 kernel: device-mapper: uevent: version 1.0.3 Jul 11 00:45:51.767591 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 11 00:45:51.769724 systemd-modules-load[292]: Inserted module 'dm_multipath' Jul 11 00:45:51.770484 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:45:51.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.771801 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:45:51.775524 kernel: audit: type=1130 audit(1752194751.770:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.778905 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:45:51.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.781949 kernel: audit: type=1130 audit(1752194751.778:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.815943 kernel: Loading iSCSI transport class v2.0-870. Jul 11 00:45:51.827954 kernel: iscsi: registered transport (tcp) Jul 11 00:45:51.843954 kernel: iscsi: registered transport (qla4xxx) Jul 11 00:45:51.844007 kernel: QLogic iSCSI HBA Driver Jul 11 00:45:51.877395 systemd[1]: Finished dracut-cmdline.service. Jul 11 00:45:51.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.878742 systemd[1]: Starting dracut-pre-udev.service... Jul 11 00:45:51.881127 kernel: audit: type=1130 audit(1752194751.877:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:51.923942 kernel: raid6: neonx8 gen() 13735 MB/s Jul 11 00:45:51.940939 kernel: raid6: neonx8 xor() 10740 MB/s Jul 11 00:45:51.957934 kernel: raid6: neonx4 gen() 13511 MB/s Jul 11 00:45:51.974942 kernel: raid6: neonx4 xor() 11163 MB/s Jul 11 00:45:51.991935 kernel: raid6: neonx2 gen() 12930 MB/s Jul 11 00:45:52.008944 kernel: raid6: neonx2 xor() 10413 MB/s Jul 11 00:45:52.025937 kernel: raid6: neonx1 gen() 10551 MB/s Jul 11 00:45:52.042936 kernel: raid6: neonx1 xor() 8778 MB/s Jul 11 00:45:52.059945 kernel: raid6: int64x8 gen() 6270 MB/s Jul 11 00:45:52.076946 kernel: raid6: int64x8 xor() 3543 MB/s Jul 11 00:45:52.093946 kernel: raid6: int64x4 gen() 7199 MB/s Jul 11 00:45:52.110948 kernel: raid6: int64x4 xor() 3856 MB/s Jul 11 00:45:52.127935 kernel: raid6: int64x2 gen() 6155 MB/s Jul 11 00:45:52.144946 kernel: raid6: int64x2 xor() 3319 MB/s Jul 11 00:45:52.161944 kernel: raid6: int64x1 gen() 5047 MB/s Jul 11 00:45:52.179134 kernel: raid6: int64x1 xor() 2647 MB/s Jul 11 00:45:52.179156 kernel: raid6: using algorithm neonx8 gen() 13735 MB/s Jul 11 00:45:52.179173 kernel: raid6: .... xor() 10740 MB/s, rmw enabled Jul 11 00:45:52.179189 kernel: raid6: using neon recovery algorithm Jul 11 00:45:52.190937 kernel: xor: measuring software checksum speed Jul 11 00:45:52.191937 kernel: 8regs : 16397 MB/sec Jul 11 00:45:52.191949 kernel: 32regs : 20707 MB/sec Jul 11 00:45:52.192945 kernel: arm64_neon : 25825 MB/sec Jul 11 00:45:52.192964 kernel: xor: using function: arm64_neon (25825 MB/sec) Jul 11 00:45:52.249943 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 11 00:45:52.259456 systemd[1]: Finished dracut-pre-udev.service. Jul 11 00:45:52.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:52.261000 audit: BPF prog-id=7 op=LOAD Jul 11 00:45:52.261000 audit: BPF prog-id=8 op=LOAD Jul 11 00:45:52.262939 kernel: audit: type=1130 audit(1752194752.259:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:52.262955 kernel: audit: type=1334 audit(1752194752.261:10): prog-id=7 op=LOAD Jul 11 00:45:52.263153 systemd[1]: Starting systemd-udevd.service... Jul 11 00:45:52.276019 systemd-udevd[493]: Using default interface naming scheme 'v252'. Jul 11 00:45:52.279328 systemd[1]: Started systemd-udevd.service. Jul 11 00:45:52.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:52.280565 systemd[1]: Starting dracut-pre-trigger.service... Jul 11 00:45:52.291758 dracut-pre-trigger[499]: rd.md=0: removing MD RAID activation Jul 11 00:45:52.316728 systemd[1]: Finished dracut-pre-trigger.service. Jul 11 00:45:52.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:52.318010 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:45:52.350131 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:45:52.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:52.374945 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 11 00:45:52.379889 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 11 00:45:52.379903 kernel: GPT:9289727 != 19775487 Jul 11 00:45:52.379911 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 11 00:45:52.379935 kernel: GPT:9289727 != 19775487 Jul 11 00:45:52.379945 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 11 00:45:52.379953 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:45:52.391952 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (553) Jul 11 00:45:52.392338 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 11 00:45:52.393346 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 11 00:45:52.397463 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 11 00:45:52.407169 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 11 00:45:52.410569 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:45:52.412263 systemd[1]: Starting disk-uuid.service... Jul 11 00:45:52.418034 disk-uuid[562]: Primary Header is updated. Jul 11 00:45:52.418034 disk-uuid[562]: Secondary Entries is updated. Jul 11 00:45:52.418034 disk-uuid[562]: Secondary Header is updated. Jul 11 00:45:52.420963 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:45:52.433945 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:45:53.433896 disk-uuid[563]: The operation has completed successfully. Jul 11 00:45:53.435452 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 11 00:45:53.458692 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 11 00:45:53.459866 systemd[1]: Finished disk-uuid.service. Jul 11 00:45:53.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.462260 systemd[1]: Starting verity-setup.service... Jul 11 00:45:53.475942 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 11 00:45:53.496089 systemd[1]: Found device dev-mapper-usr.device. Jul 11 00:45:53.497897 systemd[1]: Mounting sysusr-usr.mount... Jul 11 00:45:53.499584 systemd[1]: Finished verity-setup.service. Jul 11 00:45:53.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.540945 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 11 00:45:53.541158 systemd[1]: Mounted sysusr-usr.mount. Jul 11 00:45:53.541764 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 11 00:45:53.542384 systemd[1]: Starting ignition-setup.service... Jul 11 00:45:53.544667 systemd[1]: Starting parse-ip-for-networkd.service... Jul 11 00:45:53.550388 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:45:53.550417 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:45:53.550427 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:45:53.557685 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 11 00:45:53.564583 systemd[1]: Finished ignition-setup.service. Jul 11 00:45:53.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.566525 systemd[1]: Starting ignition-fetch-offline.service... Jul 11 00:45:53.623269 systemd[1]: Finished parse-ip-for-networkd.service. Jul 11 00:45:53.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.623000 audit: BPF prog-id=9 op=LOAD Jul 11 00:45:53.625095 systemd[1]: Starting systemd-networkd.service... Jul 11 00:45:53.645041 ignition[653]: Ignition 2.14.0 Jul 11 00:45:53.645835 ignition[653]: Stage: fetch-offline Jul 11 00:45:53.646598 ignition[653]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:45:53.647507 ignition[653]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:45:53.648734 ignition[653]: parsed url from cmdline: "" Jul 11 00:45:53.648799 ignition[653]: no config URL provided Jul 11 00:45:53.649521 ignition[653]: reading system config file "/usr/lib/ignition/user.ign" Jul 11 00:45:53.650480 ignition[653]: no config at "/usr/lib/ignition/user.ign" Jul 11 00:45:53.650376 systemd-networkd[738]: lo: Link UP Jul 11 00:45:53.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.650503 ignition[653]: op(1): [started] loading QEMU firmware config module Jul 11 00:45:53.650380 systemd-networkd[738]: lo: Gained carrier Jul 11 00:45:53.650508 ignition[653]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 11 00:45:53.651122 systemd-networkd[738]: Enumeration completed Jul 11 00:45:53.651260 systemd[1]: Started systemd-networkd.service. Jul 11 00:45:53.651590 systemd-networkd[738]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:45:53.652098 systemd[1]: Reached target network.target. Jul 11 00:45:53.653200 systemd-networkd[738]: eth0: Link UP Jul 11 00:45:53.653204 systemd-networkd[738]: eth0: Gained carrier Jul 11 00:45:53.653797 systemd[1]: Starting iscsiuio.service... Jul 11 00:45:53.665598 systemd[1]: Started iscsiuio.service. Jul 11 00:45:53.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.666849 systemd[1]: Starting iscsid.service... Jul 11 00:45:53.669023 ignition[653]: op(1): [finished] loading QEMU firmware config module Jul 11 00:45:53.673774 iscsid[744]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:45:53.673774 iscsid[744]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 11 00:45:53.673774 iscsid[744]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 11 00:45:53.673774 iscsid[744]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 11 00:45:53.673774 iscsid[744]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 11 00:45:53.673774 iscsid[744]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 11 00:45:53.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.672792 systemd[1]: Started iscsid.service. Jul 11 00:45:53.675026 systemd[1]: Starting dracut-initqueue.service... Jul 11 00:45:53.685176 systemd-networkd[738]: eth0: DHCPv4 address 10.0.0.3/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:45:53.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.685294 systemd[1]: Finished dracut-initqueue.service. Jul 11 00:45:53.686173 systemd[1]: Reached target remote-fs-pre.target. Jul 11 00:45:53.687743 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:45:53.689074 systemd[1]: Reached target remote-fs.target. Jul 11 00:45:53.690951 systemd[1]: Starting dracut-pre-mount.service... Jul 11 00:45:53.698280 systemd[1]: Finished dracut-pre-mount.service. Jul 11 00:45:53.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.722554 ignition[653]: parsing config with SHA512: c4bdf239f7fb7a17d567ceb3fbe39ad328ad7c08e34edc17b90794c5b28ce91aa4344838a0838a28dc598a7606758c998fcea5d589f6e6c2fad851bc90260136 Jul 11 00:45:53.735097 unknown[653]: fetched base config from "system" Jul 11 00:45:53.735107 unknown[653]: fetched user config from "qemu" Jul 11 00:45:53.735504 ignition[653]: fetch-offline: fetch-offline passed Jul 11 00:45:53.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.736306 systemd[1]: Finished ignition-fetch-offline.service. Jul 11 00:45:53.735553 ignition[653]: Ignition finished successfully Jul 11 00:45:53.737170 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 11 00:45:53.737790 systemd[1]: Starting ignition-kargs.service... Jul 11 00:45:53.745770 ignition[759]: Ignition 2.14.0 Jul 11 00:45:53.745788 ignition[759]: Stage: kargs Jul 11 00:45:53.745870 ignition[759]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:45:53.745881 ignition[759]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:45:53.748221 systemd[1]: Finished ignition-kargs.service. Jul 11 00:45:53.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.746911 ignition[759]: kargs: kargs passed Jul 11 00:45:53.746972 ignition[759]: Ignition finished successfully Jul 11 00:45:53.750027 systemd[1]: Starting ignition-disks.service... Jul 11 00:45:53.755416 ignition[765]: Ignition 2.14.0 Jul 11 00:45:53.755432 ignition[765]: Stage: disks Jul 11 00:45:53.755507 ignition[765]: no configs at "/usr/lib/ignition/base.d" Jul 11 00:45:53.755517 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:45:53.757692 systemd[1]: Finished ignition-disks.service. Jul 11 00:45:53.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.756617 ignition[765]: disks: disks passed Jul 11 00:45:53.758955 systemd[1]: Reached target initrd-root-device.target. Jul 11 00:45:53.756656 ignition[765]: Ignition finished successfully Jul 11 00:45:53.759872 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:45:53.760781 systemd[1]: Reached target local-fs.target. Jul 11 00:45:53.761784 systemd[1]: Reached target sysinit.target. Jul 11 00:45:53.762720 systemd[1]: Reached target basic.target. Jul 11 00:45:53.764371 systemd[1]: Starting systemd-fsck-root.service... Jul 11 00:45:53.774665 systemd-fsck[773]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 11 00:45:53.778389 systemd[1]: Finished systemd-fsck-root.service. Jul 11 00:45:53.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.779997 systemd[1]: Mounting sysroot.mount... Jul 11 00:45:53.785960 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 11 00:45:53.786416 systemd[1]: Mounted sysroot.mount. Jul 11 00:45:53.786989 systemd[1]: Reached target initrd-root-fs.target. Jul 11 00:45:53.788809 systemd[1]: Mounting sysroot-usr.mount... Jul 11 00:45:53.789539 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 11 00:45:53.789573 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 11 00:45:53.789595 systemd[1]: Reached target ignition-diskful.target. Jul 11 00:45:53.791409 systemd[1]: Mounted sysroot-usr.mount. Jul 11 00:45:53.793506 systemd[1]: Starting initrd-setup-root.service... Jul 11 00:45:53.797629 initrd-setup-root[783]: cut: /sysroot/etc/passwd: No such file or directory Jul 11 00:45:53.801888 initrd-setup-root[791]: cut: /sysroot/etc/group: No such file or directory Jul 11 00:45:53.805895 initrd-setup-root[799]: cut: /sysroot/etc/shadow: No such file or directory Jul 11 00:45:53.809483 initrd-setup-root[807]: cut: /sysroot/etc/gshadow: No such file or directory Jul 11 00:45:53.836109 systemd[1]: Finished initrd-setup-root.service. Jul 11 00:45:53.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.837334 systemd[1]: Starting ignition-mount.service... Jul 11 00:45:53.838438 systemd[1]: Starting sysroot-boot.service... Jul 11 00:45:53.842811 bash[824]: umount: /sysroot/usr/share/oem: not mounted. Jul 11 00:45:53.850511 ignition[826]: INFO : Ignition 2.14.0 Jul 11 00:45:53.850511 ignition[826]: INFO : Stage: mount Jul 11 00:45:53.851692 ignition[826]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:45:53.851692 ignition[826]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:45:53.851692 ignition[826]: INFO : mount: mount passed Jul 11 00:45:53.851692 ignition[826]: INFO : Ignition finished successfully Jul 11 00:45:53.853697 systemd[1]: Finished ignition-mount.service. Jul 11 00:45:53.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:53.861375 systemd[1]: Finished sysroot-boot.service. Jul 11 00:45:53.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:54.506902 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 11 00:45:54.512946 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (834) Jul 11 00:45:54.514380 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 11 00:45:54.514396 kernel: BTRFS info (device vda6): using free space tree Jul 11 00:45:54.514405 kernel: BTRFS info (device vda6): has skinny extents Jul 11 00:45:54.517557 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 11 00:45:54.518809 systemd[1]: Starting ignition-files.service... Jul 11 00:45:54.531980 ignition[854]: INFO : Ignition 2.14.0 Jul 11 00:45:54.531980 ignition[854]: INFO : Stage: files Jul 11 00:45:54.533117 ignition[854]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:45:54.533117 ignition[854]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:45:54.533117 ignition[854]: DEBUG : files: compiled without relabeling support, skipping Jul 11 00:45:54.535529 ignition[854]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 11 00:45:54.535529 ignition[854]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 11 00:45:54.539039 ignition[854]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 11 00:45:54.539965 ignition[854]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 11 00:45:54.541554 unknown[854]: wrote ssh authorized keys file for user: core Jul 11 00:45:54.542397 ignition[854]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 11 00:45:54.542397 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 11 00:45:54.542397 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Jul 11 00:45:54.595987 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 11 00:45:54.756752 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 11 00:45:54.758150 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:45:54.759445 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Jul 11 00:45:55.277308 systemd-networkd[738]: eth0: Gained IPv6LL Jul 11 00:45:55.292635 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 11 00:45:56.231747 ignition[854]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 11 00:45:56.231747 ignition[854]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 11 00:45:56.234720 ignition[854]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:45:56.270992 ignition[854]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 11 00:45:56.273018 ignition[854]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 11 00:45:56.273018 ignition[854]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:45:56.273018 ignition[854]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 11 00:45:56.273018 ignition[854]: INFO : files: files passed Jul 11 00:45:56.273018 ignition[854]: INFO : Ignition finished successfully Jul 11 00:45:56.281658 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 11 00:45:56.281677 kernel: audit: type=1130 audit(1752194756.272:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.273004 systemd[1]: Finished ignition-files.service. Jul 11 00:45:56.274591 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 11 00:45:56.277756 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 11 00:45:56.288308 kernel: audit: type=1130 audit(1752194756.282:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.288324 kernel: audit: type=1131 audit(1752194756.282:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.288435 initrd-setup-root-after-ignition[878]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 11 00:45:56.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.278486 systemd[1]: Starting ignition-quench.service... Jul 11 00:45:56.292647 kernel: audit: type=1130 audit(1752194756.288:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.292692 initrd-setup-root-after-ignition[881]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 11 00:45:56.283006 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 11 00:45:56.283099 systemd[1]: Finished ignition-quench.service. Jul 11 00:45:56.283859 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 11 00:45:56.289043 systemd[1]: Reached target ignition-complete.target. Jul 11 00:45:56.292740 systemd[1]: Starting initrd-parse-etc.service... Jul 11 00:45:56.304155 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 11 00:45:56.304248 systemd[1]: Finished initrd-parse-etc.service. Jul 11 00:45:56.309169 kernel: audit: type=1130 audit(1752194756.305:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.309184 kernel: audit: type=1131 audit(1752194756.305:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.305552 systemd[1]: Reached target initrd-fs.target. Jul 11 00:45:56.309667 systemd[1]: Reached target initrd.target. Jul 11 00:45:56.310590 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 11 00:45:56.311259 systemd[1]: Starting dracut-pre-pivot.service... Jul 11 00:45:56.321076 systemd[1]: Finished dracut-pre-pivot.service. Jul 11 00:45:56.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.322304 systemd[1]: Starting initrd-cleanup.service... Jul 11 00:45:56.324728 kernel: audit: type=1130 audit(1752194756.320:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.329514 systemd[1]: Stopped target nss-lookup.target. Jul 11 00:45:56.330158 systemd[1]: Stopped target remote-cryptsetup.target. Jul 11 00:45:56.331181 systemd[1]: Stopped target timers.target. Jul 11 00:45:56.332120 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 11 00:45:56.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.332213 systemd[1]: Stopped dracut-pre-pivot.service. Jul 11 00:45:56.336078 kernel: audit: type=1131 audit(1752194756.332:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.333107 systemd[1]: Stopped target initrd.target. Jul 11 00:45:56.335694 systemd[1]: Stopped target basic.target. Jul 11 00:45:56.336592 systemd[1]: Stopped target ignition-complete.target. Jul 11 00:45:56.337567 systemd[1]: Stopped target ignition-diskful.target. Jul 11 00:45:56.338510 systemd[1]: Stopped target initrd-root-device.target. Jul 11 00:45:56.339672 systemd[1]: Stopped target remote-fs.target. Jul 11 00:45:56.340622 systemd[1]: Stopped target remote-fs-pre.target. Jul 11 00:45:56.341630 systemd[1]: Stopped target sysinit.target. Jul 11 00:45:56.342624 systemd[1]: Stopped target local-fs.target. Jul 11 00:45:56.343551 systemd[1]: Stopped target local-fs-pre.target. Jul 11 00:45:56.344486 systemd[1]: Stopped target swap.target. Jul 11 00:45:56.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.345383 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 11 00:45:56.349413 kernel: audit: type=1131 audit(1752194756.346:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.345474 systemd[1]: Stopped dracut-pre-mount.service. Jul 11 00:45:56.351986 kernel: audit: type=1131 audit(1752194756.349:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.346450 systemd[1]: Stopped target cryptsetup.target. Jul 11 00:45:56.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.348860 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 11 00:45:56.348977 systemd[1]: Stopped dracut-initqueue.service. Jul 11 00:45:56.350015 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 11 00:45:56.350114 systemd[1]: Stopped ignition-fetch-offline.service. Jul 11 00:45:56.352744 systemd[1]: Stopped target paths.target. Jul 11 00:45:56.353549 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 11 00:45:56.356948 systemd[1]: Stopped systemd-ask-password-console.path. Jul 11 00:45:56.357638 systemd[1]: Stopped target slices.target. Jul 11 00:45:56.358593 systemd[1]: Stopped target sockets.target. Jul 11 00:45:56.359505 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 11 00:45:56.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.359602 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 11 00:45:56.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.360588 systemd[1]: ignition-files.service: Deactivated successfully. Jul 11 00:45:56.360676 systemd[1]: Stopped ignition-files.service. Jul 11 00:45:56.365179 iscsid[744]: iscsid shutting down. Jul 11 00:45:56.362388 systemd[1]: Stopping ignition-mount.service... Jul 11 00:45:56.363450 systemd[1]: Stopping iscsid.service... Jul 11 00:45:56.367225 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 11 00:45:56.368009 systemd[1]: Stopped kmod-static-nodes.service. Jul 11 00:45:56.369075 ignition[894]: INFO : Ignition 2.14.0 Jul 11 00:45:56.369075 ignition[894]: INFO : Stage: umount Jul 11 00:45:56.369075 ignition[894]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 11 00:45:56.369075 ignition[894]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 11 00:45:56.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.370735 systemd[1]: Stopping sysroot-boot.service... Jul 11 00:45:56.372950 ignition[894]: INFO : umount: umount passed Jul 11 00:45:56.372950 ignition[894]: INFO : Ignition finished successfully Jul 11 00:45:56.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.371278 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 11 00:45:56.371400 systemd[1]: Stopped systemd-udev-trigger.service. Jul 11 00:45:56.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.372600 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 11 00:45:56.372693 systemd[1]: Stopped dracut-pre-trigger.service. Jul 11 00:45:56.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.374907 systemd[1]: iscsid.service: Deactivated successfully. Jul 11 00:45:56.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.375024 systemd[1]: Stopped iscsid.service. Jul 11 00:45:56.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.376249 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 11 00:45:56.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.376321 systemd[1]: Stopped ignition-mount.service. Jul 11 00:45:56.377318 systemd[1]: iscsid.socket: Deactivated successfully. Jul 11 00:45:56.377363 systemd[1]: Closed iscsid.socket. Jul 11 00:45:56.378136 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 11 00:45:56.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.378171 systemd[1]: Stopped ignition-disks.service. Jul 11 00:45:56.380095 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 11 00:45:56.380135 systemd[1]: Stopped ignition-kargs.service. Jul 11 00:45:56.381209 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 11 00:45:56.381244 systemd[1]: Stopped ignition-setup.service. Jul 11 00:45:56.382946 systemd[1]: Stopping iscsiuio.service... Jul 11 00:45:56.384650 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 11 00:45:56.385067 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 11 00:45:56.385156 systemd[1]: Stopped iscsiuio.service. Jul 11 00:45:56.386241 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 11 00:45:56.386311 systemd[1]: Finished initrd-cleanup.service. Jul 11 00:45:56.387733 systemd[1]: Stopped target network.target. Jul 11 00:45:56.388330 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 11 00:45:56.388360 systemd[1]: Closed iscsiuio.socket. Jul 11 00:45:56.389751 systemd[1]: Stopping systemd-networkd.service... Jul 11 00:45:56.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.390693 systemd[1]: Stopping systemd-resolved.service... Jul 11 00:45:56.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.398685 systemd-networkd[738]: eth0: DHCPv6 lease lost Jul 11 00:45:56.404000 audit: BPF prog-id=9 op=UNLOAD Jul 11 00:45:56.400097 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 11 00:45:56.400190 systemd[1]: Stopped systemd-networkd.service. Jul 11 00:45:56.406000 audit: BPF prog-id=6 op=UNLOAD Jul 11 00:45:56.401580 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 11 00:45:56.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.401666 systemd[1]: Stopped systemd-resolved.service. Jul 11 00:45:56.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.403772 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 11 00:45:56.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.403800 systemd[1]: Closed systemd-networkd.socket. Jul 11 00:45:56.406315 systemd[1]: Stopping network-cleanup.service... Jul 11 00:45:56.407016 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 11 00:45:56.407089 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 11 00:45:56.408481 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 11 00:45:56.408523 systemd[1]: Stopped systemd-sysctl.service. Jul 11 00:45:56.411376 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 11 00:45:56.411415 systemd[1]: Stopped systemd-modules-load.service. Jul 11 00:45:56.412445 systemd[1]: Stopping systemd-udevd.service... Jul 11 00:45:56.414050 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 11 00:45:56.423483 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 11 00:45:56.423585 systemd[1]: Stopped network-cleanup.service. Jul 11 00:45:56.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.426108 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 11 00:45:56.426196 systemd[1]: Stopped sysroot-boot.service. Jul 11 00:45:56.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.427565 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 11 00:45:56.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.427671 systemd[1]: Stopped systemd-udevd.service. Jul 11 00:45:56.428617 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 11 00:45:56.428649 systemd[1]: Closed systemd-udevd-control.socket. Jul 11 00:45:56.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.429586 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 11 00:45:56.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.429613 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 11 00:45:56.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.430481 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 11 00:45:56.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.430516 systemd[1]: Stopped dracut-pre-udev.service. Jul 11 00:45:56.431581 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 11 00:45:56.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.431616 systemd[1]: Stopped dracut-cmdline.service. Jul 11 00:45:56.432574 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 11 00:45:56.432609 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 11 00:45:56.433720 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 11 00:45:56.433754 systemd[1]: Stopped initrd-setup-root.service. Jul 11 00:45:56.435386 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 11 00:45:56.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.435960 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 11 00:45:56.436006 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 11 00:45:56.440261 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 11 00:45:56.440343 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 11 00:45:56.441336 systemd[1]: Reached target initrd-switch-root.target. Jul 11 00:45:56.443154 systemd[1]: Starting initrd-switch-root.service... Jul 11 00:45:56.449051 systemd[1]: Switching root. Jul 11 00:45:56.467961 systemd-journald[291]: Journal stopped Jul 11 00:45:58.404097 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Jul 11 00:45:58.404156 kernel: SELinux: Class mctp_socket not defined in policy. Jul 11 00:45:58.404168 kernel: SELinux: Class anon_inode not defined in policy. Jul 11 00:45:58.404178 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 11 00:45:58.404192 kernel: SELinux: policy capability network_peer_controls=1 Jul 11 00:45:58.404202 kernel: SELinux: policy capability open_perms=1 Jul 11 00:45:58.404212 kernel: SELinux: policy capability extended_socket_class=1 Jul 11 00:45:58.404223 kernel: SELinux: policy capability always_check_network=0 Jul 11 00:45:58.404232 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 11 00:45:58.404243 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 11 00:45:58.404258 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 11 00:45:58.404268 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 11 00:45:58.404283 systemd[1]: Successfully loaded SELinux policy in 30.982ms. Jul 11 00:45:58.404303 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.959ms. Jul 11 00:45:58.404315 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 11 00:45:58.404326 systemd[1]: Detected virtualization kvm. Jul 11 00:45:58.404338 systemd[1]: Detected architecture arm64. Jul 11 00:45:58.404348 systemd[1]: Detected first boot. Jul 11 00:45:58.404359 systemd[1]: Initializing machine ID from VM UUID. Jul 11 00:45:58.404369 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 11 00:45:58.404382 systemd[1]: Populated /etc with preset unit settings. Jul 11 00:45:58.404394 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:45:58.404406 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:45:58.404418 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:45:58.404430 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 11 00:45:58.404441 systemd[1]: Stopped initrd-switch-root.service. Jul 11 00:45:58.404452 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 11 00:45:58.404462 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 11 00:45:58.404473 systemd[1]: Created slice system-addon\x2drun.slice. Jul 11 00:45:58.404484 systemd[1]: Created slice system-getty.slice. Jul 11 00:45:58.404495 systemd[1]: Created slice system-modprobe.slice. Jul 11 00:45:58.404506 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 11 00:45:58.404518 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 11 00:45:58.404529 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 11 00:45:58.404540 systemd[1]: Created slice user.slice. Jul 11 00:45:58.404551 systemd[1]: Started systemd-ask-password-console.path. Jul 11 00:45:58.404562 systemd[1]: Started systemd-ask-password-wall.path. Jul 11 00:45:58.404572 systemd[1]: Set up automount boot.automount. Jul 11 00:45:58.404582 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 11 00:45:58.404593 systemd[1]: Stopped target initrd-switch-root.target. Jul 11 00:45:58.404605 systemd[1]: Stopped target initrd-fs.target. Jul 11 00:45:58.404616 systemd[1]: Stopped target initrd-root-fs.target. Jul 11 00:45:58.404627 systemd[1]: Reached target integritysetup.target. Jul 11 00:45:58.404637 systemd[1]: Reached target remote-cryptsetup.target. Jul 11 00:45:58.404648 systemd[1]: Reached target remote-fs.target. Jul 11 00:45:58.404659 systemd[1]: Reached target slices.target. Jul 11 00:45:58.404670 systemd[1]: Reached target swap.target. Jul 11 00:45:58.404681 systemd[1]: Reached target torcx.target. Jul 11 00:45:58.404693 systemd[1]: Reached target veritysetup.target. Jul 11 00:45:58.404703 systemd[1]: Listening on systemd-coredump.socket. Jul 11 00:45:58.404715 systemd[1]: Listening on systemd-initctl.socket. Jul 11 00:45:58.404726 systemd[1]: Listening on systemd-networkd.socket. Jul 11 00:45:58.404737 systemd[1]: Listening on systemd-udevd-control.socket. Jul 11 00:45:58.404748 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 11 00:45:58.404759 systemd[1]: Listening on systemd-userdbd.socket. Jul 11 00:45:58.404769 systemd[1]: Mounting dev-hugepages.mount... Jul 11 00:45:58.404780 systemd[1]: Mounting dev-mqueue.mount... Jul 11 00:45:58.404792 systemd[1]: Mounting media.mount... Jul 11 00:45:58.404803 systemd[1]: Mounting sys-kernel-debug.mount... Jul 11 00:45:58.404813 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 11 00:45:58.404824 systemd[1]: Mounting tmp.mount... Jul 11 00:45:58.404834 systemd[1]: Starting flatcar-tmpfiles.service... Jul 11 00:45:58.404845 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:45:58.404856 systemd[1]: Starting kmod-static-nodes.service... Jul 11 00:45:58.404867 systemd[1]: Starting modprobe@configfs.service... Jul 11 00:45:58.404877 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:45:58.404889 systemd[1]: Starting modprobe@drm.service... Jul 11 00:45:58.404899 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:45:58.404910 systemd[1]: Starting modprobe@fuse.service... Jul 11 00:45:58.404935 systemd[1]: Starting modprobe@loop.service... Jul 11 00:45:58.404950 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 11 00:45:58.404961 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 11 00:45:58.404971 systemd[1]: Stopped systemd-fsck-root.service. Jul 11 00:45:58.404982 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 11 00:45:58.404993 systemd[1]: Stopped systemd-fsck-usr.service. Jul 11 00:45:58.405005 systemd[1]: Stopped systemd-journald.service. Jul 11 00:45:58.405016 kernel: fuse: init (API version 7.34) Jul 11 00:45:58.405033 systemd[1]: Starting systemd-journald.service... Jul 11 00:45:58.405044 kernel: loop: module loaded Jul 11 00:45:58.405054 systemd[1]: Starting systemd-modules-load.service... Jul 11 00:45:58.405065 systemd[1]: Starting systemd-network-generator.service... Jul 11 00:45:58.405076 systemd[1]: Starting systemd-remount-fs.service... Jul 11 00:45:58.405086 systemd[1]: Starting systemd-udev-trigger.service... Jul 11 00:45:58.405097 systemd[1]: verity-setup.service: Deactivated successfully. Jul 11 00:45:58.405110 systemd[1]: Stopped verity-setup.service. Jul 11 00:45:58.405120 systemd[1]: Mounted dev-hugepages.mount. Jul 11 00:45:58.405131 systemd[1]: Mounted dev-mqueue.mount. Jul 11 00:45:58.405141 systemd[1]: Mounted media.mount. Jul 11 00:45:58.405152 systemd[1]: Mounted sys-kernel-debug.mount. Jul 11 00:45:58.405162 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 11 00:45:58.405172 systemd[1]: Mounted tmp.mount. Jul 11 00:45:58.405184 systemd[1]: Finished kmod-static-nodes.service. Jul 11 00:45:58.405195 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 11 00:45:58.405209 systemd-journald[991]: Journal started Jul 11 00:45:58.405255 systemd-journald[991]: Runtime Journal (/run/log/journal/6982f669690c4fd6bf4bb8f9c94402f2) is 6.0M, max 48.7M, 42.6M free. Jul 11 00:45:56.528000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 11 00:45:56.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:45:56.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 11 00:45:56.602000 audit: BPF prog-id=10 op=LOAD Jul 11 00:45:56.602000 audit: BPF prog-id=10 op=UNLOAD Jul 11 00:45:56.603000 audit: BPF prog-id=11 op=LOAD Jul 11 00:45:56.603000 audit: BPF prog-id=11 op=UNLOAD Jul 11 00:45:56.637000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 11 00:45:56.637000 audit[928]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:45:56.637000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:45:56.637000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 11 00:45:56.637000 audit[928]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:45:56.637000 audit: CWD cwd="/" Jul 11 00:45:56.637000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:45:56.637000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:45:56.637000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 11 00:45:58.295000 audit: BPF prog-id=12 op=LOAD Jul 11 00:45:58.295000 audit: BPF prog-id=3 op=UNLOAD Jul 11 00:45:58.295000 audit: BPF prog-id=13 op=LOAD Jul 11 00:45:58.295000 audit: BPF prog-id=14 op=LOAD Jul 11 00:45:58.295000 audit: BPF prog-id=4 op=UNLOAD Jul 11 00:45:58.295000 audit: BPF prog-id=5 op=UNLOAD Jul 11 00:45:58.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.305000 audit: BPF prog-id=12 op=UNLOAD Jul 11 00:45:58.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.380000 audit: BPF prog-id=15 op=LOAD Jul 11 00:45:58.406018 systemd[1]: Finished modprobe@configfs.service. Jul 11 00:45:58.381000 audit: BPF prog-id=16 op=LOAD Jul 11 00:45:58.381000 audit: BPF prog-id=17 op=LOAD Jul 11 00:45:58.381000 audit: BPF prog-id=13 op=UNLOAD Jul 11 00:45:58.381000 audit: BPF prog-id=14 op=UNLOAD Jul 11 00:45:58.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.403000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 11 00:45:58.403000 audit[991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=fffff458b7d0 a2=4000 a3=1 items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:45:58.403000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 11 00:45:58.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.636342 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:45:58.294916 systemd[1]: Queued start job for default target multi-user.target. Jul 11 00:45:56.636563 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:45:58.294946 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 11 00:45:56.636581 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:45:58.297399 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 11 00:45:58.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:56.636608 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 11 00:45:56.636617 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 11 00:45:56.636643 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 11 00:45:56.636654 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 11 00:45:56.636838 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 11 00:45:56.636871 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 11 00:45:58.407210 systemd[1]: Started systemd-journald.service. Jul 11 00:45:56.636883 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 11 00:45:56.637652 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 11 00:45:56.637688 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 11 00:45:56.637705 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 11 00:45:56.637718 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 11 00:45:56.637735 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 11 00:45:56.637748 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 11 00:45:58.057324 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:58Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:45:58.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.057576 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:58Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:45:58.057681 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:58Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:45:58.057845 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:58Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 11 00:45:58.057894 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:58Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 11 00:45:58.057971 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-11T00:45:58Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 11 00:45:58.408377 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:45:58.408532 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:45:58.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.409430 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:45:58.409576 systemd[1]: Finished modprobe@drm.service. Jul 11 00:45:58.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.410374 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:45:58.410519 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:45:58.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.411412 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 11 00:45:58.411803 systemd[1]: Finished modprobe@fuse.service. Jul 11 00:45:58.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.412620 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:45:58.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.414054 systemd[1]: Finished modprobe@loop.service. Jul 11 00:45:58.414940 systemd[1]: Finished systemd-modules-load.service. Jul 11 00:45:58.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.415840 systemd[1]: Finished systemd-network-generator.service. Jul 11 00:45:58.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.416782 systemd[1]: Finished systemd-remount-fs.service. Jul 11 00:45:58.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.417787 systemd[1]: Reached target network-pre.target. Jul 11 00:45:58.419417 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 11 00:45:58.421070 systemd[1]: Mounting sys-kernel-config.mount... Jul 11 00:45:58.421602 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 11 00:45:58.422952 systemd[1]: Starting systemd-hwdb-update.service... Jul 11 00:45:58.424831 systemd[1]: Starting systemd-journal-flush.service... Jul 11 00:45:58.425592 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:45:58.426682 systemd[1]: Starting systemd-random-seed.service... Jul 11 00:45:58.427350 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:45:58.428596 systemd[1]: Starting systemd-sysctl.service... Jul 11 00:45:58.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.433580 systemd[1]: Finished flatcar-tmpfiles.service. Jul 11 00:45:58.434564 systemd[1]: Finished systemd-udev-trigger.service. Jul 11 00:45:58.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.435484 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 11 00:45:58.436261 systemd[1]: Mounted sys-kernel-config.mount. Jul 11 00:45:58.437462 systemd-journald[991]: Time spent on flushing to /var/log/journal/6982f669690c4fd6bf4bb8f9c94402f2 is 12.985ms for 989 entries. Jul 11 00:45:58.437462 systemd-journald[991]: System Journal (/var/log/journal/6982f669690c4fd6bf4bb8f9c94402f2) is 8.0M, max 195.6M, 187.6M free. Jul 11 00:45:58.460256 systemd-journald[991]: Received client request to flush runtime journal. Jul 11 00:45:58.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.438143 systemd[1]: Starting systemd-sysusers.service... Jul 11 00:45:58.441256 systemd[1]: Starting systemd-udev-settle.service... Jul 11 00:45:58.448727 systemd[1]: Finished systemd-random-seed.service. Jul 11 00:45:58.463682 udevadm[1029]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 11 00:45:58.449584 systemd[1]: Reached target first-boot-complete.target. Jul 11 00:45:58.452271 systemd[1]: Finished systemd-sysctl.service. Jul 11 00:45:58.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.464752 systemd[1]: Finished systemd-journal-flush.service. Jul 11 00:45:58.475054 systemd[1]: Finished systemd-sysusers.service. Jul 11 00:45:58.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.771675 systemd[1]: Finished systemd-hwdb-update.service. Jul 11 00:45:58.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.772000 audit: BPF prog-id=18 op=LOAD Jul 11 00:45:58.772000 audit: BPF prog-id=19 op=LOAD Jul 11 00:45:58.772000 audit: BPF prog-id=7 op=UNLOAD Jul 11 00:45:58.772000 audit: BPF prog-id=8 op=UNLOAD Jul 11 00:45:58.773720 systemd[1]: Starting systemd-udevd.service... Jul 11 00:45:58.795612 systemd-udevd[1033]: Using default interface naming scheme 'v252'. Jul 11 00:45:58.806808 systemd[1]: Started systemd-udevd.service. Jul 11 00:45:58.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.807000 audit: BPF prog-id=20 op=LOAD Jul 11 00:45:58.808895 systemd[1]: Starting systemd-networkd.service... Jul 11 00:45:58.825000 audit: BPF prog-id=21 op=LOAD Jul 11 00:45:58.825000 audit: BPF prog-id=22 op=LOAD Jul 11 00:45:58.825000 audit: BPF prog-id=23 op=LOAD Jul 11 00:45:58.827008 systemd[1]: Starting systemd-userdbd.service... Jul 11 00:45:58.839567 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 11 00:45:58.853686 systemd[1]: Started systemd-userdbd.service. Jul 11 00:45:58.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.879497 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 11 00:45:58.911894 systemd-networkd[1040]: lo: Link UP Jul 11 00:45:58.911904 systemd-networkd[1040]: lo: Gained carrier Jul 11 00:45:58.912283 systemd-networkd[1040]: Enumeration completed Jul 11 00:45:58.912373 systemd[1]: Started systemd-networkd.service. Jul 11 00:45:58.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.913064 systemd-networkd[1040]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 11 00:45:58.914235 systemd-networkd[1040]: eth0: Link UP Jul 11 00:45:58.914241 systemd-networkd[1040]: eth0: Gained carrier Jul 11 00:45:58.915252 systemd[1]: Finished systemd-udev-settle.service. Jul 11 00:45:58.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.916973 systemd[1]: Starting lvm2-activation-early.service... Jul 11 00:45:58.926686 lvm[1066]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:45:58.932081 systemd-networkd[1040]: eth0: DHCPv4 address 10.0.0.3/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 11 00:45:58.953653 systemd[1]: Finished lvm2-activation-early.service. Jul 11 00:45:58.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.954425 systemd[1]: Reached target cryptsetup.target. Jul 11 00:45:58.955999 systemd[1]: Starting lvm2-activation.service... Jul 11 00:45:58.959459 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 11 00:45:58.984632 systemd[1]: Finished lvm2-activation.service. Jul 11 00:45:58.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:58.985358 systemd[1]: Reached target local-fs-pre.target. Jul 11 00:45:58.985985 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 11 00:45:58.986008 systemd[1]: Reached target local-fs.target. Jul 11 00:45:58.986561 systemd[1]: Reached target machines.target. Jul 11 00:45:58.988136 systemd[1]: Starting ldconfig.service... Jul 11 00:45:58.988969 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:45:58.989020 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:58.990011 systemd[1]: Starting systemd-boot-update.service... Jul 11 00:45:58.991656 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 11 00:45:58.993485 systemd[1]: Starting systemd-machine-id-commit.service... Jul 11 00:45:58.996224 systemd[1]: Starting systemd-sysext.service... Jul 11 00:45:58.997752 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1069 (bootctl) Jul 11 00:45:59.001841 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 11 00:45:59.003099 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 11 00:45:59.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.007743 systemd[1]: Unmounting usr-share-oem.mount... Jul 11 00:45:59.011700 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 11 00:45:59.011874 systemd[1]: Unmounted usr-share-oem.mount. Jul 11 00:45:59.037586 systemd-fsck[1077]: fsck.fat 4.2 (2021-01-31) Jul 11 00:45:59.037586 systemd-fsck[1077]: /dev/vda1: 236 files, 117310/258078 clusters Jul 11 00:45:59.039385 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 11 00:45:59.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.041491 systemd[1]: Mounting boot.mount... Jul 11 00:45:59.079941 kernel: loop0: detected capacity change from 0 to 211168 Jul 11 00:45:59.085105 systemd[1]: Mounted boot.mount. Jul 11 00:45:59.089046 systemd[1]: Finished systemd-machine-id-commit.service. Jul 11 00:45:59.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.093248 systemd[1]: Finished systemd-boot-update.service. Jul 11 00:45:59.093999 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 11 00:45:59.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.113940 kernel: loop1: detected capacity change from 0 to 211168 Jul 11 00:45:59.119471 (sd-sysext)[1083]: Using extensions 'kubernetes'. Jul 11 00:45:59.119786 (sd-sysext)[1083]: Merged extensions into '/usr'. Jul 11 00:45:59.137193 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.138520 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:45:59.140428 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:45:59.142275 systemd[1]: Starting modprobe@loop.service... Jul 11 00:45:59.142981 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.143113 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:59.143880 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:45:59.144051 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:45:59.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.145366 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:45:59.145512 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:45:59.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.146653 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:45:59.146757 systemd[1]: Finished modprobe@loop.service. Jul 11 00:45:59.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.147840 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:45:59.148017 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.174452 ldconfig[1068]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 11 00:45:59.177786 systemd[1]: Finished ldconfig.service. Jul 11 00:45:59.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.396650 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 11 00:45:59.398237 systemd[1]: Mounting usr-share-oem.mount... Jul 11 00:45:59.402878 systemd[1]: Mounted usr-share-oem.mount. Jul 11 00:45:59.404506 systemd[1]: Finished systemd-sysext.service. Jul 11 00:45:59.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.406188 systemd[1]: Starting ensure-sysext.service... Jul 11 00:45:59.407662 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 11 00:45:59.411769 systemd[1]: Reloading. Jul 11 00:45:59.422397 systemd-tmpfiles[1090]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 11 00:45:59.424018 systemd-tmpfiles[1090]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 11 00:45:59.426713 systemd-tmpfiles[1090]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 11 00:45:59.446563 /usr/lib/systemd/system-generators/torcx-generator[1110]: time="2025-07-11T00:45:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:45:59.446841 /usr/lib/systemd/system-generators/torcx-generator[1110]: time="2025-07-11T00:45:59Z" level=info msg="torcx already run" Jul 11 00:45:59.502239 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:45:59.502260 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:45:59.518032 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:45:59.560000 audit: BPF prog-id=24 op=LOAD Jul 11 00:45:59.560000 audit: BPF prog-id=15 op=UNLOAD Jul 11 00:45:59.560000 audit: BPF prog-id=25 op=LOAD Jul 11 00:45:59.560000 audit: BPF prog-id=26 op=LOAD Jul 11 00:45:59.561000 audit: BPF prog-id=16 op=UNLOAD Jul 11 00:45:59.561000 audit: BPF prog-id=17 op=UNLOAD Jul 11 00:45:59.561000 audit: BPF prog-id=27 op=LOAD Jul 11 00:45:59.561000 audit: BPF prog-id=21 op=UNLOAD Jul 11 00:45:59.561000 audit: BPF prog-id=28 op=LOAD Jul 11 00:45:59.561000 audit: BPF prog-id=29 op=LOAD Jul 11 00:45:59.561000 audit: BPF prog-id=22 op=UNLOAD Jul 11 00:45:59.561000 audit: BPF prog-id=23 op=UNLOAD Jul 11 00:45:59.562000 audit: BPF prog-id=30 op=LOAD Jul 11 00:45:59.562000 audit: BPF prog-id=20 op=UNLOAD Jul 11 00:45:59.562000 audit: BPF prog-id=31 op=LOAD Jul 11 00:45:59.562000 audit: BPF prog-id=32 op=LOAD Jul 11 00:45:59.562000 audit: BPF prog-id=18 op=UNLOAD Jul 11 00:45:59.562000 audit: BPF prog-id=19 op=UNLOAD Jul 11 00:45:59.572586 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 11 00:45:59.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.575795 systemd[1]: Starting audit-rules.service... Jul 11 00:45:59.577396 systemd[1]: Starting clean-ca-certificates.service... Jul 11 00:45:59.579507 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 11 00:45:59.583000 audit: BPF prog-id=33 op=LOAD Jul 11 00:45:59.585127 systemd[1]: Starting systemd-resolved.service... Jul 11 00:45:59.585000 audit: BPF prog-id=34 op=LOAD Jul 11 00:45:59.588367 systemd[1]: Starting systemd-timesyncd.service... Jul 11 00:45:59.590106 systemd[1]: Starting systemd-update-utmp.service... Jul 11 00:45:59.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.591374 systemd[1]: Finished clean-ca-certificates.service. Jul 11 00:45:59.595311 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.595000 audit[1159]: SYSTEM_BOOT pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.596992 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:45:59.598537 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:45:59.600133 systemd[1]: Starting modprobe@loop.service... Jul 11 00:45:59.600776 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.600894 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:59.601000 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:45:59.601839 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:45:59.601992 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:45:59.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.603069 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:45:59.603178 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:45:59.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.604288 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:45:59.604422 systemd[1]: Finished modprobe@loop.service. Jul 11 00:45:59.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.607033 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 11 00:45:59.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.608190 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:45:59.608327 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.609679 systemd[1]: Starting systemd-update-done.service... Jul 11 00:45:59.613327 systemd[1]: Finished systemd-update-utmp.service. Jul 11 00:45:59.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.614415 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.615584 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:45:59.617453 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:45:59.619067 systemd[1]: Starting modprobe@loop.service... Jul 11 00:45:59.619613 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.619730 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:59.619817 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:45:59.620744 systemd[1]: Finished systemd-update-done.service. Jul 11 00:45:59.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.621766 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:45:59.621876 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:45:59.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.622988 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:45:59.623104 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:45:59.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.624104 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:45:59.624206 systemd[1]: Finished modprobe@loop.service. Jul 11 00:45:59.627134 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.628335 systemd[1]: Starting modprobe@dm_mod.service... Jul 11 00:45:59.630104 systemd[1]: Starting modprobe@drm.service... Jul 11 00:45:59.631825 systemd[1]: Starting modprobe@efi_pstore.service... Jul 11 00:45:59.633637 systemd[1]: Starting modprobe@loop.service... Jul 11 00:45:59.634312 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.634447 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:59.635698 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 11 00:45:59.636504 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 11 00:45:59.637725 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 11 00:45:59.637848 systemd[1]: Finished modprobe@dm_mod.service. Jul 11 00:45:59.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.638977 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 11 00:45:59.639094 systemd[1]: Finished modprobe@drm.service. Jul 11 00:45:59.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.640211 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 11 00:45:59.640319 systemd[1]: Finished modprobe@efi_pstore.service. Jul 11 00:45:59.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:45:59.641327 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 11 00:45:59.641428 systemd[1]: Finished modprobe@loop.service. Jul 11 00:45:59.642527 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 11 00:45:59.642619 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.642000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 11 00:45:59.642000 audit[1181]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdc6f8bc0 a2=420 a3=0 items=0 ppid=1148 pid=1181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:45:59.642000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 11 00:45:59.644161 augenrules[1181]: No rules Jul 11 00:45:59.645444 systemd[1]: Finished ensure-sysext.service. Jul 11 00:45:59.646135 systemd-resolved[1152]: Positive Trust Anchors: Jul 11 00:45:59.646146 systemd-resolved[1152]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 11 00:45:59.646173 systemd-resolved[1152]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 11 00:45:59.646349 systemd[1]: Finished audit-rules.service. Jul 11 00:45:59.650405 systemd[1]: Started systemd-timesyncd.service. Jul 11 00:45:59.651285 systemd-timesyncd[1153]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 11 00:45:59.651344 systemd-timesyncd[1153]: Initial clock synchronization to Fri 2025-07-11 00:45:59.730815 UTC. Jul 11 00:45:59.651384 systemd[1]: Reached target time-set.target. Jul 11 00:45:59.658222 systemd-resolved[1152]: Defaulting to hostname 'linux'. Jul 11 00:45:59.659575 systemd[1]: Started systemd-resolved.service. Jul 11 00:45:59.660239 systemd[1]: Reached target network.target. Jul 11 00:45:59.660778 systemd[1]: Reached target nss-lookup.target. Jul 11 00:45:59.661367 systemd[1]: Reached target sysinit.target. Jul 11 00:45:59.661967 systemd[1]: Started motdgen.path. Jul 11 00:45:59.662488 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 11 00:45:59.663396 systemd[1]: Started logrotate.timer. Jul 11 00:45:59.664002 systemd[1]: Started mdadm.timer. Jul 11 00:45:59.664496 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 11 00:45:59.665127 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 11 00:45:59.665153 systemd[1]: Reached target paths.target. Jul 11 00:45:59.665666 systemd[1]: Reached target timers.target. Jul 11 00:45:59.666514 systemd[1]: Listening on dbus.socket. Jul 11 00:45:59.667903 systemd[1]: Starting docker.socket... Jul 11 00:45:59.670765 systemd[1]: Listening on sshd.socket. Jul 11 00:45:59.671454 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:59.671877 systemd[1]: Listening on docker.socket. Jul 11 00:45:59.672536 systemd[1]: Reached target sockets.target. Jul 11 00:45:59.673104 systemd[1]: Reached target basic.target. Jul 11 00:45:59.673649 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.673678 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 11 00:45:59.674613 systemd[1]: Starting containerd.service... Jul 11 00:45:59.676269 systemd[1]: Starting dbus.service... Jul 11 00:45:59.677854 systemd[1]: Starting enable-oem-cloudinit.service... Jul 11 00:45:59.679750 systemd[1]: Starting extend-filesystems.service... Jul 11 00:45:59.680485 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 11 00:45:59.681795 systemd[1]: Starting motdgen.service... Jul 11 00:45:59.686453 systemd[1]: Starting prepare-helm.service... Jul 11 00:45:59.688392 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 11 00:45:59.690428 systemd[1]: Starting sshd-keygen.service... Jul 11 00:45:59.692387 jq[1191]: false Jul 11 00:45:59.693525 systemd[1]: Starting systemd-logind.service... Jul 11 00:45:59.695017 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 11 00:45:59.695102 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 11 00:45:59.695555 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 11 00:45:59.696261 systemd[1]: Starting update-engine.service... Jul 11 00:45:59.697816 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 11 00:45:59.700436 jq[1208]: true Jul 11 00:45:59.700259 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 11 00:45:59.700404 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 11 00:45:59.701641 extend-filesystems[1192]: Found loop1 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda1 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda2 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda3 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found usr Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda4 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda6 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda7 Jul 11 00:45:59.701641 extend-filesystems[1192]: Found vda9 Jul 11 00:45:59.701641 extend-filesystems[1192]: Checking size of /dev/vda9 Jul 11 00:45:59.700801 systemd[1]: motdgen.service: Deactivated successfully. Jul 11 00:45:59.701002 systemd[1]: Finished motdgen.service. Jul 11 00:45:59.702766 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 11 00:45:59.716630 jq[1213]: true Jul 11 00:45:59.702939 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 11 00:45:59.725320 tar[1212]: linux-arm64/LICENSE Jul 11 00:45:59.725320 tar[1212]: linux-arm64/helm Jul 11 00:45:59.731586 extend-filesystems[1192]: Resized partition /dev/vda9 Jul 11 00:45:59.731302 systemd[1]: Started dbus.service. Jul 11 00:45:59.731107 dbus-daemon[1190]: [system] SELinux support is enabled Jul 11 00:45:59.735782 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 11 00:45:59.735801 systemd[1]: Reached target system-config.target. Jul 11 00:45:59.736711 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 11 00:45:59.736732 systemd[1]: Reached target user-config.target. Jul 11 00:45:59.740042 extend-filesystems[1236]: resize2fs 1.46.5 (30-Dec-2021) Jul 11 00:45:59.750820 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 11 00:45:59.772344 systemd-logind[1205]: Watching system buttons on /dev/input/event0 (Power Button) Jul 11 00:45:59.773198 systemd-logind[1205]: New seat seat0. Jul 11 00:45:59.775457 systemd[1]: Started systemd-logind.service. Jul 11 00:45:59.780349 update_engine[1206]: I0711 00:45:59.780159 1206 main.cc:92] Flatcar Update Engine starting Jul 11 00:45:59.783479 systemd[1]: Started update-engine.service. Jul 11 00:45:59.783609 update_engine[1206]: I0711 00:45:59.783589 1206 update_check_scheduler.cc:74] Next update check in 2m26s Jul 11 00:45:59.786931 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 11 00:45:59.786106 systemd[1]: Started locksmithd.service. Jul 11 00:45:59.804872 extend-filesystems[1236]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 11 00:45:59.804872 extend-filesystems[1236]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 11 00:45:59.804872 extend-filesystems[1236]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 11 00:45:59.809050 extend-filesystems[1192]: Resized filesystem in /dev/vda9 Jul 11 00:45:59.806249 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 11 00:45:59.810138 bash[1241]: Updated "/home/core/.ssh/authorized_keys" Jul 11 00:45:59.806413 systemd[1]: Finished extend-filesystems.service. Jul 11 00:45:59.810601 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 11 00:45:59.821074 env[1214]: time="2025-07-11T00:45:59.821017040Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 11 00:45:59.840562 env[1214]: time="2025-07-11T00:45:59.840529760Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 11 00:45:59.840961 env[1214]: time="2025-07-11T00:45:59.840937200Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:45:59.842512 env[1214]: time="2025-07-11T00:45:59.842478600Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:45:59.842599 env[1214]: time="2025-07-11T00:45:59.842584720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:45:59.842890 env[1214]: time="2025-07-11T00:45:59.842866320Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:45:59.842998 env[1214]: time="2025-07-11T00:45:59.842982280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 11 00:45:59.843073 env[1214]: time="2025-07-11T00:45:59.843057160Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 11 00:45:59.843141 env[1214]: time="2025-07-11T00:45:59.843127480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 11 00:45:59.843387 env[1214]: time="2025-07-11T00:45:59.843367440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:45:59.843386 locksmithd[1243]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 11 00:45:59.843842 env[1214]: time="2025-07-11T00:45:59.843818320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 11 00:45:59.844087 env[1214]: time="2025-07-11T00:45:59.844062080Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 11 00:45:59.844178 env[1214]: time="2025-07-11T00:45:59.844163800Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 11 00:45:59.844290 env[1214]: time="2025-07-11T00:45:59.844272200Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 11 00:45:59.844352 env[1214]: time="2025-07-11T00:45:59.844337960Z" level=info msg="metadata content store policy set" policy=shared Jul 11 00:45:59.847823 env[1214]: time="2025-07-11T00:45:59.847798080Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 11 00:45:59.847956 env[1214]: time="2025-07-11T00:45:59.847910040Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 11 00:45:59.848037 env[1214]: time="2025-07-11T00:45:59.848012400Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 11 00:45:59.848123 env[1214]: time="2025-07-11T00:45:59.848109640Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848241 env[1214]: time="2025-07-11T00:45:59.848226800Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848306 env[1214]: time="2025-07-11T00:45:59.848292280Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848377 env[1214]: time="2025-07-11T00:45:59.848364320Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848759 env[1214]: time="2025-07-11T00:45:59.848733360Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848846 env[1214]: time="2025-07-11T00:45:59.848830200Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848907 env[1214]: time="2025-07-11T00:45:59.848893960Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.848985 env[1214]: time="2025-07-11T00:45:59.848971280Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.849054 env[1214]: time="2025-07-11T00:45:59.849040200Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 11 00:45:59.849205 env[1214]: time="2025-07-11T00:45:59.849188080Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 11 00:45:59.849368 env[1214]: time="2025-07-11T00:45:59.849349160Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 11 00:45:59.849673 env[1214]: time="2025-07-11T00:45:59.849654480Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 11 00:45:59.849758 env[1214]: time="2025-07-11T00:45:59.849743520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.849823 env[1214]: time="2025-07-11T00:45:59.849810200Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 11 00:45:59.849993 env[1214]: time="2025-07-11T00:45:59.849979480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850138 env[1214]: time="2025-07-11T00:45:59.850121360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850213 env[1214]: time="2025-07-11T00:45:59.850198480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850271 env[1214]: time="2025-07-11T00:45:59.850258160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850332 env[1214]: time="2025-07-11T00:45:59.850319200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850398 env[1214]: time="2025-07-11T00:45:59.850383800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850459 env[1214]: time="2025-07-11T00:45:59.850446520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850520 env[1214]: time="2025-07-11T00:45:59.850507720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850607 env[1214]: time="2025-07-11T00:45:59.850593760Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 11 00:45:59.850823 env[1214]: time="2025-07-11T00:45:59.850800080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850903 env[1214]: time="2025-07-11T00:45:59.850889360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.850980 env[1214]: time="2025-07-11T00:45:59.850965760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.851079 env[1214]: time="2025-07-11T00:45:59.851065040Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 11 00:45:59.851154 env[1214]: time="2025-07-11T00:45:59.851139080Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 11 00:45:59.851217 env[1214]: time="2025-07-11T00:45:59.851194640Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 11 00:45:59.851288 env[1214]: time="2025-07-11T00:45:59.851265880Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 11 00:45:59.851383 env[1214]: time="2025-07-11T00:45:59.851368960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 11 00:45:59.851687 env[1214]: time="2025-07-11T00:45:59.851629840Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 11 00:45:59.854129 env[1214]: time="2025-07-11T00:45:59.852054080Z" level=info msg="Connect containerd service" Jul 11 00:45:59.854129 env[1214]: time="2025-07-11T00:45:59.852123840Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 11 00:45:59.854849 env[1214]: time="2025-07-11T00:45:59.854817640Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:45:59.855125 env[1214]: time="2025-07-11T00:45:59.855025840Z" level=info msg="Start subscribing containerd event" Jul 11 00:45:59.855214 env[1214]: time="2025-07-11T00:45:59.855200120Z" level=info msg="Start recovering state" Jul 11 00:45:59.855353 env[1214]: time="2025-07-11T00:45:59.855332360Z" level=info msg="Start event monitor" Jul 11 00:45:59.855428 env[1214]: time="2025-07-11T00:45:59.855414520Z" level=info msg="Start snapshots syncer" Jul 11 00:45:59.855490 env[1214]: time="2025-07-11T00:45:59.855477800Z" level=info msg="Start cni network conf syncer for default" Jul 11 00:45:59.855545 env[1214]: time="2025-07-11T00:45:59.855533960Z" level=info msg="Start streaming server" Jul 11 00:45:59.856002 env[1214]: time="2025-07-11T00:45:59.855981640Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 11 00:45:59.856141 env[1214]: time="2025-07-11T00:45:59.856125800Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 11 00:45:59.856814 systemd[1]: Started containerd.service. Jul 11 00:45:59.858090 env[1214]: time="2025-07-11T00:45:59.858061560Z" level=info msg="containerd successfully booted in 0.037824s" Jul 11 00:45:59.949066 systemd-networkd[1040]: eth0: Gained IPv6LL Jul 11 00:45:59.950972 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 11 00:45:59.951888 systemd[1]: Reached target network-online.target. Jul 11 00:45:59.953979 systemd[1]: Starting kubelet.service... Jul 11 00:46:00.165737 tar[1212]: linux-arm64/README.md Jul 11 00:46:00.170307 systemd[1]: Finished prepare-helm.service. Jul 11 00:46:00.558142 systemd[1]: Started kubelet.service. Jul 11 00:46:00.980042 kubelet[1259]: E0711 00:46:00.979952 1259 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:46:00.982316 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:46:00.982442 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:46:02.587376 sshd_keygen[1215]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 11 00:46:02.604370 systemd[1]: Finished sshd-keygen.service. Jul 11 00:46:02.606349 systemd[1]: Starting issuegen.service... Jul 11 00:46:02.610775 systemd[1]: issuegen.service: Deactivated successfully. Jul 11 00:46:02.610914 systemd[1]: Finished issuegen.service. Jul 11 00:46:02.612801 systemd[1]: Starting systemd-user-sessions.service... Jul 11 00:46:02.618403 systemd[1]: Finished systemd-user-sessions.service. Jul 11 00:46:02.620250 systemd[1]: Started getty@tty1.service. Jul 11 00:46:02.622031 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 11 00:46:02.622845 systemd[1]: Reached target getty.target. Jul 11 00:46:02.623588 systemd[1]: Reached target multi-user.target. Jul 11 00:46:02.625266 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 11 00:46:02.631542 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 11 00:46:02.631680 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 11 00:46:02.632502 systemd[1]: Startup finished in 546ms (kernel) + 4.925s (initrd) + 6.138s (userspace) = 11.610s. Jul 11 00:46:03.748292 systemd[1]: Created slice system-sshd.slice. Jul 11 00:46:03.749798 systemd[1]: Started sshd@0-10.0.0.3:22-10.0.0.1:47554.service. Jul 11 00:46:03.802217 sshd[1281]: Accepted publickey for core from 10.0.0.1 port 47554 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:03.804182 sshd[1281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:03.811985 systemd[1]: Created slice user-500.slice. Jul 11 00:46:03.812957 systemd[1]: Starting user-runtime-dir@500.service... Jul 11 00:46:03.814770 systemd-logind[1205]: New session 1 of user core. Jul 11 00:46:03.820524 systemd[1]: Finished user-runtime-dir@500.service. Jul 11 00:46:03.821697 systemd[1]: Starting user@500.service... Jul 11 00:46:03.824353 (systemd)[1284]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:03.881555 systemd[1284]: Queued start job for default target default.target. Jul 11 00:46:03.881991 systemd[1284]: Reached target paths.target. Jul 11 00:46:03.882024 systemd[1284]: Reached target sockets.target. Jul 11 00:46:03.882035 systemd[1284]: Reached target timers.target. Jul 11 00:46:03.882045 systemd[1284]: Reached target basic.target. Jul 11 00:46:03.882081 systemd[1284]: Reached target default.target. Jul 11 00:46:03.882105 systemd[1284]: Startup finished in 52ms. Jul 11 00:46:03.882317 systemd[1]: Started user@500.service. Jul 11 00:46:03.883196 systemd[1]: Started session-1.scope. Jul 11 00:46:03.933530 systemd[1]: Started sshd@1-10.0.0.3:22-10.0.0.1:47570.service. Jul 11 00:46:03.973976 sshd[1293]: Accepted publickey for core from 10.0.0.1 port 47570 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:03.975373 sshd[1293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:03.979005 systemd-logind[1205]: New session 2 of user core. Jul 11 00:46:03.979859 systemd[1]: Started session-2.scope. Jul 11 00:46:04.032280 sshd[1293]: pam_unix(sshd:session): session closed for user core Jul 11 00:46:04.034961 systemd[1]: sshd@1-10.0.0.3:22-10.0.0.1:47570.service: Deactivated successfully. Jul 11 00:46:04.035524 systemd[1]: session-2.scope: Deactivated successfully. Jul 11 00:46:04.035980 systemd-logind[1205]: Session 2 logged out. Waiting for processes to exit. Jul 11 00:46:04.037026 systemd[1]: Started sshd@2-10.0.0.3:22-10.0.0.1:47572.service. Jul 11 00:46:04.037635 systemd-logind[1205]: Removed session 2. Jul 11 00:46:04.077691 sshd[1299]: Accepted publickey for core from 10.0.0.1 port 47572 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:04.078728 sshd[1299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:04.081703 systemd-logind[1205]: New session 3 of user core. Jul 11 00:46:04.082440 systemd[1]: Started session-3.scope. Jul 11 00:46:04.130740 sshd[1299]: pam_unix(sshd:session): session closed for user core Jul 11 00:46:04.133193 systemd[1]: sshd@2-10.0.0.3:22-10.0.0.1:47572.service: Deactivated successfully. Jul 11 00:46:04.133720 systemd[1]: session-3.scope: Deactivated successfully. Jul 11 00:46:04.134189 systemd-logind[1205]: Session 3 logged out. Waiting for processes to exit. Jul 11 00:46:04.135201 systemd[1]: Started sshd@3-10.0.0.3:22-10.0.0.1:47586.service. Jul 11 00:46:04.135795 systemd-logind[1205]: Removed session 3. Jul 11 00:46:04.175102 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 47586 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:04.176151 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:04.178911 systemd-logind[1205]: New session 4 of user core. Jul 11 00:46:04.179756 systemd[1]: Started session-4.scope. Jul 11 00:46:04.231954 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 11 00:46:04.235478 systemd[1]: sshd@3-10.0.0.3:22-10.0.0.1:47586.service: Deactivated successfully. Jul 11 00:46:04.236129 systemd[1]: session-4.scope: Deactivated successfully. Jul 11 00:46:04.236725 systemd-logind[1205]: Session 4 logged out. Waiting for processes to exit. Jul 11 00:46:04.237971 systemd[1]: Started sshd@4-10.0.0.3:22-10.0.0.1:47588.service. Jul 11 00:46:04.238686 systemd-logind[1205]: Removed session 4. Jul 11 00:46:04.277664 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 47588 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:04.278700 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:04.281389 systemd-logind[1205]: New session 5 of user core. Jul 11 00:46:04.282259 systemd[1]: Started session-5.scope. Jul 11 00:46:04.337433 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 11 00:46:04.337675 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:46:04.350154 dbus-daemon[1190]: avc: received setenforce notice (enforcing=1) Jul 11 00:46:04.352034 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 11 00:46:04.353773 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 11 00:46:04.357510 systemd[1]: sshd@4-10.0.0.3:22-10.0.0.1:47588.service: Deactivated successfully. Jul 11 00:46:04.358089 systemd[1]: session-5.scope: Deactivated successfully. Jul 11 00:46:04.358600 systemd-logind[1205]: Session 5 logged out. Waiting for processes to exit. Jul 11 00:46:04.359690 systemd[1]: Started sshd@5-10.0.0.3:22-10.0.0.1:47604.service. Jul 11 00:46:04.360325 systemd-logind[1205]: Removed session 5. Jul 11 00:46:04.399970 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 47604 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:04.401269 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:04.403912 systemd-logind[1205]: New session 6 of user core. Jul 11 00:46:04.404644 systemd[1]: Started session-6.scope. Jul 11 00:46:04.455060 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 11 00:46:04.455272 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:46:04.457568 sudo[1322]: pam_unix(sudo:session): session closed for user root Jul 11 00:46:04.461553 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 11 00:46:04.461762 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:46:04.469425 systemd[1]: Stopping audit-rules.service... Jul 11 00:46:04.469000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:46:04.470497 auditctl[1325]: No rules Jul 11 00:46:04.470727 systemd[1]: audit-rules.service: Deactivated successfully. Jul 11 00:46:04.470885 systemd[1]: Stopped audit-rules.service. Jul 11 00:46:04.472117 kernel: kauditd_printk_skb: 169 callbacks suppressed Jul 11 00:46:04.472163 kernel: audit: type=1305 audit(1752194764.469:201): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 11 00:46:04.472181 kernel: audit: type=1300 audit(1752194764.469:201): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff08522a0 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.469000 audit[1325]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff08522a0 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.472260 systemd[1]: Starting audit-rules.service... Jul 11 00:46:04.474608 kernel: audit: type=1327 audit(1752194764.469:201): proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:46:04.469000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 11 00:46:04.475353 kernel: audit: type=1131 audit(1752194764.469:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.486730 augenrules[1342]: No rules Jul 11 00:46:04.487316 systemd[1]: Finished audit-rules.service. Jul 11 00:46:04.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.488067 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 11 00:46:04.487000 audit[1321]: USER_END pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.491570 kernel: audit: type=1130 audit(1752194764.486:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.492366 kernel: audit: type=1106 audit(1752194764.487:204): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.492386 kernel: audit: type=1104 audit(1752194764.487:205): pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.487000 audit[1321]: CRED_DISP pid=1321 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.491926 sshd[1318]: pam_unix(sshd:session): session closed for user core Jul 11 00:46:04.491000 audit[1318]: USER_END pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.497062 kernel: audit: type=1106 audit(1752194764.491:206): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.497956 kernel: audit: type=1104 audit(1752194764.491:207): pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.491000 audit[1318]: CRED_DISP pid=1318 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.496200 systemd[1]: sshd@5-10.0.0.3:22-10.0.0.1:47604.service: Deactivated successfully. Jul 11 00:46:04.496738 systemd[1]: session-6.scope: Deactivated successfully. Jul 11 00:46:04.497297 systemd-logind[1205]: Session 6 logged out. Waiting for processes to exit. Jul 11 00:46:04.498220 systemd[1]: Started sshd@6-10.0.0.3:22-10.0.0.1:47612.service. Jul 11 00:46:04.498377 kernel: audit: type=1131 audit(1752194764.495:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.3:22-10.0.0.1:47604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.3:22-10.0.0.1:47604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.498874 systemd-logind[1205]: Removed session 6. Jul 11 00:46:04.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.3:22-10.0.0.1:47612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.537000 audit[1348]: USER_ACCT pid=1348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.538864 sshd[1348]: Accepted publickey for core from 10.0.0.1 port 47612 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:46:04.538000 audit[1348]: CRED_ACQ pid=1348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.538000 audit[1348]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4e72670 a2=3 a3=1 items=0 ppid=1 pid=1348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:46:04.540110 sshd[1348]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:46:04.542916 systemd-logind[1205]: New session 7 of user core. Jul 11 00:46:04.543654 systemd[1]: Started session-7.scope. Jul 11 00:46:04.545000 audit[1348]: USER_START pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.546000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:04.593000 audit[1351]: USER_ACCT pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.593000 audit[1351]: CRED_REFR pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.594551 sudo[1351]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 11 00:46:04.594761 sudo[1351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 11 00:46:04.595000 audit[1351]: USER_START pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:04.653724 systemd[1]: Starting docker.service... Jul 11 00:46:04.736764 env[1363]: time="2025-07-11T00:46:04.736711565Z" level=info msg="Starting up" Jul 11 00:46:04.738280 env[1363]: time="2025-07-11T00:46:04.738257087Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:46:04.738280 env[1363]: time="2025-07-11T00:46:04.738277083Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:46:04.738364 env[1363]: time="2025-07-11T00:46:04.738296757Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:46:04.738364 env[1363]: time="2025-07-11T00:46:04.738307218Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:46:04.740434 env[1363]: time="2025-07-11T00:46:04.740398545Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 11 00:46:04.740434 env[1363]: time="2025-07-11T00:46:04.740423048Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 11 00:46:04.740542 env[1363]: time="2025-07-11T00:46:04.740436486Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 11 00:46:04.740542 env[1363]: time="2025-07-11T00:46:04.740446584Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 11 00:46:04.744701 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1188061707-merged.mount: Deactivated successfully. Jul 11 00:46:04.937868 env[1363]: time="2025-07-11T00:46:04.937776907Z" level=info msg="Loading containers: start." Jul 11 00:46:04.988000 audit[1399]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:04.988000 audit[1399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffffdda0f40 a2=0 a3=1 items=0 ppid=1363 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 11 00:46:04.989000 audit[1401]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:04.989000 audit[1401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc7f084f0 a2=0 a3=1 items=0 ppid=1363 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 11 00:46:04.991000 audit[1403]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:04.991000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc7693d80 a2=0 a3=1 items=0 ppid=1363 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:46:04.993000 audit[1405]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:04.993000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff4717e60 a2=0 a3=1 items=0 ppid=1363 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.993000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:46:04.995000 audit[1407]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:04.995000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff3d747c0 a2=0 a3=1 items=0 ppid=1363 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:04.995000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 11 00:46:05.020000 audit[1412]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.020000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffda824a70 a2=0 a3=1 items=0 ppid=1363 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.020000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 11 00:46:05.026000 audit[1414]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.026000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe96eee80 a2=0 a3=1 items=0 ppid=1363 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.026000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 11 00:46:05.028000 audit[1416]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.028000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe8d99fa0 a2=0 a3=1 items=0 ppid=1363 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.028000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 11 00:46:05.029000 audit[1418]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.029000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffdbdbe4e0 a2=0 a3=1 items=0 ppid=1363 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.029000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:46:05.036000 audit[1422]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.036000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe4e932b0 a2=0 a3=1 items=0 ppid=1363 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:46:05.046000 audit[1423]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.046000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc4802fa0 a2=0 a3=1 items=0 ppid=1363 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.046000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:46:05.055960 kernel: Initializing XFRM netlink socket Jul 11 00:46:05.079593 env[1363]: time="2025-07-11T00:46:05.079554055Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 11 00:46:05.090000 audit[1431]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.090000 audit[1431]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffdd14bb60 a2=0 a3=1 items=0 ppid=1363 pid=1431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.090000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 11 00:46:05.105000 audit[1434]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.105000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd2bc43a0 a2=0 a3=1 items=0 ppid=1363 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.105000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 11 00:46:05.107000 audit[1437]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.107000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffedb3b400 a2=0 a3=1 items=0 ppid=1363 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.107000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 11 00:46:05.109000 audit[1439]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.109000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc1adc5c0 a2=0 a3=1 items=0 ppid=1363 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.109000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 11 00:46:05.110000 audit[1441]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.110000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc1174760 a2=0 a3=1 items=0 ppid=1363 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.110000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 11 00:46:05.112000 audit[1443]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.112000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff5feb790 a2=0 a3=1 items=0 ppid=1363 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.112000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 11 00:46:05.114000 audit[1445]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.114000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd862ba40 a2=0 a3=1 items=0 ppid=1363 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.114000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 11 00:46:05.120000 audit[1448]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.120000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe2c708f0 a2=0 a3=1 items=0 ppid=1363 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 11 00:46:05.121000 audit[1450]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.121000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe7f16850 a2=0 a3=1 items=0 ppid=1363 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.121000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 11 00:46:05.123000 audit[1452]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.123000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffc4b8d50 a2=0 a3=1 items=0 ppid=1363 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.123000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 11 00:46:05.124000 audit[1454]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.124000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe1304420 a2=0 a3=1 items=0 ppid=1363 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.124000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 11 00:46:05.126162 systemd-networkd[1040]: docker0: Link UP Jul 11 00:46:05.131000 audit[1458]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.131000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc2f723e0 a2=0 a3=1 items=0 ppid=1363 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.131000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:46:05.142000 audit[1459]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:05.142000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe90c8a50 a2=0 a3=1 items=0 ppid=1363 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:05.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 11 00:46:05.143983 env[1363]: time="2025-07-11T00:46:05.143953102Z" level=info msg="Loading containers: done." Jul 11 00:46:05.162846 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2824285409-merged.mount: Deactivated successfully. Jul 11 00:46:05.166077 env[1363]: time="2025-07-11T00:46:05.166044558Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 11 00:46:05.166335 env[1363]: time="2025-07-11T00:46:05.166301181Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 11 00:46:05.166501 env[1363]: time="2025-07-11T00:46:05.166483708Z" level=info msg="Daemon has completed initialization" Jul 11 00:46:05.179635 systemd[1]: Started docker.service. Jul 11 00:46:05.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:05.186523 env[1363]: time="2025-07-11T00:46:05.186481855Z" level=info msg="API listen on /run/docker.sock" Jul 11 00:46:05.816642 env[1214]: time="2025-07-11T00:46:05.816580466Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 11 00:46:06.466385 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3752279092.mount: Deactivated successfully. Jul 11 00:46:07.900342 env[1214]: time="2025-07-11T00:46:07.900295245Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:07.901637 env[1214]: time="2025-07-11T00:46:07.901607272Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:07.903590 env[1214]: time="2025-07-11T00:46:07.903550034Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:07.905846 env[1214]: time="2025-07-11T00:46:07.905809710Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:07.906644 env[1214]: time="2025-07-11T00:46:07.906612233Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4\"" Jul 11 00:46:07.909890 env[1214]: time="2025-07-11T00:46:07.909865014Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 11 00:46:09.588020 env[1214]: time="2025-07-11T00:46:09.587975640Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:09.589379 env[1214]: time="2025-07-11T00:46:09.589344884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:09.591300 env[1214]: time="2025-07-11T00:46:09.591271230Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:09.593028 env[1214]: time="2025-07-11T00:46:09.593003998Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:09.593799 env[1214]: time="2025-07-11T00:46:09.593770725Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65\"" Jul 11 00:46:09.594434 env[1214]: time="2025-07-11T00:46:09.594410433Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 11 00:46:11.148797 env[1214]: time="2025-07-11T00:46:11.148746482Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:11.150578 env[1214]: time="2025-07-11T00:46:11.150541224Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:11.152409 env[1214]: time="2025-07-11T00:46:11.152381910Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:11.154765 env[1214]: time="2025-07-11T00:46:11.154736732Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:11.155455 env[1214]: time="2025-07-11T00:46:11.155427951Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf\"" Jul 11 00:46:11.155910 env[1214]: time="2025-07-11T00:46:11.155884836Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 11 00:46:11.233140 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 11 00:46:11.233304 systemd[1]: Stopped kubelet.service. Jul 11 00:46:11.233985 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 11 00:46:11.234066 kernel: audit: type=1130 audit(1752194771.232:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:11.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:11.234741 systemd[1]: Starting kubelet.service... Jul 11 00:46:11.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:11.237538 kernel: audit: type=1131 audit(1752194771.232:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:11.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:11.334170 systemd[1]: Started kubelet.service. Jul 11 00:46:11.336944 kernel: audit: type=1130 audit(1752194771.333:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:11.375335 kubelet[1500]: E0711 00:46:11.375284 1500 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:46:11.377716 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:46:11.377852 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:46:11.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:46:11.379943 kernel: audit: type=1131 audit(1752194771.377:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:46:12.572490 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount606418224.mount: Deactivated successfully. Jul 11 00:46:13.054586 env[1214]: time="2025-07-11T00:46:13.054483057Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:13.055773 env[1214]: time="2025-07-11T00:46:13.055727236Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:13.057694 env[1214]: time="2025-07-11T00:46:13.057657735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:13.058716 env[1214]: time="2025-07-11T00:46:13.058675357Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:13.059178 env[1214]: time="2025-07-11T00:46:13.059146141Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455\"" Jul 11 00:46:13.059681 env[1214]: time="2025-07-11T00:46:13.059643411Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 11 00:46:13.646860 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3307050720.mount: Deactivated successfully. Jul 11 00:46:14.773731 env[1214]: time="2025-07-11T00:46:14.773682794Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:14.775516 env[1214]: time="2025-07-11T00:46:14.775472616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:14.777249 env[1214]: time="2025-07-11T00:46:14.777222257Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:14.779226 env[1214]: time="2025-07-11T00:46:14.779196361Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:14.780005 env[1214]: time="2025-07-11T00:46:14.779976436Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Jul 11 00:46:14.780504 env[1214]: time="2025-07-11T00:46:14.780481010Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 11 00:46:15.280611 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2915209062.mount: Deactivated successfully. Jul 11 00:46:15.285239 env[1214]: time="2025-07-11T00:46:15.285208439Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:15.286736 env[1214]: time="2025-07-11T00:46:15.286700760Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:15.288147 env[1214]: time="2025-07-11T00:46:15.288124549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:15.289299 env[1214]: time="2025-07-11T00:46:15.289275252Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:15.290485 env[1214]: time="2025-07-11T00:46:15.290452311Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 11 00:46:15.290856 env[1214]: time="2025-07-11T00:46:15.290829777Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 11 00:46:15.765851 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1921264862.mount: Deactivated successfully. Jul 11 00:46:18.660272 env[1214]: time="2025-07-11T00:46:18.660225390Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:18.661834 env[1214]: time="2025-07-11T00:46:18.661784872Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:18.664549 env[1214]: time="2025-07-11T00:46:18.664508760Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:18.666295 env[1214]: time="2025-07-11T00:46:18.666266860Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:18.667375 env[1214]: time="2025-07-11T00:46:18.667345429Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Jul 11 00:46:21.628810 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 11 00:46:21.628993 systemd[1]: Stopped kubelet.service. Jul 11 00:46:21.632787 kernel: audit: type=1130 audit(1752194781.628:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:21.632856 kernel: audit: type=1131 audit(1752194781.628:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:21.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:21.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:21.630382 systemd[1]: Starting kubelet.service... Jul 11 00:46:21.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:21.728001 systemd[1]: Started kubelet.service. Jul 11 00:46:21.730948 kernel: audit: type=1130 audit(1752194781.727:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:21.768002 kubelet[1535]: E0711 00:46:21.767955 1535 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 11 00:46:21.770372 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 11 00:46:21.770498 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 11 00:46:21.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:46:21.772960 kernel: audit: type=1131 audit(1752194781.769:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 11 00:46:25.588457 systemd[1]: Stopped kubelet.service. Jul 11 00:46:25.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.590462 systemd[1]: Starting kubelet.service... Jul 11 00:46:25.592171 kernel: audit: type=1130 audit(1752194785.587:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.592235 kernel: audit: type=1131 audit(1752194785.587:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.612793 systemd[1]: Reloading. Jul 11 00:46:25.661911 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-07-11T00:46:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:46:25.662262 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-07-11T00:46:25Z" level=info msg="torcx already run" Jul 11 00:46:25.754685 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:46:25.754706 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:46:25.770219 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.822371 kernel: audit: type=1400 audit(1752194785.818:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.822429 kernel: audit: type=1400 audit(1752194785.818:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.822449 kernel: audit: type=1400 audit(1752194785.818:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823991 kernel: audit: type=1400 audit(1752194785.818:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.819000 audit: BPF prog-id=40 op=LOAD Jul 11 00:46:25.819000 audit: BPF prog-id=33 op=UNLOAD Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit: BPF prog-id=41 op=LOAD Jul 11 00:46:25.821000 audit: BPF prog-id=24 op=UNLOAD Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit: BPF prog-id=42 op=LOAD Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.824000 audit: BPF prog-id=43 op=LOAD Jul 11 00:46:25.824000 audit: BPF prog-id=25 op=UNLOAD Jul 11 00:46:25.824000 audit: BPF prog-id=26 op=UNLOAD Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit: BPF prog-id=44 op=LOAD Jul 11 00:46:25.825000 audit: BPF prog-id=27 op=UNLOAD Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit: BPF prog-id=45 op=LOAD Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.825000 audit: BPF prog-id=46 op=LOAD Jul 11 00:46:25.825000 audit: BPF prog-id=28 op=UNLOAD Jul 11 00:46:25.825000 audit: BPF prog-id=29 op=UNLOAD Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit: BPF prog-id=47 op=LOAD Jul 11 00:46:25.826000 audit: BPF prog-id=30 op=UNLOAD Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit: BPF prog-id=48 op=LOAD Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.826000 audit: BPF prog-id=49 op=LOAD Jul 11 00:46:25.826000 audit: BPF prog-id=31 op=UNLOAD Jul 11 00:46:25.826000 audit: BPF prog-id=32 op=UNLOAD Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.828000 audit: BPF prog-id=50 op=LOAD Jul 11 00:46:25.828000 audit: BPF prog-id=34 op=UNLOAD Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit: BPF prog-id=51 op=LOAD Jul 11 00:46:25.830000 audit: BPF prog-id=35 op=UNLOAD Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit: BPF prog-id=52 op=LOAD Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.830000 audit: BPF prog-id=53 op=LOAD Jul 11 00:46:25.830000 audit: BPF prog-id=36 op=UNLOAD Jul 11 00:46:25.830000 audit: BPF prog-id=37 op=UNLOAD Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:25.831000 audit: BPF prog-id=54 op=LOAD Jul 11 00:46:25.831000 audit: BPF prog-id=38 op=UNLOAD Jul 11 00:46:25.841785 systemd[1]: Started kubelet.service. Jul 11 00:46:25.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.843866 systemd[1]: Stopping kubelet.service... Jul 11 00:46:25.844416 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:46:25.844581 systemd[1]: Stopped kubelet.service. Jul 11 00:46:25.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.846470 systemd[1]: Starting kubelet.service... Jul 11 00:46:25.940990 systemd[1]: Started kubelet.service. Jul 11 00:46:25.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:25.973851 kubelet[1614]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:46:25.973851 kubelet[1614]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 11 00:46:25.973851 kubelet[1614]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:46:25.974156 kubelet[1614]: I0711 00:46:25.973916 1614 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:46:26.550156 kubelet[1614]: I0711 00:46:26.550125 1614 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 11 00:46:26.550156 kubelet[1614]: I0711 00:46:26.550151 1614 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:46:26.550351 kubelet[1614]: I0711 00:46:26.550334 1614 server.go:956] "Client rotation is on, will bootstrap in background" Jul 11 00:46:26.578341 kubelet[1614]: E0711 00:46:26.578304 1614 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.3:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 11 00:46:26.578918 kubelet[1614]: I0711 00:46:26.578877 1614 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:46:26.585123 kubelet[1614]: E0711 00:46:26.585080 1614 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:46:26.585123 kubelet[1614]: I0711 00:46:26.585118 1614 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:46:26.588430 kubelet[1614]: I0711 00:46:26.588403 1614 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:46:26.589586 kubelet[1614]: I0711 00:46:26.589550 1614 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:46:26.589731 kubelet[1614]: I0711 00:46:26.589586 1614 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:46:26.589812 kubelet[1614]: I0711 00:46:26.589792 1614 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:46:26.589812 kubelet[1614]: I0711 00:46:26.589801 1614 container_manager_linux.go:303] "Creating device plugin manager" Jul 11 00:46:26.590010 kubelet[1614]: I0711 00:46:26.589992 1614 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:46:26.594411 kubelet[1614]: I0711 00:46:26.594390 1614 kubelet.go:480] "Attempting to sync node with API server" Jul 11 00:46:26.594466 kubelet[1614]: I0711 00:46:26.594416 1614 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:46:26.594466 kubelet[1614]: I0711 00:46:26.594439 1614 kubelet.go:386] "Adding apiserver pod source" Jul 11 00:46:26.595539 kubelet[1614]: I0711 00:46:26.595520 1614 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:46:26.596472 kubelet[1614]: I0711 00:46:26.596451 1614 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:46:26.597208 kubelet[1614]: I0711 00:46:26.597189 1614 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 11 00:46:26.597332 kubelet[1614]: W0711 00:46:26.597319 1614 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 11 00:46:26.599378 kubelet[1614]: I0711 00:46:26.599363 1614 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 11 00:46:26.599541 kubelet[1614]: I0711 00:46:26.599528 1614 server.go:1289] "Started kubelet" Jul 11 00:46:26.621579 kubelet[1614]: E0711 00:46:26.621545 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.3:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 11 00:46:26.621785 kubelet[1614]: E0711 00:46:26.621764 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.3:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 11 00:46:26.621940 kubelet[1614]: I0711 00:46:26.621902 1614 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:46:26.625030 kubelet[1614]: I0711 00:46:26.625009 1614 server.go:317] "Adding debug handlers to kubelet server" Jul 11 00:46:26.625309 kubelet[1614]: I0711 00:46:26.625246 1614 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:46:26.625849 kubelet[1614]: I0711 00:46:26.625805 1614 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:46:26.625000 audit[1614]: AVC avc: denied { mac_admin } for pid=1614 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:26.625000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:26.625000 audit[1614]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007ada10 a1=4000a55578 a2=40007ad9e0 a3=25 items=0 ppid=1 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.625000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:26.625000 audit[1614]: AVC avc: denied { mac_admin } for pid=1614 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:26.625000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:26.625000 audit[1614]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bbe740 a1=4000a55590 a2=40007adaa0 a3=25 items=0 ppid=1 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.625000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:26.628229 kubelet[1614]: I0711 00:46:26.627830 1614 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:46:26.628229 kubelet[1614]: I0711 00:46:26.627875 1614 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 11 00:46:26.628229 kubelet[1614]: I0711 00:46:26.627966 1614 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:46:26.633357 kubelet[1614]: I0711 00:46:26.633177 1614 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:46:26.633572 kubelet[1614]: I0711 00:46:26.633556 1614 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 11 00:46:26.633867 kubelet[1614]: I0711 00:46:26.633835 1614 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 11 00:46:26.634119 kubelet[1614]: E0711 00:46:26.633903 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:26.634217 kubelet[1614]: I0711 00:46:26.634191 1614 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:46:26.634516 kubelet[1614]: E0711 00:46:26.634464 1614 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="200ms" Jul 11 00:46:26.634620 kubelet[1614]: E0711 00:46:26.634600 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.3:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 11 00:46:26.636018 kubelet[1614]: I0711 00:46:26.635999 1614 factory.go:223] Registration of the containerd container factory successfully Jul 11 00:46:26.636116 kubelet[1614]: I0711 00:46:26.636105 1614 factory.go:223] Registration of the systemd container factory successfully Jul 11 00:46:26.636230 kubelet[1614]: I0711 00:46:26.636215 1614 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:46:26.637489 kubelet[1614]: E0711 00:46:26.635082 1614 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.3:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.3:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18510bdff88c16aa default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-11 00:46:26.599376554 +0000 UTC m=+0.654756189,LastTimestamp:2025-07-11 00:46:26.599376554 +0000 UTC m=+0.654756189,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 11 00:46:26.637000 audit[1632]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.640895 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 11 00:46:26.640992 kernel: audit: type=1325 audit(1752194786.637:430): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.641022 kernel: audit: type=1300 audit(1752194786.637:430): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe68c2200 a2=0 a3=1 items=0 ppid=1614 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.637000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe68c2200 a2=0 a3=1 items=0 ppid=1614 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.643402 kernel: audit: type=1327 audit(1752194786.637:430): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:46:26.637000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:46:26.644705 kernel: audit: type=1325 audit(1752194786.638:431): table=filter:27 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.638000 audit[1633]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.638000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3d81210 a2=0 a3=1 items=0 ppid=1614 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.649821 kernel: audit: type=1300 audit(1752194786.638:431): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc3d81210 a2=0 a3=1 items=0 ppid=1614 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.649892 kernel: audit: type=1327 audit(1752194786.638:431): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:46:26.649912 kernel: audit: type=1325 audit(1752194786.639:432): table=filter:28 family=2 entries=2 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.638000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:46:26.639000 audit[1635]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.650953 kubelet[1614]: I0711 00:46:26.650936 1614 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 11 00:46:26.651031 kernel: audit: type=1300 audit(1752194786.639:432): arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd87d6da0 a2=0 a3=1 items=0 ppid=1614 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.639000 audit[1635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd87d6da0 a2=0 a3=1 items=0 ppid=1614 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.651139 kubelet[1614]: I0711 00:46:26.651125 1614 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 11 00:46:26.651197 kubelet[1614]: I0711 00:46:26.651188 1614 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:46:26.653060 kubelet[1614]: I0711 00:46:26.653033 1614 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 11 00:46:26.653949 kubelet[1614]: I0711 00:46:26.653920 1614 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 11 00:46:26.654046 kubelet[1614]: I0711 00:46:26.654035 1614 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 11 00:46:26.654111 kubelet[1614]: I0711 00:46:26.654102 1614 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 11 00:46:26.654164 kubelet[1614]: I0711 00:46:26.654155 1614 kubelet.go:2436] "Starting kubelet main sync loop" Jul 11 00:46:26.654253 kubelet[1614]: E0711 00:46:26.654239 1614 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:46:26.639000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:46:26.656414 kernel: audit: type=1327 audit(1752194786.639:432): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:46:26.656471 kernel: audit: type=1325 audit(1752194786.641:433): table=filter:29 family=2 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.641000 audit[1637]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.657396 kubelet[1614]: E0711 00:46:26.657360 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.3:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 11 00:46:26.641000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc44d35b0 a2=0 a3=1 items=0 ppid=1614 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.641000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:46:26.650000 audit[1642]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.650000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc2fc7340 a2=0 a3=1 items=0 ppid=1614 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 11 00:46:26.651000 audit[1643]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:26.651000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff964fbc0 a2=0 a3=1 items=0 ppid=1614 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.651000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 11 00:46:26.653000 audit[1644]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.653000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb2cd6f0 a2=0 a3=1 items=0 ppid=1614 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:46:26.655000 audit[1646]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.655000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd57eab00 a2=0 a3=1 items=0 ppid=1614 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:46:26.656000 audit[1648]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:26.656000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff03dbdf0 a2=0 a3=1 items=0 ppid=1614 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.656000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 11 00:46:26.657000 audit[1651]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:26.657000 audit[1651]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd3e60f50 a2=0 a3=1 items=0 ppid=1614 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:46:26.658000 audit[1652]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:26.658000 audit[1652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc4d31880 a2=0 a3=1 items=0 ppid=1614 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.658000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 11 00:46:26.659000 audit[1653]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:26.659000 audit[1653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe00bd0e0 a2=0 a3=1 items=0 ppid=1614 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.659000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 11 00:46:26.734936 kubelet[1614]: E0711 00:46:26.734880 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:26.750471 kubelet[1614]: I0711 00:46:26.750448 1614 policy_none.go:49] "None policy: Start" Jul 11 00:46:26.750471 kubelet[1614]: I0711 00:46:26.750477 1614 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 11 00:46:26.750593 kubelet[1614]: I0711 00:46:26.750490 1614 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:46:26.754354 kubelet[1614]: E0711 00:46:26.754333 1614 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 11 00:46:26.755824 systemd[1]: Created slice kubepods.slice. Jul 11 00:46:26.760177 systemd[1]: Created slice kubepods-burstable.slice. Jul 11 00:46:26.762857 systemd[1]: Created slice kubepods-besteffort.slice. Jul 11 00:46:26.771762 kubelet[1614]: E0711 00:46:26.771731 1614 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 11 00:46:26.769000 audit[1614]: AVC avc: denied { mac_admin } for pid=1614 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:26.769000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:26.769000 audit[1614]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000df2270 a1=4000e315d8 a2=4000df2240 a3=25 items=0 ppid=1 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:26.769000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:26.772011 kubelet[1614]: E0711 00:46:26.771819 1614 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 11 00:46:26.772011 kubelet[1614]: I0711 00:46:26.771963 1614 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:46:26.772011 kubelet[1614]: I0711 00:46:26.771976 1614 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:46:26.772383 kubelet[1614]: I0711 00:46:26.772279 1614 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:46:26.773154 kubelet[1614]: E0711 00:46:26.773124 1614 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 11 00:46:26.773214 kubelet[1614]: E0711 00:46:26.773177 1614 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 11 00:46:26.834861 kubelet[1614]: E0711 00:46:26.834787 1614 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="400ms" Jul 11 00:46:26.873032 kubelet[1614]: I0711 00:46:26.873000 1614 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:46:26.873494 kubelet[1614]: E0711 00:46:26.873458 1614 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.3:6443/api/v1/nodes\": dial tcp 10.0.0.3:6443: connect: connection refused" node="localhost" Jul 11 00:46:26.962630 systemd[1]: Created slice kubepods-burstable-poddf8d7e8bd620109a9895ebbf4086749e.slice. Jul 11 00:46:26.988416 kubelet[1614]: E0711 00:46:26.988379 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:26.991808 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 11 00:46:26.994292 kubelet[1614]: E0711 00:46:26.994261 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:26.995877 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 11 00:46:26.996993 kubelet[1614]: E0711 00:46:26.996973 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:27.037307 kubelet[1614]: I0711 00:46:27.037282 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/df8d7e8bd620109a9895ebbf4086749e-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"df8d7e8bd620109a9895ebbf4086749e\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:27.037445 kubelet[1614]: I0711 00:46:27.037424 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:27.037529 kubelet[1614]: I0711 00:46:27.037515 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:27.037606 kubelet[1614]: I0711 00:46:27.037593 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:27.037685 kubelet[1614]: I0711 00:46:27.037672 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:27.037759 kubelet[1614]: I0711 00:46:27.037745 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:27.037839 kubelet[1614]: I0711 00:46:27.037826 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/df8d7e8bd620109a9895ebbf4086749e-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"df8d7e8bd620109a9895ebbf4086749e\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:27.037915 kubelet[1614]: I0711 00:46:27.037901 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/df8d7e8bd620109a9895ebbf4086749e-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"df8d7e8bd620109a9895ebbf4086749e\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:27.038026 kubelet[1614]: I0711 00:46:27.038012 1614 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:27.075155 kubelet[1614]: I0711 00:46:27.075128 1614 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:46:27.075395 kubelet[1614]: E0711 00:46:27.075374 1614 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.3:6443/api/v1/nodes\": dial tcp 10.0.0.3:6443: connect: connection refused" node="localhost" Jul 11 00:46:27.235946 kubelet[1614]: E0711 00:46:27.235842 1614 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="800ms" Jul 11 00:46:27.289270 kubelet[1614]: E0711 00:46:27.289233 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:27.289762 env[1214]: time="2025-07-11T00:46:27.289714301Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:df8d7e8bd620109a9895ebbf4086749e,Namespace:kube-system,Attempt:0,}" Jul 11 00:46:27.295330 kubelet[1614]: E0711 00:46:27.295295 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:27.295636 env[1214]: time="2025-07-11T00:46:27.295594010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 11 00:46:27.298790 kubelet[1614]: E0711 00:46:27.297974 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:27.298899 env[1214]: time="2025-07-11T00:46:27.298757265Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 11 00:46:27.476764 kubelet[1614]: I0711 00:46:27.476731 1614 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:46:27.477079 kubelet[1614]: E0711 00:46:27.477043 1614 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.3:6443/api/v1/nodes\": dial tcp 10.0.0.3:6443: connect: connection refused" node="localhost" Jul 11 00:46:27.595975 kubelet[1614]: E0711 00:46:27.595872 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.3:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 11 00:46:27.618881 kubelet[1614]: E0711 00:46:27.618826 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.3:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 11 00:46:27.727199 kubelet[1614]: E0711 00:46:27.727161 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.3:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 11 00:46:27.739077 kubelet[1614]: E0711 00:46:27.739034 1614 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.3:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 11 00:46:27.847690 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2008553497.mount: Deactivated successfully. Jul 11 00:46:27.851102 env[1214]: time="2025-07-11T00:46:27.851063029Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.853143 env[1214]: time="2025-07-11T00:46:27.853110102Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.853958 env[1214]: time="2025-07-11T00:46:27.853880751Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.854792 env[1214]: time="2025-07-11T00:46:27.854763629Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.856271 env[1214]: time="2025-07-11T00:46:27.856244670Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.857697 env[1214]: time="2025-07-11T00:46:27.857655091Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.858402 env[1214]: time="2025-07-11T00:46:27.858379807Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.861993 env[1214]: time="2025-07-11T00:46:27.861968137Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.863660 env[1214]: time="2025-07-11T00:46:27.863631467Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.866093 env[1214]: time="2025-07-11T00:46:27.866022313Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.867060 env[1214]: time="2025-07-11T00:46:27.867033987Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.867775 env[1214]: time="2025-07-11T00:46:27.867748940Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:27.891723 env[1214]: time="2025-07-11T00:46:27.891653923Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:27.891723 env[1214]: time="2025-07-11T00:46:27.891692494Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:27.892820 env[1214]: time="2025-07-11T00:46:27.891705857Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:27.892820 env[1214]: time="2025-07-11T00:46:27.892077318Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/463867317633f13f2a3959791eb69607535e2e7477a9802402dc57c8b157c946 pid=1667 runtime=io.containerd.runc.v2 Jul 11 00:46:27.893211 env[1214]: time="2025-07-11T00:46:27.893043699Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:27.893211 env[1214]: time="2025-07-11T00:46:27.893072187Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:27.893211 env[1214]: time="2025-07-11T00:46:27.893082229Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:27.893470 env[1214]: time="2025-07-11T00:46:27.893419120Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e52afc4e6c52e4d49f6f544faa7f088c19463d2bbd725588f525a6768f9b8b9 pid=1682 runtime=io.containerd.runc.v2 Jul 11 00:46:27.895308 env[1214]: time="2025-07-11T00:46:27.895239213Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:27.895308 env[1214]: time="2025-07-11T00:46:27.895271861Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:27.895308 env[1214]: time="2025-07-11T00:46:27.895281864Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:27.895451 env[1214]: time="2025-07-11T00:46:27.895411979Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0cfdfa8942074080b0746589e46a898d56c9663fbb0bc73af186fbadaa7678ed pid=1683 runtime=io.containerd.runc.v2 Jul 11 00:46:27.904733 systemd[1]: Started cri-containerd-463867317633f13f2a3959791eb69607535e2e7477a9802402dc57c8b157c946.scope. Jul 11 00:46:27.906803 systemd[1]: Started cri-containerd-1e52afc4e6c52e4d49f6f544faa7f088c19463d2bbd725588f525a6768f9b8b9.scope. Jul 11 00:46:27.923803 systemd[1]: Started cri-containerd-0cfdfa8942074080b0746589e46a898d56c9663fbb0bc73af186fbadaa7678ed.scope. Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit: BPF prog-id=55 op=LOAD Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019bb38 a2=10 a3=0 items=0 ppid=1667 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333836373331373633336631336632613339353937393165623639 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019b5a0 a2=3c a3=0 items=0 ppid=1667 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333836373331373633336631336632613339353937393165623639 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit: BPF prog-id=56 op=LOAD Jul 11 00:46:27.937000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019b8e0 a2=78 a3=0 items=0 ppid=1667 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333836373331373633336631336632613339353937393165623639 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit: BPF prog-id=57 op=LOAD Jul 11 00:46:27.937000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019b670 a2=78 a3=0 items=0 ppid=1667 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333836373331373633336631336632613339353937393165623639 Jul 11 00:46:27.937000 audit: BPF prog-id=57 op=UNLOAD Jul 11 00:46:27.937000 audit: BPF prog-id=56 op=UNLOAD Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.937000 audit: BPF prog-id=58 op=LOAD Jul 11 00:46:27.937000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019bb40 a2=78 a3=0 items=0 ppid=1667 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436333836373331373633336631336632613339353937393165623639 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit: BPF prog-id=59 op=LOAD Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1682 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353261666334653663353265346434396636663534346661613766 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1682 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353261666334653663353265346434396636663534346661613766 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit: BPF prog-id=60 op=LOAD Jul 11 00:46:27.940000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1682 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353261666334653663353265346434396636663534346661613766 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.940000 audit: BPF prog-id=61 op=LOAD Jul 11 00:46:27.940000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1682 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353261666334653663353265346434396636663534346661613766 Jul 11 00:46:27.941000 audit: BPF prog-id=61 op=UNLOAD Jul 11 00:46:27.941000 audit: BPF prog-id=60 op=UNLOAD Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.941000 audit: BPF prog-id=62 op=LOAD Jul 11 00:46:27.941000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1682 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353261666334653663353265346434396636663534346661613766 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit: BPF prog-id=63 op=LOAD Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666466613839343230373430383062303734363538396534366138 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666466613839343230373430383062303734363538396534366138 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit: BPF prog-id=64 op=LOAD Jul 11 00:46:27.947000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666466613839343230373430383062303734363538396534366138 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit: BPF prog-id=65 op=LOAD Jul 11 00:46:27.947000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666466613839343230373430383062303734363538396534366138 Jul 11 00:46:27.947000 audit: BPF prog-id=65 op=UNLOAD Jul 11 00:46:27.947000 audit: BPF prog-id=64 op=UNLOAD Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:27.947000 audit: BPF prog-id=66 op=LOAD Jul 11 00:46:27.947000 audit[1708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1683 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:27.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666466613839343230373430383062303734363538396534366138 Jul 11 00:46:27.968284 env[1214]: time="2025-07-11T00:46:27.968241510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"463867317633f13f2a3959791eb69607535e2e7477a9802402dc57c8b157c946\"" Jul 11 00:46:27.978905 kubelet[1614]: E0711 00:46:27.978871 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:27.979957 env[1214]: time="2025-07-11T00:46:27.979887778Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"1e52afc4e6c52e4d49f6f544faa7f088c19463d2bbd725588f525a6768f9b8b9\"" Jul 11 00:46:27.981093 kubelet[1614]: E0711 00:46:27.981066 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:27.981498 env[1214]: time="2025-07-11T00:46:27.981464525Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:df8d7e8bd620109a9895ebbf4086749e,Namespace:kube-system,Attempt:0,} returns sandbox id \"0cfdfa8942074080b0746589e46a898d56c9663fbb0bc73af186fbadaa7678ed\"" Jul 11 00:46:27.982246 kubelet[1614]: E0711 00:46:27.982126 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:27.983065 env[1214]: time="2025-07-11T00:46:27.983026867Z" level=info msg="CreateContainer within sandbox \"463867317633f13f2a3959791eb69607535e2e7477a9802402dc57c8b157c946\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 11 00:46:27.984691 env[1214]: time="2025-07-11T00:46:27.984658708Z" level=info msg="CreateContainer within sandbox \"1e52afc4e6c52e4d49f6f544faa7f088c19463d2bbd725588f525a6768f9b8b9\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 11 00:46:27.986945 env[1214]: time="2025-07-11T00:46:27.986874947Z" level=info msg="CreateContainer within sandbox \"0cfdfa8942074080b0746589e46a898d56c9663fbb0bc73af186fbadaa7678ed\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 11 00:46:28.006228 env[1214]: time="2025-07-11T00:46:28.006169988Z" level=info msg="CreateContainer within sandbox \"463867317633f13f2a3959791eb69607535e2e7477a9802402dc57c8b157c946\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"af764eef0fbc9825f86e87936e73e8dc65b30533d9d6a1405efd652ec6c61b33\"" Jul 11 00:46:28.008715 env[1214]: time="2025-07-11T00:46:28.008676701Z" level=info msg="StartContainer for \"af764eef0fbc9825f86e87936e73e8dc65b30533d9d6a1405efd652ec6c61b33\"" Jul 11 00:46:28.009795 env[1214]: time="2025-07-11T00:46:28.009755276Z" level=info msg="CreateContainer within sandbox \"1e52afc4e6c52e4d49f6f544faa7f088c19463d2bbd725588f525a6768f9b8b9\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"60b6dcbe060b43ac934594aa1ea610e3e9dca7b7875851e37dd2da9bf027b7fc\"" Jul 11 00:46:28.010134 env[1214]: time="2025-07-11T00:46:28.010102918Z" level=info msg="StartContainer for \"60b6dcbe060b43ac934594aa1ea610e3e9dca7b7875851e37dd2da9bf027b7fc\"" Jul 11 00:46:28.011987 env[1214]: time="2025-07-11T00:46:28.011945394Z" level=info msg="CreateContainer within sandbox \"0cfdfa8942074080b0746589e46a898d56c9663fbb0bc73af186fbadaa7678ed\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a178b0fa273a0f6b8c9d990bf328a7230d5532704cf20fbad94ad64648fb816c\"" Jul 11 00:46:28.012548 env[1214]: time="2025-07-11T00:46:28.012512848Z" level=info msg="StartContainer for \"a178b0fa273a0f6b8c9d990bf328a7230d5532704cf20fbad94ad64648fb816c\"" Jul 11 00:46:28.027382 systemd[1]: Started cri-containerd-a178b0fa273a0f6b8c9d990bf328a7230d5532704cf20fbad94ad64648fb816c.scope. Jul 11 00:46:28.028535 systemd[1]: Started cri-containerd-af764eef0fbc9825f86e87936e73e8dc65b30533d9d6a1405efd652ec6c61b33.scope. Jul 11 00:46:28.036091 systemd[1]: Started cri-containerd-60b6dcbe060b43ac934594aa1ea610e3e9dca7b7875851e37dd2da9bf027b7fc.scope. Jul 11 00:46:28.050572 kubelet[1614]: E0711 00:46:28.038042 1614 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="1.6s" Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit: BPF prog-id=67 op=LOAD Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1667 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166373634656566306662633938323566383665383739333665373365 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1667 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166373634656566306662633938323566383665383739333665373365 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit: BPF prog-id=68 op=LOAD Jul 11 00:46:28.067000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1667 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166373634656566306662633938323566383665383739333665373365 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit: BPF prog-id=69 op=LOAD Jul 11 00:46:28.067000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1667 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166373634656566306662633938323566383665383739333665373365 Jul 11 00:46:28.067000 audit: BPF prog-id=69 op=UNLOAD Jul 11 00:46:28.067000 audit: BPF prog-id=68 op=UNLOAD Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.067000 audit: BPF prog-id=70 op=LOAD Jul 11 00:46:28.067000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1667 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166373634656566306662633938323566383665383739333665373365 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit: BPF prog-id=71 op=LOAD Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131373862306661323733613066366238633964393930626633323861 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131373862306661323733613066366238633964393930626633323861 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit: BPF prog-id=72 op=LOAD Jul 11 00:46:28.069000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131373862306661323733613066366238633964393930626633323861 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit: BPF prog-id=73 op=LOAD Jul 11 00:46:28.069000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131373862306661323733613066366238633964393930626633323861 Jul 11 00:46:28.069000 audit: BPF prog-id=73 op=UNLOAD Jul 11 00:46:28.069000 audit: BPF prog-id=72 op=UNLOAD Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.069000 audit: BPF prog-id=74 op=LOAD Jul 11 00:46:28.069000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131373862306661323733613066366238633964393930626633323861 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit: BPF prog-id=75 op=LOAD Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1682 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623664636265303630623433616339333435393461613165613631 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1682 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623664636265303630623433616339333435393461613165613631 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit: BPF prog-id=76 op=LOAD Jul 11 00:46:28.077000 audit[1798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1682 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623664636265303630623433616339333435393461613165613631 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.077000 audit: BPF prog-id=77 op=LOAD Jul 11 00:46:28.077000 audit[1798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1682 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623664636265303630623433616339333435393461613165613631 Jul 11 00:46:28.078000 audit: BPF prog-id=77 op=UNLOAD Jul 11 00:46:28.078000 audit: BPF prog-id=76 op=UNLOAD Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:28.078000 audit: BPF prog-id=78 op=LOAD Jul 11 00:46:28.078000 audit[1798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1682 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:28.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623664636265303630623433616339333435393461613165613631 Jul 11 00:46:28.101979 env[1214]: time="2025-07-11T00:46:28.101888352Z" level=info msg="StartContainer for \"af764eef0fbc9825f86e87936e73e8dc65b30533d9d6a1405efd652ec6c61b33\" returns successfully" Jul 11 00:46:28.104634 env[1214]: time="2025-07-11T00:46:28.104566306Z" level=info msg="StartContainer for \"a178b0fa273a0f6b8c9d990bf328a7230d5532704cf20fbad94ad64648fb816c\" returns successfully" Jul 11 00:46:28.132100 env[1214]: time="2025-07-11T00:46:28.132043286Z" level=info msg="StartContainer for \"60b6dcbe060b43ac934594aa1ea610e3e9dca7b7875851e37dd2da9bf027b7fc\" returns successfully" Jul 11 00:46:28.278944 kubelet[1614]: I0711 00:46:28.278881 1614 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:46:28.664870 kubelet[1614]: E0711 00:46:28.664834 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:28.665010 kubelet[1614]: E0711 00:46:28.664988 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:28.666689 kubelet[1614]: E0711 00:46:28.666663 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:28.666808 kubelet[1614]: E0711 00:46:28.666788 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:28.668416 kubelet[1614]: E0711 00:46:28.668392 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:28.668518 kubelet[1614]: E0711 00:46:28.668499 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:29.376000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.376000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40069a8340 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:46:29.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:46:29.376000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.376000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40055616b0 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:46:29.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:46:29.376000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.376000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4005e030e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:46:29.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:46:29.377000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.377000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40055617a0 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:46:29.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:46:29.497000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.497000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006ba4600 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:46:29.497000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:46:29.497000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.497000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=4006ae8120 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:46:29.497000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:46:29.522000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.522000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003fe4e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:29.522000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:29.522000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:29.522000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400018b7d0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:29.522000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:29.634000 kubelet[1614]: I0711 00:46:29.633885 1614 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 11 00:46:29.634000 kubelet[1614]: E0711 00:46:29.633936 1614 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 11 00:46:29.643339 kubelet[1614]: E0711 00:46:29.643304 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:29.670542 kubelet[1614]: E0711 00:46:29.670495 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:29.670641 kubelet[1614]: E0711 00:46:29.670632 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:29.671010 kubelet[1614]: E0711 00:46:29.670983 1614 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 11 00:46:29.671102 kubelet[1614]: E0711 00:46:29.671086 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:29.743699 kubelet[1614]: E0711 00:46:29.743657 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:29.844479 kubelet[1614]: E0711 00:46:29.844455 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:29.945231 kubelet[1614]: E0711 00:46:29.945139 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:30.045984 kubelet[1614]: E0711 00:46:30.045951 1614 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 11 00:46:30.134668 kubelet[1614]: I0711 00:46:30.134646 1614 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:30.139210 kubelet[1614]: E0711 00:46:30.139185 1614 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:30.139300 kubelet[1614]: I0711 00:46:30.139289 1614 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:30.141037 kubelet[1614]: E0711 00:46:30.141013 1614 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:30.141037 kubelet[1614]: I0711 00:46:30.141036 1614 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:30.142746 kubelet[1614]: E0711 00:46:30.142722 1614 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:30.623148 kubelet[1614]: I0711 00:46:30.623111 1614 apiserver.go:52] "Watching apiserver" Jul 11 00:46:30.634518 kubelet[1614]: I0711 00:46:30.634489 1614 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 11 00:46:30.670728 kubelet[1614]: I0711 00:46:30.670693 1614 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:30.675895 kubelet[1614]: E0711 00:46:30.675867 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:30.743007 kubelet[1614]: I0711 00:46:30.742973 1614 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:30.746937 kubelet[1614]: E0711 00:46:30.746889 1614 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:31.413845 systemd[1]: Reloading. Jul 11 00:46:31.467017 /usr/lib/systemd/system-generators/torcx-generator[1924]: time="2025-07-11T00:46:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 11 00:46:31.467393 /usr/lib/systemd/system-generators/torcx-generator[1924]: time="2025-07-11T00:46:31Z" level=info msg="torcx already run" Jul 11 00:46:31.520170 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 11 00:46:31.520189 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 11 00:46:31.535470 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.593000 audit: BPF prog-id=79 op=LOAD Jul 11 00:46:31.593000 audit: BPF prog-id=75 op=UNLOAD Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.594000 audit: BPF prog-id=80 op=LOAD Jul 11 00:46:31.594000 audit: BPF prog-id=40 op=UNLOAD Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit: BPF prog-id=81 op=LOAD Jul 11 00:46:31.595000 audit: BPF prog-id=41 op=UNLOAD Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit: BPF prog-id=82 op=LOAD Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.595000 audit: BPF prog-id=83 op=LOAD Jul 11 00:46:31.595000 audit: BPF prog-id=42 op=UNLOAD Jul 11 00:46:31.595000 audit: BPF prog-id=43 op=UNLOAD Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit: BPF prog-id=84 op=LOAD Jul 11 00:46:31.596000 audit: BPF prog-id=67 op=UNLOAD Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit: BPF prog-id=85 op=LOAD Jul 11 00:46:31.596000 audit: BPF prog-id=44 op=UNLOAD Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit: BPF prog-id=86 op=LOAD Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.596000 audit: BPF prog-id=87 op=LOAD Jul 11 00:46:31.596000 audit: BPF prog-id=45 op=UNLOAD Jul 11 00:46:31.597000 audit: BPF prog-id=46 op=UNLOAD Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.597000 audit: BPF prog-id=88 op=LOAD Jul 11 00:46:31.597000 audit: BPF prog-id=47 op=UNLOAD Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit: BPF prog-id=89 op=LOAD Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit: BPF prog-id=90 op=LOAD Jul 11 00:46:31.598000 audit: BPF prog-id=48 op=UNLOAD Jul 11 00:46:31.598000 audit: BPF prog-id=49 op=UNLOAD Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.598000 audit: BPF prog-id=91 op=LOAD Jul 11 00:46:31.598000 audit: BPF prog-id=63 op=UNLOAD Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.600000 audit: BPF prog-id=92 op=LOAD Jul 11 00:46:31.600000 audit: BPF prog-id=50 op=UNLOAD Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.601000 audit: BPF prog-id=93 op=LOAD Jul 11 00:46:31.601000 audit: BPF prog-id=71 op=UNLOAD Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.602000 audit: BPF prog-id=94 op=LOAD Jul 11 00:46:31.602000 audit: BPF prog-id=59 op=UNLOAD Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit: BPF prog-id=95 op=LOAD Jul 11 00:46:31.603000 audit: BPF prog-id=51 op=UNLOAD Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit: BPF prog-id=96 op=LOAD Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit: BPF prog-id=97 op=LOAD Jul 11 00:46:31.604000 audit: BPF prog-id=52 op=UNLOAD Jul 11 00:46:31.604000 audit: BPF prog-id=53 op=UNLOAD Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit: BPF prog-id=98 op=LOAD Jul 11 00:46:31.604000 audit: BPF prog-id=55 op=UNLOAD Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.605000 audit: BPF prog-id=99 op=LOAD Jul 11 00:46:31.605000 audit: BPF prog-id=54 op=UNLOAD Jul 11 00:46:31.616175 systemd[1]: Stopping kubelet.service... Jul 11 00:46:31.645293 systemd[1]: kubelet.service: Deactivated successfully. Jul 11 00:46:31.645468 systemd[1]: Stopped kubelet.service. Jul 11 00:46:31.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:31.645983 kernel: kauditd_printk_skb: 640 callbacks suppressed Jul 11 00:46:31.646026 kernel: audit: type=1131 audit(1752194791.644:803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:31.646084 systemd[1]: kubelet.service: Consumed 1.022s CPU time. Jul 11 00:46:31.647658 systemd[1]: Starting kubelet.service... Jul 11 00:46:31.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:31.747274 systemd[1]: Started kubelet.service. Jul 11 00:46:31.750982 kernel: audit: type=1130 audit(1752194791.746:804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:31.779453 kubelet[1965]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:46:31.779453 kubelet[1965]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 11 00:46:31.779453 kubelet[1965]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 11 00:46:31.779768 kubelet[1965]: I0711 00:46:31.779494 1965 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 11 00:46:31.785064 kubelet[1965]: I0711 00:46:31.785033 1965 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 11 00:46:31.785162 kubelet[1965]: I0711 00:46:31.785151 1965 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 11 00:46:31.785433 kubelet[1965]: I0711 00:46:31.785412 1965 server.go:956] "Client rotation is on, will bootstrap in background" Jul 11 00:46:31.787588 kubelet[1965]: I0711 00:46:31.787566 1965 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 11 00:46:31.789678 kubelet[1965]: I0711 00:46:31.789649 1965 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 11 00:46:31.794210 kubelet[1965]: E0711 00:46:31.794183 1965 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 11 00:46:31.794305 kubelet[1965]: I0711 00:46:31.794292 1965 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 11 00:46:31.800278 kubelet[1965]: I0711 00:46:31.800258 1965 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 11 00:46:31.800573 kubelet[1965]: I0711 00:46:31.800546 1965 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 11 00:46:31.800776 kubelet[1965]: I0711 00:46:31.800646 1965 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 11 00:46:31.800899 kubelet[1965]: I0711 00:46:31.800886 1965 topology_manager.go:138] "Creating topology manager with none policy" Jul 11 00:46:31.801513 kubelet[1965]: I0711 00:46:31.801409 1965 container_manager_linux.go:303] "Creating device plugin manager" Jul 11 00:46:31.801667 kubelet[1965]: I0711 00:46:31.801654 1965 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:46:31.801866 kubelet[1965]: I0711 00:46:31.801852 1965 kubelet.go:480] "Attempting to sync node with API server" Jul 11 00:46:31.801975 kubelet[1965]: I0711 00:46:31.801962 1965 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 11 00:46:31.802050 kubelet[1965]: I0711 00:46:31.802040 1965 kubelet.go:386] "Adding apiserver pod source" Jul 11 00:46:31.802107 kubelet[1965]: I0711 00:46:31.802098 1965 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 11 00:46:31.806316 kubelet[1965]: I0711 00:46:31.805324 1965 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 11 00:46:31.806688 kubelet[1965]: I0711 00:46:31.806662 1965 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 11 00:46:31.819124 kubelet[1965]: I0711 00:46:31.818239 1965 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 11 00:46:31.819124 kubelet[1965]: I0711 00:46:31.818283 1965 server.go:1289] "Started kubelet" Jul 11 00:46:31.819000 audit[1965]: AVC avc: denied { mac_admin } for pid=1965 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.820735 kubelet[1965]: I0711 00:46:31.820468 1965 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 11 00:46:31.820735 kubelet[1965]: I0711 00:46:31.820500 1965 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 11 00:46:31.820735 kubelet[1965]: I0711 00:46:31.820564 1965 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 11 00:46:31.819000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:31.823573 kernel: audit: type=1400 audit(1752194791.819:805): avc: denied { mac_admin } for pid=1965 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.823626 kernel: audit: type=1401 audit(1752194791.819:805): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:31.823643 kernel: audit: type=1300 audit(1752194791.819:805): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e032c0 a1=4000a53218 a2=4000e03290 a3=25 items=0 ppid=1 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:31.819000 audit[1965]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e032c0 a1=4000a53218 a2=4000e03290 a3=25 items=0 ppid=1 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:31.819000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:31.828523 kernel: audit: type=1327 audit(1752194791.819:805): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:31.819000 audit[1965]: AVC avc: denied { mac_admin } for pid=1965 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.830265 kernel: audit: type=1400 audit(1752194791.819:806): avc: denied { mac_admin } for pid=1965 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.819000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:31.831439 kernel: audit: type=1401 audit(1752194791.819:806): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:31.831490 kernel: audit: type=1300 audit(1752194791.819:806): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e1c200 a1=4000a53230 a2=4000e03350 a3=25 items=0 ppid=1 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:31.819000 audit[1965]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e1c200 a1=4000a53230 a2=4000e03350 a3=25 items=0 ppid=1 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:31.831573 kubelet[1965]: I0711 00:46:31.831448 1965 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 11 00:46:31.832313 kubelet[1965]: I0711 00:46:31.832284 1965 server.go:317] "Adding debug handlers to kubelet server" Jul 11 00:46:31.832844 kubelet[1965]: I0711 00:46:31.832819 1965 factory.go:223] Registration of the systemd container factory successfully Jul 11 00:46:31.832971 kubelet[1965]: I0711 00:46:31.832942 1965 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 11 00:46:31.819000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:31.834658 kubelet[1965]: I0711 00:46:31.834613 1965 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 11 00:46:31.834748 kubelet[1965]: I0711 00:46:31.834725 1965 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 11 00:46:31.834805 kubelet[1965]: I0711 00:46:31.834788 1965 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 11 00:46:31.835036 kubelet[1965]: I0711 00:46:31.835013 1965 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 11 00:46:31.835255 kubelet[1965]: I0711 00:46:31.835241 1965 reconciler.go:26] "Reconciler: start to sync state" Jul 11 00:46:31.835329 kubelet[1965]: I0711 00:46:31.835319 1965 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 11 00:46:31.836837 kernel: audit: type=1327 audit(1752194791.819:806): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:31.837363 kubelet[1965]: I0711 00:46:31.837341 1965 factory.go:223] Registration of the containerd container factory successfully Jul 11 00:46:31.840755 kubelet[1965]: I0711 00:46:31.840677 1965 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 11 00:46:31.846740 kubelet[1965]: I0711 00:46:31.846721 1965 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 11 00:46:31.846827 kubelet[1965]: I0711 00:46:31.846816 1965 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 11 00:46:31.846891 kubelet[1965]: I0711 00:46:31.846880 1965 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 11 00:46:31.847005 kubelet[1965]: I0711 00:46:31.846994 1965 kubelet.go:2436] "Starting kubelet main sync loop" Jul 11 00:46:31.847124 kubelet[1965]: E0711 00:46:31.847103 1965 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 11 00:46:31.869892 kubelet[1965]: I0711 00:46:31.869871 1965 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 11 00:46:31.870332 kubelet[1965]: I0711 00:46:31.870314 1965 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 11 00:46:31.870407 kubelet[1965]: I0711 00:46:31.870397 1965 state_mem.go:36] "Initialized new in-memory state store" Jul 11 00:46:31.870575 kubelet[1965]: I0711 00:46:31.870560 1965 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 11 00:46:31.870656 kubelet[1965]: I0711 00:46:31.870633 1965 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 11 00:46:31.870716 kubelet[1965]: I0711 00:46:31.870707 1965 policy_none.go:49] "None policy: Start" Jul 11 00:46:31.870769 kubelet[1965]: I0711 00:46:31.870760 1965 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 11 00:46:31.870823 kubelet[1965]: I0711 00:46:31.870815 1965 state_mem.go:35] "Initializing new in-memory state store" Jul 11 00:46:31.870994 kubelet[1965]: I0711 00:46:31.870979 1965 state_mem.go:75] "Updated machine memory state" Jul 11 00:46:31.874743 kubelet[1965]: E0711 00:46:31.874720 1965 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 11 00:46:31.873000 audit[1965]: AVC avc: denied { mac_admin } for pid=1965 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:31.873000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 11 00:46:31.873000 audit[1965]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f2c540 a1=4001299a40 a2=4000f2c510 a3=25 items=0 ppid=1 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:31.873000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 11 00:46:31.875185 kubelet[1965]: E0711 00:46:31.875022 1965 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 11 00:46:31.875297 kubelet[1965]: I0711 00:46:31.875227 1965 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 11 00:46:31.875297 kubelet[1965]: I0711 00:46:31.875247 1965 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 11 00:46:31.875521 kubelet[1965]: I0711 00:46:31.875494 1965 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 11 00:46:31.876871 kubelet[1965]: E0711 00:46:31.876842 1965 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 11 00:46:31.948506 kubelet[1965]: I0711 00:46:31.948479 1965 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:31.948577 kubelet[1965]: I0711 00:46:31.948508 1965 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:31.948701 kubelet[1965]: I0711 00:46:31.948685 1965 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:31.953517 kubelet[1965]: E0711 00:46:31.953412 1965 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:31.953687 kubelet[1965]: E0711 00:46:31.953620 1965 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:31.985793 kubelet[1965]: I0711 00:46:31.985773 1965 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 11 00:46:31.991231 kubelet[1965]: I0711 00:46:31.991206 1965 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 11 00:46:31.991376 kubelet[1965]: I0711 00:46:31.991365 1965 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 11 00:46:32.036520 kubelet[1965]: I0711 00:46:32.036434 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/df8d7e8bd620109a9895ebbf4086749e-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"df8d7e8bd620109a9895ebbf4086749e\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:32.136892 kubelet[1965]: I0711 00:46:32.136863 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:32.137002 kubelet[1965]: I0711 00:46:32.136898 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:32.137002 kubelet[1965]: I0711 00:46:32.136946 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 11 00:46:32.137002 kubelet[1965]: I0711 00:46:32.136963 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:32.137002 kubelet[1965]: I0711 00:46:32.136982 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:32.137105 kubelet[1965]: I0711 00:46:32.137026 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/df8d7e8bd620109a9895ebbf4086749e-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"df8d7e8bd620109a9895ebbf4086749e\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:32.137105 kubelet[1965]: I0711 00:46:32.137043 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/df8d7e8bd620109a9895ebbf4086749e-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"df8d7e8bd620109a9895ebbf4086749e\") " pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:32.137105 kubelet[1965]: I0711 00:46:32.137057 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 11 00:46:32.253997 kubelet[1965]: E0711 00:46:32.253972 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:32.254150 kubelet[1965]: E0711 00:46:32.254121 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:32.254222 kubelet[1965]: E0711 00:46:32.254191 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:32.802911 kubelet[1965]: I0711 00:46:32.802840 1965 apiserver.go:52] "Watching apiserver" Jul 11 00:46:32.836003 kubelet[1965]: I0711 00:46:32.835972 1965 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 11 00:46:32.856368 kubelet[1965]: I0711 00:46:32.856337 1965 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:32.856745 kubelet[1965]: E0711 00:46:32.856724 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:32.857001 kubelet[1965]: E0711 00:46:32.856730 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:32.860777 kubelet[1965]: E0711 00:46:32.860749 1965 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 11 00:46:32.861054 kubelet[1965]: E0711 00:46:32.861036 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:32.872163 kubelet[1965]: I0711 00:46:32.872109 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.8720830680000002 podStartE2EDuration="2.872083068s" podCreationTimestamp="2025-07-11 00:46:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:46:32.871884287 +0000 UTC m=+1.118644352" watchObservedRunningTime="2025-07-11 00:46:32.872083068 +0000 UTC m=+1.118843133" Jul 11 00:46:32.879259 kubelet[1965]: I0711 00:46:32.879219 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.87919894 podStartE2EDuration="2.87919894s" podCreationTimestamp="2025-07-11 00:46:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:46:32.879031122 +0000 UTC m=+1.125791187" watchObservedRunningTime="2025-07-11 00:46:32.87919894 +0000 UTC m=+1.125958965" Jul 11 00:46:32.887559 kubelet[1965]: I0711 00:46:32.887123 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.887113137 podStartE2EDuration="1.887113137s" podCreationTimestamp="2025-07-11 00:46:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:46:32.886914436 +0000 UTC m=+1.133674501" watchObservedRunningTime="2025-07-11 00:46:32.887113137 +0000 UTC m=+1.133873202" Jul 11 00:46:33.858025 kubelet[1965]: E0711 00:46:33.857995 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:33.858339 kubelet[1965]: E0711 00:46:33.858101 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:34.859697 kubelet[1965]: E0711 00:46:34.859667 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:35.394000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 11 00:46:35.394000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001373ac0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:35.394000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:36.145000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:36.145000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000947f40 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:36.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:36.145000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:36.146000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:36.146000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000947fc0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:36.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:36.145000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400156a1c0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:36.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:36.146000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:46:36.146000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40008e35e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:46:36.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:46:36.950777 kubelet[1965]: E0711 00:46:36.950731 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:37.289910 kubelet[1965]: I0711 00:46:37.289817 1965 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 11 00:46:37.290191 env[1214]: time="2025-07-11T00:46:37.290136488Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 11 00:46:37.290443 kubelet[1965]: I0711 00:46:37.290315 1965 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 11 00:46:38.319335 systemd[1]: Created slice kubepods-besteffort-pod289078c2_6062_41f7_80a9_1f2e4efaf0e3.slice. Jul 11 00:46:38.375850 kubelet[1965]: I0711 00:46:38.375797 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/289078c2-6062-41f7-80a9-1f2e4efaf0e3-xtables-lock\") pod \"kube-proxy-bl5fp\" (UID: \"289078c2-6062-41f7-80a9-1f2e4efaf0e3\") " pod="kube-system/kube-proxy-bl5fp" Jul 11 00:46:38.375850 kubelet[1965]: I0711 00:46:38.375837 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/289078c2-6062-41f7-80a9-1f2e4efaf0e3-kube-proxy\") pod \"kube-proxy-bl5fp\" (UID: \"289078c2-6062-41f7-80a9-1f2e4efaf0e3\") " pod="kube-system/kube-proxy-bl5fp" Jul 11 00:46:38.375850 kubelet[1965]: I0711 00:46:38.375856 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/289078c2-6062-41f7-80a9-1f2e4efaf0e3-lib-modules\") pod \"kube-proxy-bl5fp\" (UID: \"289078c2-6062-41f7-80a9-1f2e4efaf0e3\") " pod="kube-system/kube-proxy-bl5fp" Jul 11 00:46:38.376221 kubelet[1965]: I0711 00:46:38.375871 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9zbhm\" (UniqueName: \"kubernetes.io/projected/289078c2-6062-41f7-80a9-1f2e4efaf0e3-kube-api-access-9zbhm\") pod \"kube-proxy-bl5fp\" (UID: \"289078c2-6062-41f7-80a9-1f2e4efaf0e3\") " pod="kube-system/kube-proxy-bl5fp" Jul 11 00:46:38.483476 kubelet[1965]: I0711 00:46:38.483443 1965 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 11 00:46:38.531857 systemd[1]: Created slice kubepods-besteffort-podc0322c01_089e_4959_b432_30ee52b34265.slice. Jul 11 00:46:38.577724 kubelet[1965]: I0711 00:46:38.577628 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c0322c01-089e-4959-b432-30ee52b34265-var-lib-calico\") pod \"tigera-operator-747864d56d-xzwmb\" (UID: \"c0322c01-089e-4959-b432-30ee52b34265\") " pod="tigera-operator/tigera-operator-747864d56d-xzwmb" Jul 11 00:46:38.577897 kubelet[1965]: I0711 00:46:38.577881 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b6gwn\" (UniqueName: \"kubernetes.io/projected/c0322c01-089e-4959-b432-30ee52b34265-kube-api-access-b6gwn\") pod \"tigera-operator-747864d56d-xzwmb\" (UID: \"c0322c01-089e-4959-b432-30ee52b34265\") " pod="tigera-operator/tigera-operator-747864d56d-xzwmb" Jul 11 00:46:38.629358 kubelet[1965]: E0711 00:46:38.629312 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:38.629880 env[1214]: time="2025-07-11T00:46:38.629839628Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bl5fp,Uid:289078c2-6062-41f7-80a9-1f2e4efaf0e3,Namespace:kube-system,Attempt:0,}" Jul 11 00:46:38.643857 env[1214]: time="2025-07-11T00:46:38.643328047Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:38.643857 env[1214]: time="2025-07-11T00:46:38.643368890Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:38.643857 env[1214]: time="2025-07-11T00:46:38.643379491Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:38.643857 env[1214]: time="2025-07-11T00:46:38.643531382Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/579e522bde2777c1f981225e987b4a447449dd8d9c73d1061f2e247e9e0a6230 pid=2027 runtime=io.containerd.runc.v2 Jul 11 00:46:38.659533 systemd[1]: run-containerd-runc-k8s.io-579e522bde2777c1f981225e987b4a447449dd8d9c73d1061f2e247e9e0a6230-runc.yVJF3b.mount: Deactivated successfully. Jul 11 00:46:38.661180 systemd[1]: Started cri-containerd-579e522bde2777c1f981225e987b4a447449dd8d9c73d1061f2e247e9e0a6230.scope. Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.683369 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 11 00:46:38.683440 kernel: audit: type=1400 audit(1752194798.680:813): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.683463 kernel: audit: type=1400 audit(1752194798.680:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686791 kernel: audit: type=1400 audit(1752194798.680:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.688607 kernel: audit: type=1400 audit(1752194798.680:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.688670 kernel: audit: type=1400 audit(1752194798.680:817): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.692286 kernel: audit: type=1400 audit(1752194798.680:818): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.694190 kernel: audit: type=1400 audit(1752194798.680:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.694241 kernel: audit: type=1400 audit(1752194798.680:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.695960 kernel: audit: type=1400 audit(1752194798.680:821): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.699348 kernel: audit: type=1400 audit(1752194798.680:822): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.680000 audit: BPF prog-id=100 op=LOAD Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2027 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537396535323262646532373737633166393831323235653938376234 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2027 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537396535323262646532373737633166393831323235653938376234 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.686000 audit: BPF prog-id=101 op=LOAD Jul 11 00:46:38.686000 audit[2037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2027 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537396535323262646532373737633166393831323235653938376234 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.687000 audit: BPF prog-id=102 op=LOAD Jul 11 00:46:38.687000 audit[2037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2027 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537396535323262646532373737633166393831323235653938376234 Jul 11 00:46:38.689000 audit: BPF prog-id=102 op=UNLOAD Jul 11 00:46:38.689000 audit: BPF prog-id=101 op=UNLOAD Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { perfmon } for pid=2037 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit[2037]: AVC avc: denied { bpf } for pid=2037 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.689000 audit: BPF prog-id=103 op=LOAD Jul 11 00:46:38.689000 audit[2037]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2027 pid=2037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537396535323262646532373737633166393831323235653938376234 Jul 11 00:46:38.707030 env[1214]: time="2025-07-11T00:46:38.706987056Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-bl5fp,Uid:289078c2-6062-41f7-80a9-1f2e4efaf0e3,Namespace:kube-system,Attempt:0,} returns sandbox id \"579e522bde2777c1f981225e987b4a447449dd8d9c73d1061f2e247e9e0a6230\"" Jul 11 00:46:38.708048 kubelet[1965]: E0711 00:46:38.708005 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:38.715905 env[1214]: time="2025-07-11T00:46:38.715863166Z" level=info msg="CreateContainer within sandbox \"579e522bde2777c1f981225e987b4a447449dd8d9c73d1061f2e247e9e0a6230\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 11 00:46:38.728226 env[1214]: time="2025-07-11T00:46:38.728148134Z" level=info msg="CreateContainer within sandbox \"579e522bde2777c1f981225e987b4a447449dd8d9c73d1061f2e247e9e0a6230\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d30577953523fbc94b54c54d539012a69a4fc26d1f9d1c6f31350c2824a49578\"" Jul 11 00:46:38.728673 env[1214]: time="2025-07-11T00:46:38.728643852Z" level=info msg="StartContainer for \"d30577953523fbc94b54c54d539012a69a4fc26d1f9d1c6f31350c2824a49578\"" Jul 11 00:46:38.743255 systemd[1]: Started cri-containerd-d30577953523fbc94b54c54d539012a69a4fc26d1f9d1c6f31350c2824a49578.scope. Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2027 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433303537373935333532336662633934623534633534643533393031 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit: BPF prog-id=104 op=LOAD Jul 11 00:46:38.764000 audit[2070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2027 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433303537373935333532336662633934623534633534643533393031 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.764000 audit: BPF prog-id=105 op=LOAD Jul 11 00:46:38.764000 audit[2070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2027 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433303537373935333532336662633934623534633534643533393031 Jul 11 00:46:38.764000 audit: BPF prog-id=105 op=UNLOAD Jul 11 00:46:38.765000 audit: BPF prog-id=104 op=UNLOAD Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { perfmon } for pid=2070 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit[2070]: AVC avc: denied { bpf } for pid=2070 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.765000 audit: BPF prog-id=106 op=LOAD Jul 11 00:46:38.765000 audit[2070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2027 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433303537373935333532336662633934623534633534643533393031 Jul 11 00:46:38.781237 env[1214]: time="2025-07-11T00:46:38.781197741Z" level=info msg="StartContainer for \"d30577953523fbc94b54c54d539012a69a4fc26d1f9d1c6f31350c2824a49578\" returns successfully" Jul 11 00:46:38.834532 env[1214]: time="2025-07-11T00:46:38.834448524Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-xzwmb,Uid:c0322c01-089e-4959-b432-30ee52b34265,Namespace:tigera-operator,Attempt:0,}" Jul 11 00:46:38.854628 env[1214]: time="2025-07-11T00:46:38.853936676Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:38.854628 env[1214]: time="2025-07-11T00:46:38.853982479Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:38.854628 env[1214]: time="2025-07-11T00:46:38.853993720Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:38.854783 env[1214]: time="2025-07-11T00:46:38.854652690Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a43b183e893d3d66ed3297f0ee81d335959cfaa63d47bfd2f60ee50a68b57de7 pid=2106 runtime=io.containerd.runc.v2 Jul 11 00:46:38.868047 systemd[1]: Started cri-containerd-a43b183e893d3d66ed3297f0ee81d335959cfaa63d47bfd2f60ee50a68b57de7.scope. Jul 11 00:46:38.875515 kubelet[1965]: E0711 00:46:38.872760 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.890000 audit: BPF prog-id=107 op=LOAD Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2106 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134336231383365383933643364363665643332393766306565383164 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2106 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134336231383365383933643364363665643332393766306565383164 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit: BPF prog-id=108 op=LOAD Jul 11 00:46:38.891000 audit[2117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2106 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134336231383365383933643364363665643332393766306565383164 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit: BPF prog-id=109 op=LOAD Jul 11 00:46:38.891000 audit[2117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2106 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134336231383365383933643364363665643332393766306565383164 Jul 11 00:46:38.891000 audit: BPF prog-id=109 op=UNLOAD Jul 11 00:46:38.891000 audit: BPF prog-id=108 op=UNLOAD Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { perfmon } for pid=2117 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit[2117]: AVC avc: denied { bpf } for pid=2117 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:38.891000 audit: BPF prog-id=110 op=LOAD Jul 11 00:46:38.891000 audit[2117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2106 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134336231383365383933643364363665643332393766306565383164 Jul 11 00:46:38.909507 env[1214]: time="2025-07-11T00:46:38.909455590Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-xzwmb,Uid:c0322c01-089e-4959-b432-30ee52b34265,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a43b183e893d3d66ed3297f0ee81d335959cfaa63d47bfd2f60ee50a68b57de7\"" Jul 11 00:46:38.911905 env[1214]: time="2025-07-11T00:46:38.911872612Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 11 00:46:38.982000 audit[2174]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:38.982000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1f3a8e0 a2=0 a3=1 items=0 ppid=2081 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.982000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:46:38.982000 audit[2175]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:38.982000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5498df0 a2=0 a3=1 items=0 ppid=2081 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.982000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 11 00:46:38.983000 audit[2176]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:38.983000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc80ac820 a2=0 a3=1 items=0 ppid=2081 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.983000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:46:38.985000 audit[2179]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:38.985000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf063570 a2=0 a3=1 items=0 ppid=2081 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 11 00:46:38.986000 audit[2180]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:38.986000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd95c7f30 a2=0 a3=1 items=0 ppid=2081 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.986000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:46:38.987000 audit[2182]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:38.987000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff3922b20 a2=0 a3=1 items=0 ppid=2081 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:38.987000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 11 00:46:39.085000 audit[2183]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.085000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff69bb020 a2=0 a3=1 items=0 ppid=2081 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.085000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:46:39.088000 audit[2185]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.088000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffa4e7ef0 a2=0 a3=1 items=0 ppid=2081 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 11 00:46:39.093000 audit[2188]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.093000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffe7ac660 a2=0 a3=1 items=0 ppid=2081 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 11 00:46:39.094000 audit[2189]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.094000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf0dfd10 a2=0 a3=1 items=0 ppid=2081 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:46:39.096000 audit[2191]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.096000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff169c580 a2=0 a3=1 items=0 ppid=2081 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:46:39.097000 audit[2192]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.097000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd3109490 a2=0 a3=1 items=0 ppid=2081 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:46:39.099000 audit[2194]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.099000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffff397990 a2=0 a3=1 items=0 ppid=2081 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:46:39.102000 audit[2197]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.102000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdb93d170 a2=0 a3=1 items=0 ppid=2081 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 11 00:46:39.103000 audit[2198]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.103000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff61db750 a2=0 a3=1 items=0 ppid=2081 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:46:39.106000 audit[2200]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.106000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe53fe090 a2=0 a3=1 items=0 ppid=2081 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.106000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:46:39.107000 audit[2201]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.107000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1a1f720 a2=0 a3=1 items=0 ppid=2081 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:46:39.110000 audit[2203]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.110000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe9cc28f0 a2=0 a3=1 items=0 ppid=2081 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:46:39.113000 audit[2206]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.113000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff27286d0 a2=0 a3=1 items=0 ppid=2081 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:46:39.116000 audit[2209]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.116000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc0aa4be0 a2=0 a3=1 items=0 ppid=2081 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.116000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:46:39.117000 audit[2210]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.117000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeac2ed90 a2=0 a3=1 items=0 ppid=2081 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:46:39.119000 audit[2212]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.119000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe0ee9020 a2=0 a3=1 items=0 ppid=2081 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:46:39.123000 audit[2215]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.123000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc81df6c0 a2=0 a3=1 items=0 ppid=2081 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:46:39.124000 audit[2216]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.124000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff76e4e20 a2=0 a3=1 items=0 ppid=2081 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:46:39.126000 audit[2218]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 11 00:46:39.126000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd8592290 a2=0 a3=1 items=0 ppid=2081 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.126000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:46:39.149000 audit[2224]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:39.149000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe3e07c80 a2=0 a3=1 items=0 ppid=2081 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:39.159000 audit[2224]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:39.159000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe3e07c80 a2=0 a3=1 items=0 ppid=2081 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:39.162000 audit[2229]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.162000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff1befbe0 a2=0 a3=1 items=0 ppid=2081 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.162000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 11 00:46:39.164000 audit[2231]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.164000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc023de40 a2=0 a3=1 items=0 ppid=2081 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.164000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 11 00:46:39.168000 audit[2234]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.168000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe5dd7500 a2=0 a3=1 items=0 ppid=2081 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.168000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 11 00:46:39.169000 audit[2235]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.169000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd461d760 a2=0 a3=1 items=0 ppid=2081 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 11 00:46:39.171000 audit[2237]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.171000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe49bf590 a2=0 a3=1 items=0 ppid=2081 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.171000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 11 00:46:39.172000 audit[2238]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.172000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7c30030 a2=0 a3=1 items=0 ppid=2081 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.172000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 11 00:46:39.174000 audit[2240]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.174000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdb421760 a2=0 a3=1 items=0 ppid=2081 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.174000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 11 00:46:39.177000 audit[2243]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.177000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffe3688bb0 a2=0 a3=1 items=0 ppid=2081 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.177000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 11 00:46:39.178000 audit[2244]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.178000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9e08b20 a2=0 a3=1 items=0 ppid=2081 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 11 00:46:39.180000 audit[2246]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.180000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff6bbb7a0 a2=0 a3=1 items=0 ppid=2081 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 11 00:46:39.181000 audit[2247]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.181000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc2c2ae30 a2=0 a3=1 items=0 ppid=2081 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.181000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 11 00:46:39.183000 audit[2249]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.183000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffd39bc10 a2=0 a3=1 items=0 ppid=2081 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 11 00:46:39.186000 audit[2252]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.186000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd9de6670 a2=0 a3=1 items=0 ppid=2081 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 11 00:46:39.190000 audit[2255]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.190000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9729760 a2=0 a3=1 items=0 ppid=2081 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 11 00:46:39.191000 audit[2256]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2256 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.191000 audit[2256]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd564c6b0 a2=0 a3=1 items=0 ppid=2081 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 11 00:46:39.193000 audit[2258]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.193000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe4a0dd00 a2=0 a3=1 items=0 ppid=2081 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:46:39.196000 audit[2261]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.196000 audit[2261]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd8c96900 a2=0 a3=1 items=0 ppid=2081 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.196000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 11 00:46:39.197000 audit[2262]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.197000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8f28c70 a2=0 a3=1 items=0 ppid=2081 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 11 00:46:39.199000 audit[2264]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.199000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffc07ef90 a2=0 a3=1 items=0 ppid=2081 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.199000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 11 00:46:39.200000 audit[2265]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.200000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8193f60 a2=0 a3=1 items=0 ppid=2081 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.200000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 11 00:46:39.202000 audit[2267]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.202000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd93fe1a0 a2=0 a3=1 items=0 ppid=2081 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:46:39.205000 audit[2270]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 11 00:46:39.205000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdf8b2450 a2=0 a3=1 items=0 ppid=2081 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.205000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 11 00:46:39.207000 audit[2272]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:46:39.207000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffcb3e9420 a2=0 a3=1 items=0 ppid=2081 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.207000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:39.208000 audit[2272]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 11 00:46:39.208000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffcb3e9420 a2=0 a3=1 items=0 ppid=2081 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:39.208000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:39.793096 kubelet[1965]: E0711 00:46:39.793068 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:39.808392 kubelet[1965]: I0711 00:46:39.808329 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-bl5fp" podStartSLOduration=1.8083151480000001 podStartE2EDuration="1.808315148s" podCreationTimestamp="2025-07-11 00:46:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:46:38.888439442 +0000 UTC m=+7.135199507" watchObservedRunningTime="2025-07-11 00:46:39.808315148 +0000 UTC m=+8.055075213" Jul 11 00:46:39.875138 kubelet[1965]: E0711 00:46:39.875112 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:40.630545 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2127634098.mount: Deactivated successfully. Jul 11 00:46:40.881408 kubelet[1965]: E0711 00:46:40.876951 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:41.289835 env[1214]: time="2025-07-11T00:46:41.289734639Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:41.291462 env[1214]: time="2025-07-11T00:46:41.291428428Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:41.293004 env[1214]: time="2025-07-11T00:46:41.292976648Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:41.294479 env[1214]: time="2025-07-11T00:46:41.294451143Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:41.295066 env[1214]: time="2025-07-11T00:46:41.295036540Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 11 00:46:41.299170 env[1214]: time="2025-07-11T00:46:41.299138404Z" level=info msg="CreateContainer within sandbox \"a43b183e893d3d66ed3297f0ee81d335959cfaa63d47bfd2f60ee50a68b57de7\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 11 00:46:41.307750 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1705926073.mount: Deactivated successfully. Jul 11 00:46:41.309019 env[1214]: time="2025-07-11T00:46:41.308984117Z" level=info msg="CreateContainer within sandbox \"a43b183e893d3d66ed3297f0ee81d335959cfaa63d47bfd2f60ee50a68b57de7\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"29128faf74b80560a3d8d08a7bcb7b14f176cea920885084465034147aeca24d\"" Jul 11 00:46:41.309577 env[1214]: time="2025-07-11T00:46:41.309547874Z" level=info msg="StartContainer for \"29128faf74b80560a3d8d08a7bcb7b14f176cea920885084465034147aeca24d\"" Jul 11 00:46:41.325699 systemd[1]: Started cri-containerd-29128faf74b80560a3d8d08a7bcb7b14f176cea920885084465034147aeca24d.scope. Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit: BPF prog-id=111 op=LOAD Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2106 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:41.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313238666166373462383035363061336438643038613762636237 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2106 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:41.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313238666166373462383035363061336438643038613762636237 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.345000 audit: BPF prog-id=112 op=LOAD Jul 11 00:46:41.345000 audit[2280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2106 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:41.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313238666166373462383035363061336438643038613762636237 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit: BPF prog-id=113 op=LOAD Jul 11 00:46:41.346000 audit[2280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2106 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:41.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313238666166373462383035363061336438643038613762636237 Jul 11 00:46:41.346000 audit: BPF prog-id=113 op=UNLOAD Jul 11 00:46:41.346000 audit: BPF prog-id=112 op=UNLOAD Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { perfmon } for pid=2280 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit[2280]: AVC avc: denied { bpf } for pid=2280 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:41.346000 audit: BPF prog-id=114 op=LOAD Jul 11 00:46:41.346000 audit[2280]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2106 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:41.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313238666166373462383035363061336438643038613762636237 Jul 11 00:46:41.360103 env[1214]: time="2025-07-11T00:46:41.360059602Z" level=info msg="StartContainer for \"29128faf74b80560a3d8d08a7bcb7b14f176cea920885084465034147aeca24d\" returns successfully" Jul 11 00:46:44.236264 kubelet[1965]: E0711 00:46:44.235912 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:44.261713 kubelet[1965]: I0711 00:46:44.261658 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-xzwmb" podStartSLOduration=3.876119211 podStartE2EDuration="6.261644545s" podCreationTimestamp="2025-07-11 00:46:38 +0000 UTC" firstStartedPulling="2025-07-11 00:46:38.910615237 +0000 UTC m=+7.157375302" lastFinishedPulling="2025-07-11 00:46:41.296140571 +0000 UTC m=+9.542900636" observedRunningTime="2025-07-11 00:46:41.888023955 +0000 UTC m=+10.134784220" watchObservedRunningTime="2025-07-11 00:46:44.261644545 +0000 UTC m=+12.508404610" Jul 11 00:46:45.025690 update_engine[1206]: I0711 00:46:45.025331 1206 update_attempter.cc:509] Updating boot flags... Jul 11 00:46:46.530776 sudo[1351]: pam_unix(sudo:session): session closed for user root Jul 11 00:46:46.529000 audit[1351]: USER_END pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:46.531372 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 11 00:46:46.531434 kernel: audit: type=1106 audit(1752194806.529:924): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:46.530000 audit[1351]: CRED_DISP pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:46.535617 kernel: audit: type=1104 audit(1752194806.530:925): pid=1351 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 11 00:46:46.539867 sshd[1348]: pam_unix(sshd:session): session closed for user core Jul 11 00:46:46.540000 audit[1348]: USER_END pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:46.542459 systemd[1]: sshd@6-10.0.0.3:22-10.0.0.1:47612.service: Deactivated successfully. Jul 11 00:46:46.540000 audit[1348]: CRED_DISP pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:46.544988 systemd[1]: session-7.scope: Deactivated successfully. Jul 11 00:46:46.545160 systemd[1]: session-7.scope: Consumed 8.874s CPU time. Jul 11 00:46:46.546249 kernel: audit: type=1106 audit(1752194806.540:926): pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:46.546290 kernel: audit: type=1104 audit(1752194806.540:927): pid=1348 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:46:46.546708 systemd-logind[1205]: Session 7 logged out. Waiting for processes to exit. Jul 11 00:46:46.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.3:22-10.0.0.1:47612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:46.549124 kernel: audit: type=1131 audit(1752194806.541:928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.3:22-10.0.0.1:47612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:46:46.549467 systemd-logind[1205]: Removed session 7. Jul 11 00:46:46.964820 kubelet[1965]: E0711 00:46:46.964719 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:47.705000 audit[2377]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:47.707945 kernel: audit: type=1325 audit(1752194807.705:929): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:47.705000 audit[2377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffce098020 a2=0 a3=1 items=0 ppid=2081 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:47.705000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:47.713388 kernel: audit: type=1300 audit(1752194807.705:929): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffce098020 a2=0 a3=1 items=0 ppid=2081 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:47.713466 kernel: audit: type=1327 audit(1752194807.705:929): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:47.716000 audit[2377]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:47.716000 audit[2377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffce098020 a2=0 a3=1 items=0 ppid=2081 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:47.722596 kernel: audit: type=1325 audit(1752194807.716:930): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:47.722682 kernel: audit: type=1300 audit(1752194807.716:930): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffce098020 a2=0 a3=1 items=0 ppid=2081 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:47.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:47.731000 audit[2379]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:47.731000 audit[2379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffeee53820 a2=0 a3=1 items=0 ppid=2081 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:47.731000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:47.736000 audit[2379]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:47.736000 audit[2379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeee53820 a2=0 a3=1 items=0 ppid=2081 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:47.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:51.228000 audit[2382]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:51.228000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff11264e0 a2=0 a3=1 items=0 ppid=2081 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.228000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:51.233000 audit[2382]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:51.233000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff11264e0 a2=0 a3=1 items=0 ppid=2081 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.233000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:51.270000 audit[2384]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:51.270000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd76b68f0 a2=0 a3=1 items=0 ppid=2081 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.270000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:51.275000 audit[2384]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:51.275000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd76b68f0 a2=0 a3=1 items=0 ppid=2081 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:51.351748 systemd[1]: Created slice kubepods-besteffort-pod7bac8847_7083_4a81_96b1_cfdb1e5fd74d.slice. Jul 11 00:46:51.370819 kubelet[1965]: I0711 00:46:51.370774 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7bac8847-7083-4a81-96b1-cfdb1e5fd74d-tigera-ca-bundle\") pod \"calico-typha-7fd6b79fc5-rzrwx\" (UID: \"7bac8847-7083-4a81-96b1-cfdb1e5fd74d\") " pod="calico-system/calico-typha-7fd6b79fc5-rzrwx" Jul 11 00:46:51.370819 kubelet[1965]: I0711 00:46:51.370822 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-79wkq\" (UniqueName: \"kubernetes.io/projected/7bac8847-7083-4a81-96b1-cfdb1e5fd74d-kube-api-access-79wkq\") pod \"calico-typha-7fd6b79fc5-rzrwx\" (UID: \"7bac8847-7083-4a81-96b1-cfdb1e5fd74d\") " pod="calico-system/calico-typha-7fd6b79fc5-rzrwx" Jul 11 00:46:51.371175 kubelet[1965]: I0711 00:46:51.370846 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7bac8847-7083-4a81-96b1-cfdb1e5fd74d-typha-certs\") pod \"calico-typha-7fd6b79fc5-rzrwx\" (UID: \"7bac8847-7083-4a81-96b1-cfdb1e5fd74d\") " pod="calico-system/calico-typha-7fd6b79fc5-rzrwx" Jul 11 00:46:51.656721 kubelet[1965]: E0711 00:46:51.656632 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:51.657730 env[1214]: time="2025-07-11T00:46:51.657361995Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7fd6b79fc5-rzrwx,Uid:7bac8847-7083-4a81-96b1-cfdb1e5fd74d,Namespace:calico-system,Attempt:0,}" Jul 11 00:46:51.675132 env[1214]: time="2025-07-11T00:46:51.675064251Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:51.675132 env[1214]: time="2025-07-11T00:46:51.675104292Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:51.675293 env[1214]: time="2025-07-11T00:46:51.675114613Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:51.675803 env[1214]: time="2025-07-11T00:46:51.675733797Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8772b41ea9e195971bda3f07d874c2e1ca92f3269857238a48a5682a3d959b16 pid=2393 runtime=io.containerd.runc.v2 Jul 11 00:46:51.692179 systemd[1]: Created slice kubepods-besteffort-pod01aa7625_59fd_4cb5_abad_5a32b4c2e496.slice. Jul 11 00:46:51.716335 systemd[1]: Started cri-containerd-8772b41ea9e195971bda3f07d874c2e1ca92f3269857238a48a5682a3d959b16.scope. Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.746277 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 11 00:46:51.746401 kernel: audit: type=1400 audit(1752194811.743:937): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.746435 kernel: audit: type=1400 audit(1752194811.743:938): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.750120 kernel: audit: type=1400 audit(1752194811.743:939): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.750180 kernel: audit: type=1400 audit(1752194811.743:940): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.753872 kernel: audit: type=1400 audit(1752194811.743:941): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.753943 kernel: audit: type=1400 audit(1752194811.743:942): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.758179 kernel: audit: type=1400 audit(1752194811.743:943): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.760452 kernel: audit: type=1400 audit(1752194811.743:944): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.760515 kernel: audit: type=1400 audit(1752194811.743:945): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.764180 kernel: audit: type=1400 audit(1752194811.743:946): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.743000 audit: BPF prog-id=115 op=LOAD Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2393 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837373262343165613965313935393731626461336630376438373463 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2393 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837373262343165613965313935393731626461336630376438373463 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.748000 audit: BPF prog-id=116 op=LOAD Jul 11 00:46:51.748000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2393 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837373262343165613965313935393731626461336630376438373463 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.749000 audit: BPF prog-id=117 op=LOAD Jul 11 00:46:51.749000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2393 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837373262343165613965313935393731626461336630376438373463 Jul 11 00:46:51.751000 audit: BPF prog-id=117 op=UNLOAD Jul 11 00:46:51.751000 audit: BPF prog-id=116 op=UNLOAD Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:51.751000 audit: BPF prog-id=118 op=LOAD Jul 11 00:46:51.751000 audit[2402]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2393 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:51.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837373262343165613965313935393731626461336630376438373463 Jul 11 00:46:51.774667 kubelet[1965]: I0711 00:46:51.774635 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-cni-log-dir\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774801 kubelet[1965]: I0711 00:46:51.774672 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/01aa7625-59fd-4cb5-abad-5a32b4c2e496-node-certs\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774801 kubelet[1965]: I0711 00:46:51.774691 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-cni-net-dir\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774801 kubelet[1965]: I0711 00:46:51.774707 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-var-lib-calico\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774801 kubelet[1965]: I0711 00:46:51.774722 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-var-run-calico\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774801 kubelet[1965]: I0711 00:46:51.774748 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-cni-bin-dir\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774994 kubelet[1965]: I0711 00:46:51.774763 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lhhdp\" (UniqueName: \"kubernetes.io/projected/01aa7625-59fd-4cb5-abad-5a32b4c2e496-kube-api-access-lhhdp\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774994 kubelet[1965]: I0711 00:46:51.774783 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-flexvol-driver-host\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774994 kubelet[1965]: I0711 00:46:51.774798 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-lib-modules\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774994 kubelet[1965]: I0711 00:46:51.774812 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-policysync\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.774994 kubelet[1965]: I0711 00:46:51.774827 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/01aa7625-59fd-4cb5-abad-5a32b4c2e496-tigera-ca-bundle\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.775125 kubelet[1965]: I0711 00:46:51.774841 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/01aa7625-59fd-4cb5-abad-5a32b4c2e496-xtables-lock\") pod \"calico-node-lxggr\" (UID: \"01aa7625-59fd-4cb5-abad-5a32b4c2e496\") " pod="calico-system/calico-node-lxggr" Jul 11 00:46:51.782307 env[1214]: time="2025-07-11T00:46:51.782231144Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7fd6b79fc5-rzrwx,Uid:7bac8847-7083-4a81-96b1-cfdb1e5fd74d,Namespace:calico-system,Attempt:0,} returns sandbox id \"8772b41ea9e195971bda3f07d874c2e1ca92f3269857238a48a5682a3d959b16\"" Jul 11 00:46:51.783764 kubelet[1965]: E0711 00:46:51.782963 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:51.785040 env[1214]: time="2025-07-11T00:46:51.784975452Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876224 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877024 kubelet[1965]: W0711 00:46:51.876245 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876268 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876435 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877024 kubelet[1965]: W0711 00:46:51.876443 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876452 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876572 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877024 kubelet[1965]: W0711 00:46:51.876580 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876587 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877024 kubelet[1965]: E0711 00:46:51.876737 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877355 kubelet[1965]: W0711 00:46:51.876744 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877355 kubelet[1965]: E0711 00:46:51.876752 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877355 kubelet[1965]: E0711 00:46:51.876978 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877355 kubelet[1965]: W0711 00:46:51.876988 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877355 kubelet[1965]: E0711 00:46:51.876998 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877355 kubelet[1965]: E0711 00:46:51.877185 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877355 kubelet[1965]: W0711 00:46:51.877265 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877355 kubelet[1965]: E0711 00:46:51.877276 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877532 kubelet[1965]: E0711 00:46:51.877501 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877532 kubelet[1965]: W0711 00:46:51.877513 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877532 kubelet[1965]: E0711 00:46:51.877523 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877704 kubelet[1965]: E0711 00:46:51.877685 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877704 kubelet[1965]: W0711 00:46:51.877697 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.877704 kubelet[1965]: E0711 00:46:51.877708 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.877953 kubelet[1965]: E0711 00:46:51.877916 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.877953 kubelet[1965]: W0711 00:46:51.877942 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.878048 kubelet[1965]: E0711 00:46:51.877953 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.878148 kubelet[1965]: E0711 00:46:51.878130 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.878148 kubelet[1965]: W0711 00:46:51.878140 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.878148 kubelet[1965]: E0711 00:46:51.878150 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.878419 kubelet[1965]: E0711 00:46:51.878387 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.878419 kubelet[1965]: W0711 00:46:51.878402 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.878419 kubelet[1965]: E0711 00:46:51.878412 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.879062 kubelet[1965]: E0711 00:46:51.879038 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.879062 kubelet[1965]: W0711 00:46:51.879057 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.879178 kubelet[1965]: E0711 00:46:51.879068 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.879415 kubelet[1965]: E0711 00:46:51.879305 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.879415 kubelet[1965]: W0711 00:46:51.879320 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.879415 kubelet[1965]: E0711 00:46:51.879330 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.879698 kubelet[1965]: E0711 00:46:51.879679 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.879754 kubelet[1965]: W0711 00:46:51.879697 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.879754 kubelet[1965]: E0711 00:46:51.879708 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.879963 kubelet[1965]: E0711 00:46:51.879943 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.879963 kubelet[1965]: W0711 00:46:51.879958 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.880039 kubelet[1965]: E0711 00:46:51.879969 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.880143 kubelet[1965]: E0711 00:46:51.880126 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.880143 kubelet[1965]: W0711 00:46:51.880139 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.880219 kubelet[1965]: E0711 00:46:51.880154 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.883807 kubelet[1965]: E0711 00:46:51.883700 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.883807 kubelet[1965]: W0711 00:46:51.883724 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.883807 kubelet[1965]: E0711 00:46:51.883744 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.883966 kubelet[1965]: E0711 00:46:51.883955 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.883966 kubelet[1965]: W0711 00:46:51.883964 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.884025 kubelet[1965]: E0711 00:46:51.883974 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.884128 kubelet[1965]: E0711 00:46:51.884107 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.884128 kubelet[1965]: W0711 00:46:51.884121 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.884192 kubelet[1965]: E0711 00:46:51.884134 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.884321 kubelet[1965]: E0711 00:46:51.884295 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.884321 kubelet[1965]: W0711 00:46:51.884310 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.884321 kubelet[1965]: E0711 00:46:51.884319 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.884481 kubelet[1965]: E0711 00:46:51.884468 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.884481 kubelet[1965]: W0711 00:46:51.884481 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.884537 kubelet[1965]: E0711 00:46:51.884488 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.884632 kubelet[1965]: E0711 00:46:51.884619 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.884632 kubelet[1965]: W0711 00:46:51.884631 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.884684 kubelet[1965]: E0711 00:46:51.884639 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.884786 kubelet[1965]: E0711 00:46:51.884772 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.884786 kubelet[1965]: W0711 00:46:51.884785 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.884836 kubelet[1965]: E0711 00:46:51.884793 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.884961 kubelet[1965]: E0711 00:46:51.884917 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.884961 kubelet[1965]: W0711 00:46:51.884955 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.885026 kubelet[1965]: E0711 00:46:51.884964 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.885479 kubelet[1965]: E0711 00:46:51.885453 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.885479 kubelet[1965]: W0711 00:46:51.885468 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.885479 kubelet[1965]: E0711 00:46:51.885479 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.885677 kubelet[1965]: E0711 00:46:51.885664 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.885677 kubelet[1965]: W0711 00:46:51.885675 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.885754 kubelet[1965]: E0711 00:46:51.885683 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.885860 kubelet[1965]: E0711 00:46:51.885848 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.885860 kubelet[1965]: W0711 00:46:51.885859 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.885936 kubelet[1965]: E0711 00:46:51.885868 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.886102 kubelet[1965]: E0711 00:46:51.886088 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.886102 kubelet[1965]: W0711 00:46:51.886101 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.886170 kubelet[1965]: E0711 00:46:51.886111 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.886306 kubelet[1965]: E0711 00:46:51.886293 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.886306 kubelet[1965]: W0711 00:46:51.886304 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.886369 kubelet[1965]: E0711 00:46:51.886312 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.886471 kubelet[1965]: E0711 00:46:51.886460 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.886519 kubelet[1965]: W0711 00:46:51.886471 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.886519 kubelet[1965]: E0711 00:46:51.886495 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.886657 kubelet[1965]: E0711 00:46:51.886643 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.886657 kubelet[1965]: W0711 00:46:51.886655 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.886716 kubelet[1965]: E0711 00:46:51.886664 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.886833 kubelet[1965]: E0711 00:46:51.886821 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.886833 kubelet[1965]: W0711 00:46:51.886832 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.886902 kubelet[1965]: E0711 00:46:51.886840 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.887023 kubelet[1965]: E0711 00:46:51.887012 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.887056 kubelet[1965]: W0711 00:46:51.887023 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.887056 kubelet[1965]: E0711 00:46:51.887033 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.887239 kubelet[1965]: E0711 00:46:51.887227 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.887239 kubelet[1965]: W0711 00:46:51.887238 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.887300 kubelet[1965]: E0711 00:46:51.887247 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.888199 kubelet[1965]: E0711 00:46:51.888184 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.888199 kubelet[1965]: W0711 00:46:51.888198 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.888278 kubelet[1965]: E0711 00:46:51.888209 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.889045 kubelet[1965]: E0711 00:46:51.889029 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:51.889083 kubelet[1965]: W0711 00:46:51.889047 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:51.889083 kubelet[1965]: E0711 00:46:51.889061 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:51.972656 kubelet[1965]: E0711 00:46:51.972558 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bpjbx" podUID="d048fd00-e37a-441c-8b1c-ff220212c236" Jul 11 00:46:51.995291 env[1214]: time="2025-07-11T00:46:51.995249438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lxggr,Uid:01aa7625-59fd-4cb5-abad-5a32b4c2e496,Namespace:calico-system,Attempt:0,}" Jul 11 00:46:52.010320 env[1214]: time="2025-07-11T00:46:52.010250932Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:46:52.010320 env[1214]: time="2025-07-11T00:46:52.010292534Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:46:52.010320 env[1214]: time="2025-07-11T00:46:52.010303054Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:46:52.010484 env[1214]: time="2025-07-11T00:46:52.010442779Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa pid=2474 runtime=io.containerd.runc.v2 Jul 11 00:46:52.020272 systemd[1]: Started cri-containerd-9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa.scope. Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit: BPF prog-id=119 op=LOAD Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2474 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930373866616237346431336234373934653265666137643962386436 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2474 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930373866616237346431336234373934653265666137643962386436 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit: BPF prog-id=120 op=LOAD Jul 11 00:46:52.036000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2474 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930373866616237346431336234373934653265666137643962386436 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit: BPF prog-id=121 op=LOAD Jul 11 00:46:52.036000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2474 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930373866616237346431336234373934653265666137643962386436 Jul 11 00:46:52.036000 audit: BPF prog-id=121 op=UNLOAD Jul 11 00:46:52.036000 audit: BPF prog-id=120 op=UNLOAD Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:52.036000 audit: BPF prog-id=122 op=LOAD Jul 11 00:46:52.036000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2474 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930373866616237346431336234373934653265666137643962386436 Jul 11 00:46:52.048472 env[1214]: time="2025-07-11T00:46:52.048437007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lxggr,Uid:01aa7625-59fd-4cb5-abad-5a32b4c2e496,Namespace:calico-system,Attempt:0,} returns sandbox id \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\"" Jul 11 00:46:52.059014 kubelet[1965]: E0711 00:46:52.058964 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.059014 kubelet[1965]: W0711 00:46:52.058988 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.059014 kubelet[1965]: E0711 00:46:52.059007 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.059248 kubelet[1965]: E0711 00:46:52.059235 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.060113 kubelet[1965]: W0711 00:46:52.059251 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.060164 kubelet[1965]: E0711 00:46:52.060112 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.060294 kubelet[1965]: E0711 00:46:52.060282 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.060294 kubelet[1965]: W0711 00:46:52.060293 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.060364 kubelet[1965]: E0711 00:46:52.060302 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.060449 kubelet[1965]: E0711 00:46:52.060436 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.060449 kubelet[1965]: W0711 00:46:52.060446 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.060516 kubelet[1965]: E0711 00:46:52.060454 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.060604 kubelet[1965]: E0711 00:46:52.060594 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.060604 kubelet[1965]: W0711 00:46:52.060604 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.060666 kubelet[1965]: E0711 00:46:52.060612 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.060740 kubelet[1965]: E0711 00:46:52.060731 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.060740 kubelet[1965]: W0711 00:46:52.060739 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.060805 kubelet[1965]: E0711 00:46:52.060746 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.060875 kubelet[1965]: E0711 00:46:52.060866 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.060875 kubelet[1965]: W0711 00:46:52.060875 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.060959 kubelet[1965]: E0711 00:46:52.060882 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061079 kubelet[1965]: E0711 00:46:52.061066 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.061079 kubelet[1965]: W0711 00:46:52.061078 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.061155 kubelet[1965]: E0711 00:46:52.061088 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061253 kubelet[1965]: E0711 00:46:52.061243 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.061253 kubelet[1965]: W0711 00:46:52.061253 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.061321 kubelet[1965]: E0711 00:46:52.061262 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061393 kubelet[1965]: E0711 00:46:52.061384 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.061393 kubelet[1965]: W0711 00:46:52.061392 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.061459 kubelet[1965]: E0711 00:46:52.061399 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061536 kubelet[1965]: E0711 00:46:52.061527 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.061536 kubelet[1965]: W0711 00:46:52.061535 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.061600 kubelet[1965]: E0711 00:46:52.061542 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061673 kubelet[1965]: E0711 00:46:52.061664 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.061673 kubelet[1965]: W0711 00:46:52.061673 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.061742 kubelet[1965]: E0711 00:46:52.061680 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061816 kubelet[1965]: E0711 00:46:52.061806 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.061850 kubelet[1965]: W0711 00:46:52.061824 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.061850 kubelet[1965]: E0711 00:46:52.061832 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.061973 kubelet[1965]: E0711 00:46:52.061964 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062020 kubelet[1965]: W0711 00:46:52.061973 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062020 kubelet[1965]: E0711 00:46:52.061981 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.062119 kubelet[1965]: E0711 00:46:52.062110 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062119 kubelet[1965]: W0711 00:46:52.062119 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062183 kubelet[1965]: E0711 00:46:52.062127 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.062263 kubelet[1965]: E0711 00:46:52.062253 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062263 kubelet[1965]: W0711 00:46:52.062263 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062326 kubelet[1965]: E0711 00:46:52.062270 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.062415 kubelet[1965]: E0711 00:46:52.062405 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062415 kubelet[1965]: W0711 00:46:52.062415 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062479 kubelet[1965]: E0711 00:46:52.062422 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.062563 kubelet[1965]: E0711 00:46:52.062554 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062563 kubelet[1965]: W0711 00:46:52.062563 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062639 kubelet[1965]: E0711 00:46:52.062570 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.062706 kubelet[1965]: E0711 00:46:52.062689 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062706 kubelet[1965]: W0711 00:46:52.062698 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062706 kubelet[1965]: E0711 00:46:52.062705 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.062834 kubelet[1965]: E0711 00:46:52.062825 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.062834 kubelet[1965]: W0711 00:46:52.062834 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.062897 kubelet[1965]: E0711 00:46:52.062842 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.081719 kubelet[1965]: E0711 00:46:52.081577 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.081719 kubelet[1965]: W0711 00:46:52.081593 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.081719 kubelet[1965]: E0711 00:46:52.081605 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.081719 kubelet[1965]: I0711 00:46:52.081626 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d048fd00-e37a-441c-8b1c-ff220212c236-registration-dir\") pod \"csi-node-driver-bpjbx\" (UID: \"d048fd00-e37a-441c-8b1c-ff220212c236\") " pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:52.084641 kubelet[1965]: E0711 00:46:52.084466 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.084641 kubelet[1965]: W0711 00:46:52.084487 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.084641 kubelet[1965]: E0711 00:46:52.084501 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.084641 kubelet[1965]: I0711 00:46:52.084524 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d048fd00-e37a-441c-8b1c-ff220212c236-kubelet-dir\") pod \"csi-node-driver-bpjbx\" (UID: \"d048fd00-e37a-441c-8b1c-ff220212c236\") " pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:52.084812 kubelet[1965]: E0711 00:46:52.084717 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.084812 kubelet[1965]: W0711 00:46:52.084730 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.084812 kubelet[1965]: E0711 00:46:52.084740 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.084886 kubelet[1965]: I0711 00:46:52.084807 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d048fd00-e37a-441c-8b1c-ff220212c236-socket-dir\") pod \"csi-node-driver-bpjbx\" (UID: \"d048fd00-e37a-441c-8b1c-ff220212c236\") " pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:52.085338 kubelet[1965]: E0711 00:46:52.085206 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.085338 kubelet[1965]: W0711 00:46:52.085230 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.085338 kubelet[1965]: E0711 00:46:52.085245 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.085555 kubelet[1965]: E0711 00:46:52.085509 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.085555 kubelet[1965]: W0711 00:46:52.085522 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.085555 kubelet[1965]: E0711 00:46:52.085532 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.085719 kubelet[1965]: E0711 00:46:52.085691 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.085719 kubelet[1965]: W0711 00:46:52.085705 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.085719 kubelet[1965]: E0711 00:46:52.085716 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.085861 kubelet[1965]: E0711 00:46:52.085851 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.085861 kubelet[1965]: W0711 00:46:52.085860 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.085916 kubelet[1965]: E0711 00:46:52.085868 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.085916 kubelet[1965]: I0711 00:46:52.085895 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d048fd00-e37a-441c-8b1c-ff220212c236-varrun\") pod \"csi-node-driver-bpjbx\" (UID: \"d048fd00-e37a-441c-8b1c-ff220212c236\") " pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:52.086094 kubelet[1965]: E0711 00:46:52.086066 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.086094 kubelet[1965]: W0711 00:46:52.086085 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.086152 kubelet[1965]: E0711 00:46:52.086097 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.086286 kubelet[1965]: E0711 00:46:52.086274 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.086286 kubelet[1965]: W0711 00:46:52.086285 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.086340 kubelet[1965]: E0711 00:46:52.086293 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.086435 kubelet[1965]: E0711 00:46:52.086425 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.086465 kubelet[1965]: W0711 00:46:52.086435 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.086465 kubelet[1965]: E0711 00:46:52.086442 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.086593 kubelet[1965]: E0711 00:46:52.086583 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.086593 kubelet[1965]: W0711 00:46:52.086592 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.086642 kubelet[1965]: E0711 00:46:52.086600 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.086781 kubelet[1965]: E0711 00:46:52.086766 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.086807 kubelet[1965]: W0711 00:46:52.086781 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.086807 kubelet[1965]: E0711 00:46:52.086792 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.086960 kubelet[1965]: E0711 00:46:52.086950 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.086993 kubelet[1965]: W0711 00:46:52.086960 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.086993 kubelet[1965]: E0711 00:46:52.086968 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.086993 kubelet[1965]: I0711 00:46:52.086985 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nkjhh\" (UniqueName: \"kubernetes.io/projected/d048fd00-e37a-441c-8b1c-ff220212c236-kube-api-access-nkjhh\") pod \"csi-node-driver-bpjbx\" (UID: \"d048fd00-e37a-441c-8b1c-ff220212c236\") " pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:52.087154 kubelet[1965]: E0711 00:46:52.087143 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.087184 kubelet[1965]: W0711 00:46:52.087154 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.087184 kubelet[1965]: E0711 00:46:52.087163 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.087300 kubelet[1965]: E0711 00:46:52.087290 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.087300 kubelet[1965]: W0711 00:46:52.087299 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.087357 kubelet[1965]: E0711 00:46:52.087307 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.188311 kubelet[1965]: E0711 00:46:52.188273 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.188311 kubelet[1965]: W0711 00:46:52.188295 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.188311 kubelet[1965]: E0711 00:46:52.188314 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.188524 kubelet[1965]: E0711 00:46:52.188500 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.188524 kubelet[1965]: W0711 00:46:52.188512 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.188524 kubelet[1965]: E0711 00:46:52.188521 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.188744 kubelet[1965]: E0711 00:46:52.188724 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.188744 kubelet[1965]: W0711 00:46:52.188736 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.188744 kubelet[1965]: E0711 00:46:52.188744 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.189019 kubelet[1965]: E0711 00:46:52.188992 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.189019 kubelet[1965]: W0711 00:46:52.189013 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.189075 kubelet[1965]: E0711 00:46:52.189027 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.189209 kubelet[1965]: E0711 00:46:52.189190 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.189209 kubelet[1965]: W0711 00:46:52.189201 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.189209 kubelet[1965]: E0711 00:46:52.189209 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.189378 kubelet[1965]: E0711 00:46:52.189367 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.189408 kubelet[1965]: W0711 00:46:52.189378 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.189408 kubelet[1965]: E0711 00:46:52.189387 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.189603 kubelet[1965]: E0711 00:46:52.189591 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.189628 kubelet[1965]: W0711 00:46:52.189603 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.189628 kubelet[1965]: E0711 00:46:52.189618 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.189827 kubelet[1965]: E0711 00:46:52.189813 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.189827 kubelet[1965]: W0711 00:46:52.189826 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.189892 kubelet[1965]: E0711 00:46:52.189835 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.190035 kubelet[1965]: E0711 00:46:52.190022 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.190073 kubelet[1965]: W0711 00:46:52.190037 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.190073 kubelet[1965]: E0711 00:46:52.190046 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.190198 kubelet[1965]: E0711 00:46:52.190187 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.190198 kubelet[1965]: W0711 00:46:52.190198 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.190257 kubelet[1965]: E0711 00:46:52.190206 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.190412 kubelet[1965]: E0711 00:46:52.190398 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.190439 kubelet[1965]: W0711 00:46:52.190412 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.190439 kubelet[1965]: E0711 00:46:52.190421 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.190576 kubelet[1965]: E0711 00:46:52.190564 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.190576 kubelet[1965]: W0711 00:46:52.190575 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.190626 kubelet[1965]: E0711 00:46:52.190583 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.190766 kubelet[1965]: E0711 00:46:52.190753 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.190766 kubelet[1965]: W0711 00:46:52.190764 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.190827 kubelet[1965]: E0711 00:46:52.190772 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.190953 kubelet[1965]: E0711 00:46:52.190943 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.190953 kubelet[1965]: W0711 00:46:52.190952 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.191011 kubelet[1965]: E0711 00:46:52.190968 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.191199 kubelet[1965]: E0711 00:46:52.191182 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.191199 kubelet[1965]: W0711 00:46:52.191193 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.191277 kubelet[1965]: E0711 00:46:52.191202 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.191396 kubelet[1965]: E0711 00:46:52.191380 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.191396 kubelet[1965]: W0711 00:46:52.191392 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.191471 kubelet[1965]: E0711 00:46:52.191401 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.191576 kubelet[1965]: E0711 00:46:52.191558 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.191576 kubelet[1965]: W0711 00:46:52.191571 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.191635 kubelet[1965]: E0711 00:46:52.191580 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.191772 kubelet[1965]: E0711 00:46:52.191751 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.191772 kubelet[1965]: W0711 00:46:52.191761 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.191772 kubelet[1965]: E0711 00:46:52.191769 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.192098 kubelet[1965]: E0711 00:46:52.192079 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.192098 kubelet[1965]: W0711 00:46:52.192094 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.192197 kubelet[1965]: E0711 00:46:52.192105 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.192522 kubelet[1965]: E0711 00:46:52.192497 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.192522 kubelet[1965]: W0711 00:46:52.192512 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.192522 kubelet[1965]: E0711 00:46:52.192524 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.193192 kubelet[1965]: E0711 00:46:52.192879 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.193192 kubelet[1965]: W0711 00:46:52.192894 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.193192 kubelet[1965]: E0711 00:46:52.192906 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.193192 kubelet[1965]: E0711 00:46:52.193076 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.193192 kubelet[1965]: W0711 00:46:52.193086 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.193192 kubelet[1965]: E0711 00:46:52.193096 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.193557 kubelet[1965]: E0711 00:46:52.193449 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.193557 kubelet[1965]: W0711 00:46:52.193462 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.193557 kubelet[1965]: E0711 00:46:52.193473 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.193774 kubelet[1965]: E0711 00:46:52.193703 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.193774 kubelet[1965]: W0711 00:46:52.193714 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.193774 kubelet[1965]: E0711 00:46:52.193724 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.194273 kubelet[1965]: E0711 00:46:52.194216 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.194273 kubelet[1965]: W0711 00:46:52.194238 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.194273 kubelet[1965]: E0711 00:46:52.194251 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.204567 kubelet[1965]: E0711 00:46:52.204541 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:52.204567 kubelet[1965]: W0711 00:46:52.204561 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:52.204667 kubelet[1965]: E0711 00:46:52.204579 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:52.289000 audit[2572]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:52.289000 audit[2572]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffedcb64c0 a2=0 a3=1 items=0 ppid=2081 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.289000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:52.296000 audit[2572]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:52.296000 audit[2572]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffedcb64c0 a2=0 a3=1 items=0 ppid=2081 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:52.296000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:52.694813 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1085407531.mount: Deactivated successfully. Jul 11 00:46:53.425915 env[1214]: time="2025-07-11T00:46:53.425873300Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:53.427408 env[1214]: time="2025-07-11T00:46:53.427378554Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:53.429455 env[1214]: time="2025-07-11T00:46:53.429419948Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:53.431300 env[1214]: time="2025-07-11T00:46:53.431255854Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:53.431967 env[1214]: time="2025-07-11T00:46:53.431622427Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 11 00:46:53.432849 env[1214]: time="2025-07-11T00:46:53.432825790Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 11 00:46:53.444336 env[1214]: time="2025-07-11T00:46:53.444303803Z" level=info msg="CreateContainer within sandbox \"8772b41ea9e195971bda3f07d874c2e1ca92f3269857238a48a5682a3d959b16\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 11 00:46:53.454826 env[1214]: time="2025-07-11T00:46:53.454785140Z" level=info msg="CreateContainer within sandbox \"8772b41ea9e195971bda3f07d874c2e1ca92f3269857238a48a5682a3d959b16\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"3079c8b694693b4e6fc94572f61cefb514c178b93ea265ee31243d033a8fab01\"" Jul 11 00:46:53.456391 env[1214]: time="2025-07-11T00:46:53.455454684Z" level=info msg="StartContainer for \"3079c8b694693b4e6fc94572f61cefb514c178b93ea265ee31243d033a8fab01\"" Jul 11 00:46:53.469219 systemd[1]: Started cri-containerd-3079c8b694693b4e6fc94572f61cefb514c178b93ea265ee31243d033a8fab01.scope. Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit: BPF prog-id=123 op=LOAD Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2393 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330373963386236393436393362346536666339343537326636316365 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2393 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330373963386236393436393362346536666339343537326636316365 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit: BPF prog-id=124 op=LOAD Jul 11 00:46:53.520000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2393 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330373963386236393436393362346536666339343537326636316365 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.520000 audit: BPF prog-id=125 op=LOAD Jul 11 00:46:53.520000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2393 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330373963386236393436393362346536666339343537326636316365 Jul 11 00:46:53.520000 audit: BPF prog-id=125 op=UNLOAD Jul 11 00:46:53.520000 audit: BPF prog-id=124 op=UNLOAD Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:53.521000 audit: BPF prog-id=126 op=LOAD Jul 11 00:46:53.521000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2393 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330373963386236393436393362346536666339343537326636316365 Jul 11 00:46:53.542370 env[1214]: time="2025-07-11T00:46:53.542311889Z" level=info msg="StartContainer for \"3079c8b694693b4e6fc94572f61cefb514c178b93ea265ee31243d033a8fab01\" returns successfully" Jul 11 00:46:53.848237 kubelet[1965]: E0711 00:46:53.848180 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bpjbx" podUID="d048fd00-e37a-441c-8b1c-ff220212c236" Jul 11 00:46:53.898459 kubelet[1965]: E0711 00:46:53.898431 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:53.908336 kubelet[1965]: I0711 00:46:53.908274 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7fd6b79fc5-rzrwx" podStartSLOduration=1.259836013 podStartE2EDuration="2.908263214s" podCreationTimestamp="2025-07-11 00:46:51 +0000 UTC" firstStartedPulling="2025-07-11 00:46:51.784286545 +0000 UTC m=+20.031046570" lastFinishedPulling="2025-07-11 00:46:53.432713746 +0000 UTC m=+21.679473771" observedRunningTime="2025-07-11 00:46:53.90815101 +0000 UTC m=+22.154911075" watchObservedRunningTime="2025-07-11 00:46:53.908263214 +0000 UTC m=+22.155023239" Jul 11 00:46:53.930000 audit[2618]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:53.930000 audit[2618]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdf482090 a2=0 a3=1 items=0 ppid=2081 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.930000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:53.937000 audit[2618]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2618 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:46:53.937000 audit[2618]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdf482090 a2=0 a3=1 items=0 ppid=2081 pid=2618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:53.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:46:53.972552 kubelet[1965]: E0711 00:46:53.972436 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.972552 kubelet[1965]: W0711 00:46:53.972457 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.972552 kubelet[1965]: E0711 00:46:53.972474 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.972878 kubelet[1965]: E0711 00:46:53.972749 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.972878 kubelet[1965]: W0711 00:46:53.972762 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.972878 kubelet[1965]: E0711 00:46:53.972801 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.973164 kubelet[1965]: E0711 00:46:53.973059 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.973164 kubelet[1965]: W0711 00:46:53.973073 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.973164 kubelet[1965]: E0711 00:46:53.973083 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.973440 kubelet[1965]: E0711 00:46:53.973330 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.973440 kubelet[1965]: W0711 00:46:53.973342 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.973440 kubelet[1965]: E0711 00:46:53.973351 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.973694 kubelet[1965]: E0711 00:46:53.973597 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.973694 kubelet[1965]: W0711 00:46:53.973609 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.973694 kubelet[1965]: E0711 00:46:53.973619 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.973948 kubelet[1965]: E0711 00:46:53.973842 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.973948 kubelet[1965]: W0711 00:46:53.973853 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.973948 kubelet[1965]: E0711 00:46:53.973863 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.974198 kubelet[1965]: E0711 00:46:53.974097 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.974198 kubelet[1965]: W0711 00:46:53.974111 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.974198 kubelet[1965]: E0711 00:46:53.974121 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.974480 kubelet[1965]: E0711 00:46:53.974374 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.974480 kubelet[1965]: W0711 00:46:53.974387 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.974480 kubelet[1965]: E0711 00:46:53.974396 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.974726 kubelet[1965]: E0711 00:46:53.974637 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.974726 kubelet[1965]: W0711 00:46:53.974648 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.974726 kubelet[1965]: E0711 00:46:53.974658 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.974944 kubelet[1965]: E0711 00:46:53.974872 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.974944 kubelet[1965]: W0711 00:46:53.974883 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.974944 kubelet[1965]: E0711 00:46:53.974892 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.975291 kubelet[1965]: E0711 00:46:53.975181 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.975291 kubelet[1965]: W0711 00:46:53.975195 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.975291 kubelet[1965]: E0711 00:46:53.975204 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.975559 kubelet[1965]: E0711 00:46:53.975451 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.975559 kubelet[1965]: W0711 00:46:53.975464 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.975559 kubelet[1965]: E0711 00:46:53.975475 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.975719 kubelet[1965]: E0711 00:46:53.975707 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.975778 kubelet[1965]: W0711 00:46:53.975767 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.975838 kubelet[1965]: E0711 00:46:53.975827 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.976062 kubelet[1965]: E0711 00:46:53.976049 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.976134 kubelet[1965]: W0711 00:46:53.976122 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.976204 kubelet[1965]: E0711 00:46:53.976192 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:53.976427 kubelet[1965]: E0711 00:46:53.976414 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:53.976501 kubelet[1965]: W0711 00:46:53.976488 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:53.976565 kubelet[1965]: E0711 00:46:53.976554 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.001751 kubelet[1965]: E0711 00:46:54.001732 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.002007 kubelet[1965]: W0711 00:46:54.001988 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.002102 kubelet[1965]: E0711 00:46:54.002089 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.002742 kubelet[1965]: E0711 00:46:54.002723 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.002848 kubelet[1965]: W0711 00:46:54.002824 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.003092 kubelet[1965]: E0711 00:46:54.003075 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.003349 kubelet[1965]: E0711 00:46:54.003334 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.003504 kubelet[1965]: W0711 00:46:54.003452 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.003585 kubelet[1965]: E0711 00:46:54.003572 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.004054 kubelet[1965]: E0711 00:46:54.004036 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.004314 kubelet[1965]: W0711 00:46:54.004294 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.004414 kubelet[1965]: E0711 00:46:54.004400 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.004682 kubelet[1965]: E0711 00:46:54.004666 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.004853 kubelet[1965]: W0711 00:46:54.004837 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.004947 kubelet[1965]: E0711 00:46:54.004911 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.005228 kubelet[1965]: E0711 00:46:54.005214 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.005320 kubelet[1965]: W0711 00:46:54.005307 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.005386 kubelet[1965]: E0711 00:46:54.005375 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.005602 kubelet[1965]: E0711 00:46:54.005589 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.005680 kubelet[1965]: W0711 00:46:54.005667 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.005796 kubelet[1965]: E0711 00:46:54.005781 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.006706 kubelet[1965]: E0711 00:46:54.006688 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.006804 kubelet[1965]: W0711 00:46:54.006790 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.009507 kubelet[1965]: E0711 00:46:54.006854 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.009507 kubelet[1965]: E0711 00:46:54.009192 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.009507 kubelet[1965]: W0711 00:46:54.009204 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.009507 kubelet[1965]: E0711 00:46:54.009215 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.009507 kubelet[1965]: E0711 00:46:54.009369 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.009507 kubelet[1965]: W0711 00:46:54.009377 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.009507 kubelet[1965]: E0711 00:46:54.009384 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.009769 kubelet[1965]: E0711 00:46:54.009531 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.009769 kubelet[1965]: W0711 00:46:54.009539 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.009769 kubelet[1965]: E0711 00:46:54.009546 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.009769 kubelet[1965]: E0711 00:46:54.009684 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.009769 kubelet[1965]: W0711 00:46:54.009691 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.009769 kubelet[1965]: E0711 00:46:54.009698 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.009852 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.011161 kubelet[1965]: W0711 00:46:54.009859 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.009866 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.010088 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.011161 kubelet[1965]: W0711 00:46:54.010100 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.010112 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.010303 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.011161 kubelet[1965]: W0711 00:46:54.010312 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.010321 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.011161 kubelet[1965]: E0711 00:46:54.010580 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.011459 kubelet[1965]: W0711 00:46:54.010594 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.011459 kubelet[1965]: E0711 00:46:54.010605 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.011459 kubelet[1965]: E0711 00:46:54.010774 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.011459 kubelet[1965]: W0711 00:46:54.010783 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.011459 kubelet[1965]: E0711 00:46:54.010792 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.011459 kubelet[1965]: E0711 00:46:54.010967 1965 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 11 00:46:54.011459 kubelet[1965]: W0711 00:46:54.010977 1965 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 11 00:46:54.011459 kubelet[1965]: E0711 00:46:54.010986 1965 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 11 00:46:54.495411 env[1214]: time="2025-07-11T00:46:54.495373627Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:54.496632 env[1214]: time="2025-07-11T00:46:54.496606349Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:54.499345 env[1214]: time="2025-07-11T00:46:54.499314283Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:54.500969 env[1214]: time="2025-07-11T00:46:54.500939299Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:54.501194 env[1214]: time="2025-07-11T00:46:54.501169307Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 11 00:46:54.505154 env[1214]: time="2025-07-11T00:46:54.505118723Z" level=info msg="CreateContainer within sandbox \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 11 00:46:54.518293 env[1214]: time="2025-07-11T00:46:54.518255936Z" level=info msg="CreateContainer within sandbox \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6\"" Jul 11 00:46:54.518721 env[1214]: time="2025-07-11T00:46:54.518687030Z" level=info msg="StartContainer for \"8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6\"" Jul 11 00:46:54.545947 systemd[1]: run-containerd-runc-k8s.io-8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6-runc.mynkFS.mount: Deactivated successfully. Jul 11 00:46:54.548549 systemd[1]: Started cri-containerd-8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6.scope. Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001975a0 a2=3c a3=0 items=0 ppid=2474 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:54.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863376563363561333065623430633563376361663365383737636636 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit: BPF prog-id=127 op=LOAD Jul 11 00:46:54.576000 audit[2660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001978e0 a2=78 a3=0 items=0 ppid=2474 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:54.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863376563363561333065623430633563376361663365383737636636 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.576000 audit: BPF prog-id=128 op=LOAD Jul 11 00:46:54.576000 audit[2660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000197670 a2=78 a3=0 items=0 ppid=2474 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:54.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863376563363561333065623430633563376361663365383737636636 Jul 11 00:46:54.577000 audit: BPF prog-id=128 op=UNLOAD Jul 11 00:46:54.577000 audit: BPF prog-id=127 op=UNLOAD Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:54.577000 audit: BPF prog-id=129 op=LOAD Jul 11 00:46:54.577000 audit[2660]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000197b40 a2=78 a3=0 items=0 ppid=2474 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:54.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863376563363561333065623430633563376361663365383737636636 Jul 11 00:46:54.591161 env[1214]: time="2025-07-11T00:46:54.591120207Z" level=info msg="StartContainer for \"8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6\" returns successfully" Jul 11 00:46:54.625159 systemd[1]: cri-containerd-8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6.scope: Deactivated successfully. Jul 11 00:46:54.628000 audit: BPF prog-id=129 op=UNLOAD Jul 11 00:46:54.660329 env[1214]: time="2025-07-11T00:46:54.660277190Z" level=info msg="shim disconnected" id=8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6 Jul 11 00:46:54.660329 env[1214]: time="2025-07-11T00:46:54.660325911Z" level=warning msg="cleaning up after shim disconnected" id=8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6 namespace=k8s.io Jul 11 00:46:54.660329 env[1214]: time="2025-07-11T00:46:54.660336072Z" level=info msg="cleaning up dead shim" Jul 11 00:46:54.668031 env[1214]: time="2025-07-11T00:46:54.667997936Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:46:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2700 runtime=io.containerd.runc.v2\n" Jul 11 00:46:54.901133 kubelet[1965]: E0711 00:46:54.901006 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:54.903137 env[1214]: time="2025-07-11T00:46:54.903106518Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 11 00:46:55.514005 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8c7ec65a30eb40c5c7caf3e877cf6fa5a3af77c34b81f7973b56c21dbb931fa6-rootfs.mount: Deactivated successfully. Jul 11 00:46:55.848343 kubelet[1965]: E0711 00:46:55.848227 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bpjbx" podUID="d048fd00-e37a-441c-8b1c-ff220212c236" Jul 11 00:46:55.904197 kubelet[1965]: E0711 00:46:55.903871 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:57.502969 env[1214]: time="2025-07-11T00:46:57.502907773Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:57.504268 env[1214]: time="2025-07-11T00:46:57.504241973Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:57.505844 env[1214]: time="2025-07-11T00:46:57.505822062Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:57.507194 env[1214]: time="2025-07-11T00:46:57.507164862Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:46:57.507624 env[1214]: time="2025-07-11T00:46:57.507589475Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 11 00:46:57.512230 env[1214]: time="2025-07-11T00:46:57.512197176Z" level=info msg="CreateContainer within sandbox \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 11 00:46:57.523548 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1975674547.mount: Deactivated successfully. Jul 11 00:46:57.526936 env[1214]: time="2025-07-11T00:46:57.526857662Z" level=info msg="CreateContainer within sandbox \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2\"" Jul 11 00:46:57.527432 env[1214]: time="2025-07-11T00:46:57.527403599Z" level=info msg="StartContainer for \"5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2\"" Jul 11 00:46:57.547310 systemd[1]: Started cri-containerd-5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2.scope. Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.578340 kernel: kauditd_printk_skb: 217 callbacks suppressed Jul 11 00:46:57.578409 kernel: audit: type=1400 audit(1752194817.576:1002): avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2474 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:57.582579 kernel: audit: type=1300 audit(1752194817.576:1002): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2474 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:57.582623 kernel: audit: type=1327 audit(1752194817.576:1002): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561613636366339356536333233386632653936353538326137616566 Jul 11 00:46:57.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561613636366339356536333233386632653936353538326137616566 Jul 11 00:46:57.584882 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.586560 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.590910 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.591015 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.594303 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.594366 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.597614 kernel: audit: type=1400 audit(1752194817.576:1003): avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.576000 audit: BPF prog-id=130 op=LOAD Jul 11 00:46:57.576000 audit[2726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2474 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:57.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561613636366339356536333233386632653936353538326137616566 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.577000 audit: BPF prog-id=131 op=LOAD Jul 11 00:46:57.577000 audit[2726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2474 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:57.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561613636366339356536333233386632653936353538326137616566 Jul 11 00:46:57.579000 audit: BPF prog-id=131 op=UNLOAD Jul 11 00:46:57.579000 audit: BPF prog-id=130 op=UNLOAD Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { perfmon } for pid=2726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit[2726]: AVC avc: denied { bpf } for pid=2726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:46:57.579000 audit: BPF prog-id=132 op=LOAD Jul 11 00:46:57.579000 audit[2726]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2474 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:46:57.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561613636366339356536333233386632653936353538326137616566 Jul 11 00:46:57.603443 env[1214]: time="2025-07-11T00:46:57.603388114Z" level=info msg="StartContainer for \"5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2\" returns successfully" Jul 11 00:46:57.848841 kubelet[1965]: E0711 00:46:57.848718 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bpjbx" podUID="d048fd00-e37a-441c-8b1c-ff220212c236" Jul 11 00:46:58.249620 env[1214]: time="2025-07-11T00:46:58.249558467Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 11 00:46:58.251816 systemd[1]: cri-containerd-5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2.scope: Deactivated successfully. Jul 11 00:46:58.255000 audit: BPF prog-id=132 op=UNLOAD Jul 11 00:46:58.279122 env[1214]: time="2025-07-11T00:46:58.279075612Z" level=info msg="shim disconnected" id=5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2 Jul 11 00:46:58.279122 env[1214]: time="2025-07-11T00:46:58.279123693Z" level=warning msg="cleaning up after shim disconnected" id=5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2 namespace=k8s.io Jul 11 00:46:58.279349 env[1214]: time="2025-07-11T00:46:58.279135093Z" level=info msg="cleaning up dead shim" Jul 11 00:46:58.285799 env[1214]: time="2025-07-11T00:46:58.285759807Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:46:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2769 runtime=io.containerd.runc.v2\n" Jul 11 00:46:58.326704 kubelet[1965]: I0711 00:46:58.326534 1965 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 11 00:46:58.363449 systemd[1]: Created slice kubepods-besteffort-pod8a625e31_e897_49ed_a12d_8a2ecfe45c50.slice. Jul 11 00:46:58.366245 systemd[1]: Created slice kubepods-besteffort-pod1bb06ba8_233c_4b40_a7d3_425800a79a04.slice. Jul 11 00:46:58.371070 systemd[1]: Created slice kubepods-burstable-pod2265c1eb_36cc_4b19_8dd9_e6e52b6b41f3.slice. Jul 11 00:46:58.379177 systemd[1]: Created slice kubepods-burstable-pod3cc6dd69_6e20_45d6_8c39_7a4c038726dc.slice. Jul 11 00:46:58.383635 systemd[1]: Created slice kubepods-besteffort-pod6b02708e_e615_4eac_9ab2_be849c532b87.slice. Jul 11 00:46:58.389156 systemd[1]: Created slice kubepods-besteffort-pod8154f407_051f_40e9_9da5_21e3ee58e601.slice. Jul 11 00:46:58.394759 systemd[1]: Created slice kubepods-besteffort-pod773bbffc_8696_4271_bbeb_cae72bb8bd55.slice. Jul 11 00:46:58.399180 systemd[1]: Created slice kubepods-besteffort-pod99c6ce1f_23fd_47bb_b62a_3d98170d99a8.slice. Jul 11 00:46:58.440664 kubelet[1965]: I0711 00:46:58.440624 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3cc6dd69-6e20-45d6-8c39-7a4c038726dc-config-volume\") pod \"coredns-674b8bbfcf-xjqbp\" (UID: \"3cc6dd69-6e20-45d6-8c39-7a4c038726dc\") " pod="kube-system/coredns-674b8bbfcf-xjqbp" Jul 11 00:46:58.440664 kubelet[1965]: I0711 00:46:58.440667 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1bb06ba8-233c-4b40-a7d3-425800a79a04-calico-apiserver-certs\") pod \"calico-apiserver-7bd89b55d4-hp5dq\" (UID: \"1bb06ba8-233c-4b40-a7d3-425800a79a04\") " pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" Jul 11 00:46:58.440832 kubelet[1965]: I0711 00:46:58.440687 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/8154f407-051f-40e9-9da5-21e3ee58e601-config\") pod \"goldmane-768f4c5c69-mx7hp\" (UID: \"8154f407-051f-40e9-9da5-21e3ee58e601\") " pod="calico-system/goldmane-768f4c5c69-mx7hp" Jul 11 00:46:58.440832 kubelet[1965]: I0711 00:46:58.440707 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n6td9\" (UniqueName: \"kubernetes.io/projected/8a625e31-e897-49ed-a12d-8a2ecfe45c50-kube-api-access-n6td9\") pod \"calico-kube-controllers-b9fcdc94-2t8zl\" (UID: \"8a625e31-e897-49ed-a12d-8a2ecfe45c50\") " pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" Jul 11 00:46:58.440832 kubelet[1965]: I0711 00:46:58.440726 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3-config-volume\") pod \"coredns-674b8bbfcf-sn48l\" (UID: \"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3\") " pod="kube-system/coredns-674b8bbfcf-sn48l" Jul 11 00:46:58.440832 kubelet[1965]: I0711 00:46:58.440744 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xvssp\" (UniqueName: \"kubernetes.io/projected/2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3-kube-api-access-xvssp\") pod \"coredns-674b8bbfcf-sn48l\" (UID: \"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3\") " pod="kube-system/coredns-674b8bbfcf-sn48l" Jul 11 00:46:58.440832 kubelet[1965]: I0711 00:46:58.440759 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-backend-key-pair\") pod \"whisker-5765cc798d-rvvhj\" (UID: \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\") " pod="calico-system/whisker-5765cc798d-rvvhj" Jul 11 00:46:58.440993 kubelet[1965]: I0711 00:46:58.440776 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/8154f407-051f-40e9-9da5-21e3ee58e601-goldmane-key-pair\") pod \"goldmane-768f4c5c69-mx7hp\" (UID: \"8154f407-051f-40e9-9da5-21e3ee58e601\") " pod="calico-system/goldmane-768f4c5c69-mx7hp" Jul 11 00:46:58.440993 kubelet[1965]: I0711 00:46:58.440791 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k9lfw\" (UniqueName: \"kubernetes.io/projected/773bbffc-8696-4271-bbeb-cae72bb8bd55-kube-api-access-k9lfw\") pod \"calico-apiserver-d9699865b-wgvvx\" (UID: \"773bbffc-8696-4271-bbeb-cae72bb8bd55\") " pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" Jul 11 00:46:58.440993 kubelet[1965]: I0711 00:46:58.440809 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gp8st\" (UniqueName: \"kubernetes.io/projected/3cc6dd69-6e20-45d6-8c39-7a4c038726dc-kube-api-access-gp8st\") pod \"coredns-674b8bbfcf-xjqbp\" (UID: \"3cc6dd69-6e20-45d6-8c39-7a4c038726dc\") " pod="kube-system/coredns-674b8bbfcf-xjqbp" Jul 11 00:46:58.440993 kubelet[1965]: I0711 00:46:58.440825 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6b02708e-e615-4eac-9ab2-be849c532b87-calico-apiserver-certs\") pod \"calico-apiserver-7bd89b55d4-q7fh6\" (UID: \"6b02708e-e615-4eac-9ab2-be849c532b87\") " pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" Jul 11 00:46:58.440993 kubelet[1965]: I0711 00:46:58.440843 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-ca-bundle\") pod \"whisker-5765cc798d-rvvhj\" (UID: \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\") " pod="calico-system/whisker-5765cc798d-rvvhj" Jul 11 00:46:58.441158 kubelet[1965]: I0711 00:46:58.440860 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q9hld\" (UniqueName: \"kubernetes.io/projected/1bb06ba8-233c-4b40-a7d3-425800a79a04-kube-api-access-q9hld\") pod \"calico-apiserver-7bd89b55d4-hp5dq\" (UID: \"1bb06ba8-233c-4b40-a7d3-425800a79a04\") " pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" Jul 11 00:46:58.441158 kubelet[1965]: I0711 00:46:58.440875 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8154f407-051f-40e9-9da5-21e3ee58e601-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-mx7hp\" (UID: \"8154f407-051f-40e9-9da5-21e3ee58e601\") " pod="calico-system/goldmane-768f4c5c69-mx7hp" Jul 11 00:46:58.441158 kubelet[1965]: I0711 00:46:58.440896 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f9bxr\" (UniqueName: \"kubernetes.io/projected/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-kube-api-access-f9bxr\") pod \"whisker-5765cc798d-rvvhj\" (UID: \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\") " pod="calico-system/whisker-5765cc798d-rvvhj" Jul 11 00:46:58.441158 kubelet[1965]: I0711 00:46:58.440912 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ktf6w\" (UniqueName: \"kubernetes.io/projected/6b02708e-e615-4eac-9ab2-be849c532b87-kube-api-access-ktf6w\") pod \"calico-apiserver-7bd89b55d4-q7fh6\" (UID: \"6b02708e-e615-4eac-9ab2-be849c532b87\") " pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" Jul 11 00:46:58.441158 kubelet[1965]: I0711 00:46:58.440951 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ng44w\" (UniqueName: \"kubernetes.io/projected/8154f407-051f-40e9-9da5-21e3ee58e601-kube-api-access-ng44w\") pod \"goldmane-768f4c5c69-mx7hp\" (UID: \"8154f407-051f-40e9-9da5-21e3ee58e601\") " pod="calico-system/goldmane-768f4c5c69-mx7hp" Jul 11 00:46:58.441277 kubelet[1965]: I0711 00:46:58.440969 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/773bbffc-8696-4271-bbeb-cae72bb8bd55-calico-apiserver-certs\") pod \"calico-apiserver-d9699865b-wgvvx\" (UID: \"773bbffc-8696-4271-bbeb-cae72bb8bd55\") " pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" Jul 11 00:46:58.441277 kubelet[1965]: I0711 00:46:58.440986 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8a625e31-e897-49ed-a12d-8a2ecfe45c50-tigera-ca-bundle\") pod \"calico-kube-controllers-b9fcdc94-2t8zl\" (UID: \"8a625e31-e897-49ed-a12d-8a2ecfe45c50\") " pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" Jul 11 00:46:58.520868 systemd[1]: run-containerd-runc-k8s.io-5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2-runc.RGAvWs.mount: Deactivated successfully. Jul 11 00:46:58.520984 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5aa666c95e63238f2e965582a7aef44c8597a36ca33181e032dba1dcfa9947c2-rootfs.mount: Deactivated successfully. Jul 11 00:46:58.669173 env[1214]: time="2025-07-11T00:46:58.668751986Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b9fcdc94-2t8zl,Uid:8a625e31-e897-49ed-a12d-8a2ecfe45c50,Namespace:calico-system,Attempt:0,}" Jul 11 00:46:58.670585 env[1214]: time="2025-07-11T00:46:58.670298112Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-hp5dq,Uid:1bb06ba8-233c-4b40-a7d3-425800a79a04,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:46:58.673251 kubelet[1965]: E0711 00:46:58.673212 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:58.675642 env[1214]: time="2025-07-11T00:46:58.675193975Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sn48l,Uid:2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3,Namespace:kube-system,Attempt:0,}" Jul 11 00:46:58.683768 kubelet[1965]: E0711 00:46:58.683745 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:46:58.685294 env[1214]: time="2025-07-11T00:46:58.684819657Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xjqbp,Uid:3cc6dd69-6e20-45d6-8c39-7a4c038726dc,Namespace:kube-system,Attempt:0,}" Jul 11 00:46:58.688590 env[1214]: time="2025-07-11T00:46:58.688554446Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-q7fh6,Uid:6b02708e-e615-4eac-9ab2-be849c532b87,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:46:58.694774 env[1214]: time="2025-07-11T00:46:58.694722027Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-mx7hp,Uid:8154f407-051f-40e9-9da5-21e3ee58e601,Namespace:calico-system,Attempt:0,}" Jul 11 00:46:58.699224 env[1214]: time="2025-07-11T00:46:58.698585820Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-d9699865b-wgvvx,Uid:773bbffc-8696-4271-bbeb-cae72bb8bd55,Namespace:calico-apiserver,Attempt:0,}" Jul 11 00:46:58.703637 env[1214]: time="2025-07-11T00:46:58.702261968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5765cc798d-rvvhj,Uid:99c6ce1f-23fd-47bb-b62a-3d98170d99a8,Namespace:calico-system,Attempt:0,}" Jul 11 00:46:58.916610 env[1214]: time="2025-07-11T00:46:58.915944187Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 11 00:46:59.010320 env[1214]: time="2025-07-11T00:46:59.010242739Z" level=error msg="Failed to destroy network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.010661 env[1214]: time="2025-07-11T00:46:59.010619670Z" level=error msg="encountered an error cleaning up failed sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.010723 env[1214]: time="2025-07-11T00:46:59.010672512Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b9fcdc94-2t8zl,Uid:8a625e31-e897-49ed-a12d-8a2ecfe45c50,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.010999 kubelet[1965]: E0711 00:46:59.010953 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.011389 kubelet[1965]: E0711 00:46:59.011029 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" Jul 11 00:46:59.011783 kubelet[1965]: E0711 00:46:59.011742 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" Jul 11 00:46:59.011842 kubelet[1965]: E0711 00:46:59.011819 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-b9fcdc94-2t8zl_calico-system(8a625e31-e897-49ed-a12d-8a2ecfe45c50)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-b9fcdc94-2t8zl_calico-system(8a625e31-e897-49ed-a12d-8a2ecfe45c50)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" podUID="8a625e31-e897-49ed-a12d-8a2ecfe45c50" Jul 11 00:46:59.015410 env[1214]: time="2025-07-11T00:46:59.015332363Z" level=error msg="Failed to destroy network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.016020 env[1214]: time="2025-07-11T00:46:59.015775855Z" level=error msg="encountered an error cleaning up failed sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.016020 env[1214]: time="2025-07-11T00:46:59.015844897Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xjqbp,Uid:3cc6dd69-6e20-45d6-8c39-7a4c038726dc,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.016143 kubelet[1965]: E0711 00:46:59.016050 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.016143 kubelet[1965]: E0711 00:46:59.016113 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xjqbp" Jul 11 00:46:59.016143 kubelet[1965]: E0711 00:46:59.016131 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xjqbp" Jul 11 00:46:59.016235 kubelet[1965]: E0711 00:46:59.016170 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-xjqbp_kube-system(3cc6dd69-6e20-45d6-8c39-7a4c038726dc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-xjqbp_kube-system(3cc6dd69-6e20-45d6-8c39-7a4c038726dc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xjqbp" podUID="3cc6dd69-6e20-45d6-8c39-7a4c038726dc" Jul 11 00:46:59.032568 env[1214]: time="2025-07-11T00:46:59.032501447Z" level=error msg="Failed to destroy network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.032890 env[1214]: time="2025-07-11T00:46:59.032855017Z" level=error msg="encountered an error cleaning up failed sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.032968 env[1214]: time="2025-07-11T00:46:59.032910099Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-q7fh6,Uid:6b02708e-e615-4eac-9ab2-be849c532b87,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.033156 kubelet[1965]: E0711 00:46:59.033120 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.033223 kubelet[1965]: E0711 00:46:59.033177 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" Jul 11 00:46:59.033223 kubelet[1965]: E0711 00:46:59.033198 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" Jul 11 00:46:59.033293 kubelet[1965]: E0711 00:46:59.033249 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7bd89b55d4-q7fh6_calico-apiserver(6b02708e-e615-4eac-9ab2-be849c532b87)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7bd89b55d4-q7fh6_calico-apiserver(6b02708e-e615-4eac-9ab2-be849c532b87)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" podUID="6b02708e-e615-4eac-9ab2-be849c532b87" Jul 11 00:46:59.044471 env[1214]: time="2025-07-11T00:46:59.044424503Z" level=error msg="Failed to destroy network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.044771 env[1214]: time="2025-07-11T00:46:59.044739712Z" level=error msg="encountered an error cleaning up failed sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.044814 env[1214]: time="2025-07-11T00:46:59.044792074Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-d9699865b-wgvvx,Uid:773bbffc-8696-4271-bbeb-cae72bb8bd55,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.045012 kubelet[1965]: E0711 00:46:59.044981 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.045074 kubelet[1965]: E0711 00:46:59.045040 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" Jul 11 00:46:59.045074 kubelet[1965]: E0711 00:46:59.045062 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" Jul 11 00:46:59.045132 kubelet[1965]: E0711 00:46:59.045105 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-d9699865b-wgvvx_calico-apiserver(773bbffc-8696-4271-bbeb-cae72bb8bd55)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-d9699865b-wgvvx_calico-apiserver(773bbffc-8696-4271-bbeb-cae72bb8bd55)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" podUID="773bbffc-8696-4271-bbeb-cae72bb8bd55" Jul 11 00:46:59.046598 env[1214]: time="2025-07-11T00:46:59.046550923Z" level=error msg="Failed to destroy network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.047888 env[1214]: time="2025-07-11T00:46:59.047847440Z" level=error msg="encountered an error cleaning up failed sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.047976 env[1214]: time="2025-07-11T00:46:59.047912482Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-hp5dq,Uid:1bb06ba8-233c-4b40-a7d3-425800a79a04,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.048130 kubelet[1965]: E0711 00:46:59.048100 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.048175 kubelet[1965]: E0711 00:46:59.048144 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" Jul 11 00:46:59.048211 kubelet[1965]: E0711 00:46:59.048173 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" Jul 11 00:46:59.048240 kubelet[1965]: E0711 00:46:59.048214 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7bd89b55d4-hp5dq_calico-apiserver(1bb06ba8-233c-4b40-a7d3-425800a79a04)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7bd89b55d4-hp5dq_calico-apiserver(1bb06ba8-233c-4b40-a7d3-425800a79a04)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" podUID="1bb06ba8-233c-4b40-a7d3-425800a79a04" Jul 11 00:46:59.058398 env[1214]: time="2025-07-11T00:46:59.058330295Z" level=error msg="Failed to destroy network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.058782 env[1214]: time="2025-07-11T00:46:59.058746067Z" level=error msg="encountered an error cleaning up failed sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.058855 env[1214]: time="2025-07-11T00:46:59.058799629Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sn48l,Uid:2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.059048 kubelet[1965]: E0711 00:46:59.059015 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.059113 kubelet[1965]: E0711 00:46:59.059060 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-sn48l" Jul 11 00:46:59.059113 kubelet[1965]: E0711 00:46:59.059089 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-sn48l" Jul 11 00:46:59.059320 kubelet[1965]: E0711 00:46:59.059130 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-sn48l_kube-system(2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-sn48l_kube-system(2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-sn48l" podUID="2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3" Jul 11 00:46:59.061005 env[1214]: time="2025-07-11T00:46:59.060961810Z" level=error msg="Failed to destroy network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.061349 env[1214]: time="2025-07-11T00:46:59.061245378Z" level=error msg="encountered an error cleaning up failed sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.061469 env[1214]: time="2025-07-11T00:46:59.061372061Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5765cc798d-rvvhj,Uid:99c6ce1f-23fd-47bb-b62a-3d98170d99a8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.061574 kubelet[1965]: E0711 00:46:59.061546 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.061623 kubelet[1965]: E0711 00:46:59.061588 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5765cc798d-rvvhj" Jul 11 00:46:59.061623 kubelet[1965]: E0711 00:46:59.061605 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5765cc798d-rvvhj" Jul 11 00:46:59.061687 kubelet[1965]: E0711 00:46:59.061643 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5765cc798d-rvvhj_calico-system(99c6ce1f-23fd-47bb-b62a-3d98170d99a8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5765cc798d-rvvhj_calico-system(99c6ce1f-23fd-47bb-b62a-3d98170d99a8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5765cc798d-rvvhj" podUID="99c6ce1f-23fd-47bb-b62a-3d98170d99a8" Jul 11 00:46:59.069316 env[1214]: time="2025-07-11T00:46:59.069269724Z" level=error msg="Failed to destroy network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.069595 env[1214]: time="2025-07-11T00:46:59.069565572Z" level=error msg="encountered an error cleaning up failed sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.069651 env[1214]: time="2025-07-11T00:46:59.069613253Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-mx7hp,Uid:8154f407-051f-40e9-9da5-21e3ee58e601,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.069838 kubelet[1965]: E0711 00:46:59.069780 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.069838 kubelet[1965]: E0711 00:46:59.069832 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-mx7hp" Jul 11 00:46:59.069942 kubelet[1965]: E0711 00:46:59.069850 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-mx7hp" Jul 11 00:46:59.069942 kubelet[1965]: E0711 00:46:59.069895 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-mx7hp_calico-system(8154f407-051f-40e9-9da5-21e3ee58e601)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-mx7hp_calico-system(8154f407-051f-40e9-9da5-21e3ee58e601)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-mx7hp" podUID="8154f407-051f-40e9-9da5-21e3ee58e601" Jul 11 00:46:59.852685 systemd[1]: Created slice kubepods-besteffort-podd048fd00_e37a_441c_8b1c_ff220212c236.slice. Jul 11 00:46:59.855118 env[1214]: time="2025-07-11T00:46:59.855068800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bpjbx,Uid:d048fd00-e37a-441c-8b1c-ff220212c236,Namespace:calico-system,Attempt:0,}" Jul 11 00:46:59.917853 kubelet[1965]: I0711 00:46:59.917321 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:46:59.919286 kubelet[1965]: I0711 00:46:59.918949 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:46:59.919363 env[1214]: time="2025-07-11T00:46:59.918328384Z" level=info msg="StopPodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\"" Jul 11 00:46:59.919580 env[1214]: time="2025-07-11T00:46:59.919427135Z" level=info msg="StopPodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\"" Jul 11 00:46:59.922446 kubelet[1965]: I0711 00:46:59.922026 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:46:59.924004 env[1214]: time="2025-07-11T00:46:59.923964743Z" level=error msg="Failed to destroy network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.927710 env[1214]: time="2025-07-11T00:46:59.925249739Z" level=error msg="encountered an error cleaning up failed sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.927710 env[1214]: time="2025-07-11T00:46:59.925306541Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bpjbx,Uid:d048fd00-e37a-441c-8b1c-ff220212c236,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.927817 kubelet[1965]: E0711 00:46:59.927547 1965 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.927817 kubelet[1965]: E0711 00:46:59.927587 1965 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:59.927817 kubelet[1965]: E0711 00:46:59.927689 1965 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bpjbx" Jul 11 00:46:59.926814 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa-shm.mount: Deactivated successfully. Jul 11 00:46:59.928914 env[1214]: time="2025-07-11T00:46:59.928034658Z" level=info msg="StopPodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\"" Jul 11 00:46:59.929057 kubelet[1965]: E0711 00:46:59.927730 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-bpjbx_calico-system(d048fd00-e37a-441c-8b1c-ff220212c236)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-bpjbx_calico-system(d048fd00-e37a-441c-8b1c-ff220212c236)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bpjbx" podUID="d048fd00-e37a-441c-8b1c-ff220212c236" Jul 11 00:46:59.929178 kubelet[1965]: I0711 00:46:59.929147 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:46:59.929645 env[1214]: time="2025-07-11T00:46:59.929616942Z" level=info msg="StopPodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\"" Jul 11 00:46:59.931339 kubelet[1965]: I0711 00:46:59.930967 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:46:59.931590 env[1214]: time="2025-07-11T00:46:59.931512676Z" level=info msg="StopPodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\"" Jul 11 00:46:59.933620 kubelet[1965]: I0711 00:46:59.932952 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:46:59.933717 env[1214]: time="2025-07-11T00:46:59.933390769Z" level=info msg="StopPodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\"" Jul 11 00:46:59.935952 kubelet[1965]: I0711 00:46:59.934811 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:46:59.936196 env[1214]: time="2025-07-11T00:46:59.935337344Z" level=info msg="StopPodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\"" Jul 11 00:46:59.936420 kubelet[1965]: I0711 00:46:59.936265 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:46:59.936784 env[1214]: time="2025-07-11T00:46:59.936736863Z" level=info msg="StopPodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\"" Jul 11 00:46:59.966136 env[1214]: time="2025-07-11T00:46:59.966080731Z" level=error msg="StopPodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" failed" error="failed to destroy network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.966537 kubelet[1965]: E0711 00:46:59.966495 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:46:59.966617 kubelet[1965]: E0711 00:46:59.966558 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67"} Jul 11 00:46:59.966617 kubelet[1965]: E0711 00:46:59.966607 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3cc6dd69-6e20-45d6-8c39-7a4c038726dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:46:59.966699 kubelet[1965]: E0711 00:46:59.966631 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3cc6dd69-6e20-45d6-8c39-7a4c038726dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xjqbp" podUID="3cc6dd69-6e20-45d6-8c39-7a4c038726dc" Jul 11 00:46:59.967744 env[1214]: time="2025-07-11T00:46:59.967700696Z" level=error msg="StopPodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" failed" error="failed to destroy network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.968046 kubelet[1965]: E0711 00:46:59.967860 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:46:59.968046 kubelet[1965]: E0711 00:46:59.967904 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e"} Jul 11 00:46:59.968046 kubelet[1965]: E0711 00:46:59.967937 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:46:59.968046 kubelet[1965]: E0711 00:46:59.967957 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-sn48l" podUID="2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3" Jul 11 00:46:59.984255 env[1214]: time="2025-07-11T00:46:59.984201961Z" level=error msg="StopPodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" failed" error="failed to destroy network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:46:59.984650 kubelet[1965]: E0711 00:46:59.984605 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:46:59.984777 kubelet[1965]: E0711 00:46:59.984663 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036"} Jul 11 00:46:59.984777 kubelet[1965]: E0711 00:46:59.984692 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6b02708e-e615-4eac-9ab2-be849c532b87\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:46:59.984777 kubelet[1965]: E0711 00:46:59.984713 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6b02708e-e615-4eac-9ab2-be849c532b87\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" podUID="6b02708e-e615-4eac-9ab2-be849c532b87" Jul 11 00:47:00.006652 env[1214]: time="2025-07-11T00:47:00.006561146Z" level=error msg="StopPodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" failed" error="failed to destroy network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:47:00.006828 kubelet[1965]: E0711 00:47:00.006788 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:00.006890 kubelet[1965]: E0711 00:47:00.006842 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12"} Jul 11 00:47:00.006890 kubelet[1965]: E0711 00:47:00.006874 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1bb06ba8-233c-4b40-a7d3-425800a79a04\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:47:00.007126 kubelet[1965]: E0711 00:47:00.006894 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1bb06ba8-233c-4b40-a7d3-425800a79a04\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" podUID="1bb06ba8-233c-4b40-a7d3-425800a79a04" Jul 11 00:47:00.011608 env[1214]: time="2025-07-11T00:47:00.011561962Z" level=error msg="StopPodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" failed" error="failed to destroy network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:47:00.012347 kubelet[1965]: E0711 00:47:00.012309 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:00.012712 kubelet[1965]: E0711 00:47:00.012349 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5"} Jul 11 00:47:00.012712 kubelet[1965]: E0711 00:47:00.012379 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8a625e31-e897-49ed-a12d-8a2ecfe45c50\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:47:00.012712 kubelet[1965]: E0711 00:47:00.012398 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8a625e31-e897-49ed-a12d-8a2ecfe45c50\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" podUID="8a625e31-e897-49ed-a12d-8a2ecfe45c50" Jul 11 00:47:00.014650 env[1214]: time="2025-07-11T00:47:00.014593364Z" level=error msg="StopPodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" failed" error="failed to destroy network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:47:00.014953 kubelet[1965]: E0711 00:47:00.014877 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:00.014953 kubelet[1965]: E0711 00:47:00.014918 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe"} Jul 11 00:47:00.015181 kubelet[1965]: E0711 00:47:00.014960 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8154f407-051f-40e9-9da5-21e3ee58e601\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:47:00.015181 kubelet[1965]: E0711 00:47:00.014982 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8154f407-051f-40e9-9da5-21e3ee58e601\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-mx7hp" podUID="8154f407-051f-40e9-9da5-21e3ee58e601" Jul 11 00:47:00.015307 env[1214]: time="2025-07-11T00:47:00.015012056Z" level=error msg="StopPodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" failed" error="failed to destroy network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:47:00.015543 kubelet[1965]: E0711 00:47:00.015176 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:00.015543 kubelet[1965]: E0711 00:47:00.015201 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003"} Jul 11 00:47:00.015543 kubelet[1965]: E0711 00:47:00.015219 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"773bbffc-8696-4271-bbeb-cae72bb8bd55\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:47:00.015543 kubelet[1965]: E0711 00:47:00.015234 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"773bbffc-8696-4271-bbeb-cae72bb8bd55\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" podUID="773bbffc-8696-4271-bbeb-cae72bb8bd55" Jul 11 00:47:00.017997 env[1214]: time="2025-07-11T00:47:00.017946255Z" level=error msg="StopPodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" failed" error="failed to destroy network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:47:00.018158 kubelet[1965]: E0711 00:47:00.018090 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:00.018158 kubelet[1965]: E0711 00:47:00.018118 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39"} Jul 11 00:47:00.018158 kubelet[1965]: E0711 00:47:00.018144 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:47:00.018259 kubelet[1965]: E0711 00:47:00.018165 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5765cc798d-rvvhj" podUID="99c6ce1f-23fd-47bb-b62a-3d98170d99a8" Jul 11 00:47:00.938554 kubelet[1965]: I0711 00:47:00.938520 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:00.939341 env[1214]: time="2025-07-11T00:47:00.939286607Z" level=info msg="StopPodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\"" Jul 11 00:47:00.963885 env[1214]: time="2025-07-11T00:47:00.963831233Z" level=error msg="StopPodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" failed" error="failed to destroy network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 11 00:47:00.964280 kubelet[1965]: E0711 00:47:00.964243 1965 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:00.964361 kubelet[1965]: E0711 00:47:00.964293 1965 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa"} Jul 11 00:47:00.964361 kubelet[1965]: E0711 00:47:00.964331 1965 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d048fd00-e37a-441c-8b1c-ff220212c236\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 11 00:47:00.964361 kubelet[1965]: E0711 00:47:00.964352 1965 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d048fd00-e37a-441c-8b1c-ff220212c236\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bpjbx" podUID="d048fd00-e37a-441c-8b1c-ff220212c236" Jul 11 00:47:03.903907 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount567557828.mount: Deactivated successfully. Jul 11 00:47:04.210317 env[1214]: time="2025-07-11T00:47:04.209906944Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:04.211437 env[1214]: time="2025-07-11T00:47:04.211413819Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:04.212971 env[1214]: time="2025-07-11T00:47:04.212937375Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:04.214525 env[1214]: time="2025-07-11T00:47:04.214494572Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:04.214757 env[1214]: time="2025-07-11T00:47:04.214725378Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 11 00:47:04.231438 env[1214]: time="2025-07-11T00:47:04.231391052Z" level=info msg="CreateContainer within sandbox \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 11 00:47:04.247938 env[1214]: time="2025-07-11T00:47:04.247892962Z" level=info msg="CreateContainer within sandbox \"9078fab74d13b4794e2efa7d9b8d6a19ab3bb1d017d92c871f62fb16e282acfa\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0d8a8e1f31154983de5bac1f497b6d6c4d06454b5c1b5bf223a0889a1c107f55\"" Jul 11 00:47:04.248328 env[1214]: time="2025-07-11T00:47:04.248301892Z" level=info msg="StartContainer for \"0d8a8e1f31154983de5bac1f497b6d6c4d06454b5c1b5bf223a0889a1c107f55\"" Jul 11 00:47:04.270667 systemd[1]: Started cri-containerd-0d8a8e1f31154983de5bac1f497b6d6c4d06454b5c1b5bf223a0889a1c107f55.scope. Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.309109 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 11 00:47:04.309162 kernel: audit: type=1400 audit(1752194824.307:1009): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2474 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:04.313268 kernel: audit: type=1300 audit(1752194824.307:1009): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2474 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:04.313312 kernel: audit: type=1327 audit(1752194824.307:1009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064386138653166333131353439383364653562616331663439376236 Jul 11 00:47:04.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064386138653166333131353439383364653562616331663439376236 Jul 11 00:47:04.315569 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.317218 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.320620 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.322826 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.324744 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.327006 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.327070 kernel: audit: type=1400 audit(1752194824.307:1010): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit: BPF prog-id=133 op=LOAD Jul 11 00:47:04.307000 audit[3271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2474 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:04.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064386138653166333131353439383364653562616331663439376236 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit: BPF prog-id=134 op=LOAD Jul 11 00:47:04.307000 audit[3271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2474 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:04.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064386138653166333131353439383364653562616331663439376236 Jul 11 00:47:04.307000 audit: BPF prog-id=134 op=UNLOAD Jul 11 00:47:04.307000 audit: BPF prog-id=133 op=UNLOAD Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:04.307000 audit: BPF prog-id=135 op=LOAD Jul 11 00:47:04.307000 audit[3271]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2474 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:04.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064386138653166333131353439383364653562616331663439376236 Jul 11 00:47:04.343611 env[1214]: time="2025-07-11T00:47:04.343569106Z" level=info msg="StartContainer for \"0d8a8e1f31154983de5bac1f497b6d6c4d06454b5c1b5bf223a0889a1c107f55\" returns successfully" Jul 11 00:47:04.530957 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 11 00:47:04.531058 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 11 00:47:04.626888 env[1214]: time="2025-07-11T00:47:04.626836368Z" level=info msg="StopPodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\"" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.754 [INFO][3326] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.755 [INFO][3326] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" iface="eth0" netns="/var/run/netns/cni-5de33167-7f2a-1172-3a9a-9b45f8e89c94" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.756 [INFO][3326] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" iface="eth0" netns="/var/run/netns/cni-5de33167-7f2a-1172-3a9a-9b45f8e89c94" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.756 [INFO][3326] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" iface="eth0" netns="/var/run/netns/cni-5de33167-7f2a-1172-3a9a-9b45f8e89c94" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.756 [INFO][3326] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.756 [INFO][3326] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.858 [INFO][3335] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.859 [INFO][3335] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.859 [INFO][3335] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.872 [WARNING][3335] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.872 [INFO][3335] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.873 [INFO][3335] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:04.877832 env[1214]: 2025-07-11 00:47:04.875 [INFO][3326] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:04.877832 env[1214]: time="2025-07-11T00:47:04.877579060Z" level=info msg="TearDown network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" successfully" Jul 11 00:47:04.877832 env[1214]: time="2025-07-11T00:47:04.877606781Z" level=info msg="StopPodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" returns successfully" Jul 11 00:47:04.904748 systemd[1]: run-netns-cni\x2d5de33167\x2d7f2a\x2d1172\x2d3a9a\x2d9b45f8e89c94.mount: Deactivated successfully. Jul 11 00:47:04.966998 kubelet[1965]: I0711 00:47:04.966919 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-lxggr" podStartSLOduration=1.800892712 podStartE2EDuration="13.966904334s" podCreationTimestamp="2025-07-11 00:46:51 +0000 UTC" firstStartedPulling="2025-07-11 00:46:52.050020227 +0000 UTC m=+20.296780292" lastFinishedPulling="2025-07-11 00:47:04.216031849 +0000 UTC m=+32.462791914" observedRunningTime="2025-07-11 00:47:04.966288999 +0000 UTC m=+33.213049064" watchObservedRunningTime="2025-07-11 00:47:04.966904334 +0000 UTC m=+33.213664399" Jul 11 00:47:04.989540 kubelet[1965]: I0711 00:47:04.989505 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-backend-key-pair\") pod \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\" (UID: \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\") " Jul 11 00:47:04.989633 kubelet[1965]: I0711 00:47:04.989561 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f9bxr\" (UniqueName: \"kubernetes.io/projected/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-kube-api-access-f9bxr\") pod \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\" (UID: \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\") " Jul 11 00:47:04.989633 kubelet[1965]: I0711 00:47:04.989596 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-ca-bundle\") pod \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\" (UID: \"99c6ce1f-23fd-47bb-b62a-3d98170d99a8\") " Jul 11 00:47:04.997221 systemd[1]: var-lib-kubelet-pods-99c6ce1f\x2d23fd\x2d47bb\x2db62a\x2d3d98170d99a8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df9bxr.mount: Deactivated successfully. Jul 11 00:47:04.997311 systemd[1]: var-lib-kubelet-pods-99c6ce1f\x2d23fd\x2d47bb\x2db62a\x2d3d98170d99a8-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 11 00:47:04.999348 kubelet[1965]: I0711 00:47:04.998530 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "99c6ce1f-23fd-47bb-b62a-3d98170d99a8" (UID: "99c6ce1f-23fd-47bb-b62a-3d98170d99a8"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 11 00:47:04.999348 kubelet[1965]: I0711 00:47:04.999040 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "99c6ce1f-23fd-47bb-b62a-3d98170d99a8" (UID: "99c6ce1f-23fd-47bb-b62a-3d98170d99a8"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 11 00:47:05.000104 kubelet[1965]: I0711 00:47:04.999947 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-kube-api-access-f9bxr" (OuterVolumeSpecName: "kube-api-access-f9bxr") pod "99c6ce1f-23fd-47bb-b62a-3d98170d99a8" (UID: "99c6ce1f-23fd-47bb-b62a-3d98170d99a8"). InnerVolumeSpecName "kube-api-access-f9bxr". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 11 00:47:05.090438 kubelet[1965]: I0711 00:47:05.090407 1965 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:05.090438 kubelet[1965]: I0711 00:47:05.090431 1965 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-f9bxr\" (UniqueName: \"kubernetes.io/projected/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-kube-api-access-f9bxr\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:05.090438 kubelet[1965]: I0711 00:47:05.090442 1965 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/99c6ce1f-23fd-47bb-b62a-3d98170d99a8-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:05.256667 systemd[1]: Removed slice kubepods-besteffort-pod99c6ce1f_23fd_47bb_b62a_3d98170d99a8.slice. Jul 11 00:47:05.296323 systemd[1]: Created slice kubepods-besteffort-podfd8fed2f_19d9_4687_9d9d_3a10a2b4390d.slice. Jul 11 00:47:05.391452 kubelet[1965]: I0711 00:47:05.391412 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/fd8fed2f-19d9-4687-9d9d-3a10a2b4390d-whisker-backend-key-pair\") pod \"whisker-7769c55fc6-t9cn6\" (UID: \"fd8fed2f-19d9-4687-9d9d-3a10a2b4390d\") " pod="calico-system/whisker-7769c55fc6-t9cn6" Jul 11 00:47:05.391649 kubelet[1965]: I0711 00:47:05.391632 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s5smx\" (UniqueName: \"kubernetes.io/projected/fd8fed2f-19d9-4687-9d9d-3a10a2b4390d-kube-api-access-s5smx\") pod \"whisker-7769c55fc6-t9cn6\" (UID: \"fd8fed2f-19d9-4687-9d9d-3a10a2b4390d\") " pod="calico-system/whisker-7769c55fc6-t9cn6" Jul 11 00:47:05.391742 kubelet[1965]: I0711 00:47:05.391729 1965 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fd8fed2f-19d9-4687-9d9d-3a10a2b4390d-whisker-ca-bundle\") pod \"whisker-7769c55fc6-t9cn6\" (UID: \"fd8fed2f-19d9-4687-9d9d-3a10a2b4390d\") " pod="calico-system/whisker-7769c55fc6-t9cn6" Jul 11 00:47:05.599331 env[1214]: time="2025-07-11T00:47:05.599242849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7769c55fc6-t9cn6,Uid:fd8fed2f-19d9-4687-9d9d-3a10a2b4390d,Namespace:calico-system,Attempt:0,}" Jul 11 00:47:05.706203 systemd-networkd[1040]: calicbb7f500a9e: Link UP Jul 11 00:47:05.708031 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:47:05.708093 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicbb7f500a9e: link becomes ready Jul 11 00:47:05.707788 systemd-networkd[1040]: calicbb7f500a9e: Gained carrier Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.625 [INFO][3357] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.639 [INFO][3357] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7769c55fc6--t9cn6-eth0 whisker-7769c55fc6- calico-system fd8fed2f-19d9-4687-9d9d-3a10a2b4390d 927 0 2025-07-11 00:47:05 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7769c55fc6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7769c55fc6-t9cn6 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calicbb7f500a9e [] [] }} ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.639 [INFO][3357] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.659 [INFO][3371] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" HandleID="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Workload="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.660 [INFO][3371] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" HandleID="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Workload="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c440), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7769c55fc6-t9cn6", "timestamp":"2025-07-11 00:47:05.659897639 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.660 [INFO][3371] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.660 [INFO][3371] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.660 [INFO][3371] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.674 [INFO][3371] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.679 [INFO][3371] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.684 [INFO][3371] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.686 [INFO][3371] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.688 [INFO][3371] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.688 [INFO][3371] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.689 [INFO][3371] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2 Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.692 [INFO][3371] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.697 [INFO][3371] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.697 [INFO][3371] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" host="localhost" Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.697 [INFO][3371] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:05.721524 env[1214]: 2025-07-11 00:47:05.697 [INFO][3371] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" HandleID="k8s-pod-network.e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Workload="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.722335 env[1214]: 2025-07-11 00:47:05.699 [INFO][3357] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7769c55fc6--t9cn6-eth0", GenerateName:"whisker-7769c55fc6-", Namespace:"calico-system", SelfLink:"", UID:"fd8fed2f-19d9-4687-9d9d-3a10a2b4390d", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 47, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7769c55fc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7769c55fc6-t9cn6", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicbb7f500a9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:05.722335 env[1214]: 2025-07-11 00:47:05.699 [INFO][3357] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.722335 env[1214]: 2025-07-11 00:47:05.699 [INFO][3357] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicbb7f500a9e ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.722335 env[1214]: 2025-07-11 00:47:05.708 [INFO][3357] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.722335 env[1214]: 2025-07-11 00:47:05.709 [INFO][3357] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7769c55fc6--t9cn6-eth0", GenerateName:"whisker-7769c55fc6-", Namespace:"calico-system", SelfLink:"", UID:"fd8fed2f-19d9-4687-9d9d-3a10a2b4390d", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 47, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7769c55fc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2", Pod:"whisker-7769c55fc6-t9cn6", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calicbb7f500a9e", MAC:"5e:19:0f:2e:99:f7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:05.722335 env[1214]: 2025-07-11 00:47:05.719 [INFO][3357] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2" Namespace="calico-system" Pod="whisker-7769c55fc6-t9cn6" WorkloadEndpoint="localhost-k8s-whisker--7769c55fc6--t9cn6-eth0" Jul 11 00:47:05.729889 env[1214]: time="2025-07-11T00:47:05.729809561Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:05.729889 env[1214]: time="2025-07-11T00:47:05.729863682Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:05.729889 env[1214]: time="2025-07-11T00:47:05.729877402Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:05.730052 env[1214]: time="2025-07-11T00:47:05.730021806Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2 pid=3396 runtime=io.containerd.runc.v2 Jul 11 00:47:05.739548 systemd[1]: Started cri-containerd-e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2.scope. Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit: BPF prog-id=136 op=LOAD Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3396 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530653936333965343538636463336436636338623236643565356362 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3396 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530653936333965343538636463336436636338623236643565356362 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit: BPF prog-id=137 op=LOAD Jul 11 00:47:05.757000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3396 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530653936333965343538636463336436636338623236643565356362 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit: BPF prog-id=138 op=LOAD Jul 11 00:47:05.757000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3396 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530653936333965343538636463336436636338623236643565356362 Jul 11 00:47:05.757000 audit: BPF prog-id=138 op=UNLOAD Jul 11 00:47:05.757000 audit: BPF prog-id=137 op=UNLOAD Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:05.757000 audit: BPF prog-id=139 op=LOAD Jul 11 00:47:05.757000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3396 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530653936333965343538636463336436636338623236643565356362 Jul 11 00:47:05.759431 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:05.773457 env[1214]: time="2025-07-11T00:47:05.773409520Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7769c55fc6-t9cn6,Uid:fd8fed2f-19d9-4687-9d9d-3a10a2b4390d,Namespace:calico-system,Attempt:0,} returns sandbox id \"e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2\"" Jul 11 00:47:05.776170 env[1214]: time="2025-07-11T00:47:05.776134622Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 11 00:47:05.849991 kubelet[1965]: I0711 00:47:05.849888 1965 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="99c6ce1f-23fd-47bb-b62a-3d98170d99a8" path="/var/lib/kubelet/pods/99c6ce1f-23fd-47bb-b62a-3d98170d99a8/volumes" Jul 11 00:47:05.965000 audit[3495]: AVC avc: denied { write } for pid=3495 comm="tee" name="fd" dev="proc" ino=17207 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:05.965000 audit[3495]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc2aa57d2 a2=241 a3=1b6 items=1 ppid=3436 pid=3495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.965000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 11 00:47:05.965000 audit: PATH item=0 name="/dev/fd/63" inode=17200 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:05.965000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:05.978000 audit[3505]: AVC avc: denied { write } for pid=3505 comm="tee" name="fd" dev="proc" ino=20168 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:05.978000 audit[3505]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffd6867e3 a2=241 a3=1b6 items=1 ppid=3443 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.978000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 11 00:47:05.978000 audit: PATH item=0 name="/dev/fd/63" inode=19198 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:05.978000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:05.983000 audit[3492]: AVC avc: denied { write } for pid=3492 comm="tee" name="fd" dev="proc" ino=20177 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:05.983000 audit[3492]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdfb017e1 a2=241 a3=1b6 items=1 ppid=3446 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.983000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 11 00:47:05.983000 audit: PATH item=0 name="/dev/fd/63" inode=20163 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:05.983000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:05.984000 audit[3497]: AVC avc: denied { write } for pid=3497 comm="tee" name="fd" dev="proc" ino=19214 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:05.984000 audit[3497]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffc32f7e1 a2=241 a3=1b6 items=1 ppid=3442 pid=3497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.984000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 11 00:47:05.984000 audit: PATH item=0 name="/dev/fd/63" inode=17201 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:05.984000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:05.990000 audit[3491]: AVC avc: denied { write } for pid=3491 comm="tee" name="fd" dev="proc" ino=18274 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:05.990000 audit[3491]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffca2f47d1 a2=241 a3=1b6 items=1 ppid=3438 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:05.990000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 11 00:47:05.990000 audit: PATH item=0 name="/dev/fd/63" inode=18241 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:05.990000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:06.003000 audit[3529]: AVC avc: denied { write } for pid=3529 comm="tee" name="fd" dev="proc" ino=17212 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:06.003000 audit[3529]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe72c67e1 a2=241 a3=1b6 items=1 ppid=3445 pid=3529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.003000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 11 00:47:06.003000 audit: PATH item=0 name="/dev/fd/63" inode=19216 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:06.003000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:06.014000 audit[3523]: AVC avc: denied { write } for pid=3523 comm="tee" name="fd" dev="proc" ino=20186 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 11 00:47:06.014000 audit[3523]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcb75a7e2 a2=241 a3=1b6 items=1 ppid=3452 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.014000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 11 00:47:06.014000 audit: PATH item=0 name="/dev/fd/63" inode=20174 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 11 00:47:06.014000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit: BPF prog-id=140 op=LOAD Jul 11 00:47:06.165000 audit[3579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd06053a8 a2=98 a3=ffffd0605398 items=0 ppid=3449 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.165000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:47:06.165000 audit: BPF prog-id=140 op=UNLOAD Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit: BPF prog-id=141 op=LOAD Jul 11 00:47:06.165000 audit[3579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0605258 a2=74 a3=95 items=0 ppid=3449 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.165000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:47:06.165000 audit: BPF prog-id=141 op=UNLOAD Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { bpf } for pid=3579 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit: BPF prog-id=142 op=LOAD Jul 11 00:47:06.165000 audit[3579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd0605288 a2=40 a3=ffffd06052b8 items=0 ppid=3449 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.165000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:47:06.165000 audit: BPF prog-id=142 op=UNLOAD Jul 11 00:47:06.165000 audit[3579]: AVC avc: denied { perfmon } for pid=3579 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.165000 audit[3579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd06053a0 a2=50 a3=0 items=0 ppid=3449 pid=3579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.165000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.167000 audit: BPF prog-id=143 op=LOAD Jul 11 00:47:06.167000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcbd74e38 a2=98 a3=ffffcbd74e28 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.167000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.168000 audit: BPF prog-id=143 op=UNLOAD Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.168000 audit: BPF prog-id=144 op=LOAD Jul 11 00:47:06.168000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcbd74ac8 a2=74 a3=95 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.168000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.169000 audit: BPF prog-id=144 op=UNLOAD Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.169000 audit: BPF prog-id=145 op=LOAD Jul 11 00:47:06.169000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcbd74b28 a2=94 a3=2 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.169000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.170000 audit: BPF prog-id=145 op=UNLOAD Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.254000 audit: BPF prog-id=146 op=LOAD Jul 11 00:47:06.254000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffcbd74ae8 a2=40 a3=ffffcbd74b18 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.254000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.255000 audit: BPF prog-id=146 op=UNLOAD Jul 11 00:47:06.255000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.255000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffcbd74c00 a2=50 a3=0 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.255000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.263000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.263000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcbd74b58 a2=28 a3=ffffcbd74c88 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.263000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.264000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.264000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbd74b88 a2=28 a3=ffffcbd74cb8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.264000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.264000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.264000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbd74a38 a2=28 a3=ffffcbd74b68 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.264000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.264000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.264000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcbd74ba8 a2=28 a3=ffffcbd74cd8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.264000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.264000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.264000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcbd74b88 a2=28 a3=ffffcbd74cb8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.264000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.264000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.264000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcbd74b78 a2=28 a3=ffffcbd74ca8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.264000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.265000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.265000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcbd74ba8 a2=28 a3=ffffcbd74cd8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.265000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.265000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.265000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbd74b88 a2=28 a3=ffffcbd74cb8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.265000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.265000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.265000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbd74ba8 a2=28 a3=ffffcbd74cd8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.265000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.265000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.265000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbd74b78 a2=28 a3=ffffcbd74ca8 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.265000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.265000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.265000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffcbd74bf8 a2=28 a3=ffffcbd74d38 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.265000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcbd74930 a2=50 a3=0 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.266000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit: BPF prog-id=147 op=LOAD Jul 11 00:47:06.266000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcbd74938 a2=94 a3=5 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.266000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.266000 audit: BPF prog-id=147 op=UNLOAD Jul 11 00:47:06.266000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.266000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffcbd74a40 a2=50 a3=0 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.266000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffcbd74b88 a2=4 a3=3 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.267000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.267000 audit[3580]: AVC avc: denied { confidentiality } for pid=3580 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:47:06.267000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcbd74b68 a2=94 a3=6 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.267000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { confidentiality } for pid=3580 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:47:06.268000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcbd74338 a2=94 a3=83 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.268000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { perfmon } for pid=3580 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { bpf } for pid=3580 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.268000 audit[3580]: AVC avc: denied { confidentiality } for pid=3580 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:47:06.268000 audit[3580]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffcbd74338 a2=94 a3=83 items=0 ppid=3449 pid=3580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.268000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit: BPF prog-id=148 op=LOAD Jul 11 00:47:06.279000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6122428 a2=98 a3=ffffe6122418 items=0 ppid=3449 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.279000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:47:06.279000 audit: BPF prog-id=148 op=UNLOAD Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit: BPF prog-id=149 op=LOAD Jul 11 00:47:06.279000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe61222d8 a2=74 a3=95 items=0 ppid=3449 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.279000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:47:06.279000 audit: BPF prog-id=149 op=UNLOAD Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.279000 audit: BPF prog-id=150 op=LOAD Jul 11 00:47:06.279000 audit[3583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe6122308 a2=40 a3=ffffe6122338 items=0 ppid=3449 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.279000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 11 00:47:06.279000 audit: BPF prog-id=150 op=UNLOAD Jul 11 00:47:06.333493 systemd-networkd[1040]: vxlan.calico: Link UP Jul 11 00:47:06.333499 systemd-networkd[1040]: vxlan.calico: Gained carrier Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.341000 audit: BPF prog-id=151 op=LOAD Jul 11 00:47:06.341000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdf230bc8 a2=98 a3=ffffdf230bb8 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.341000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit: BPF prog-id=151 op=UNLOAD Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit: BPF prog-id=152 op=LOAD Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdf2308a8 a2=74 a3=95 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit: BPF prog-id=152 op=UNLOAD Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit: BPF prog-id=153 op=LOAD Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdf230908 a2=94 a3=2 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit: BPF prog-id=153 op=UNLOAD Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdf230938 a2=28 a3=ffffdf230a68 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdf230968 a2=28 a3=ffffdf230a98 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdf230818 a2=28 a3=ffffdf230948 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdf230988 a2=28 a3=ffffdf230ab8 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdf230968 a2=28 a3=ffffdf230a98 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.342000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.342000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdf230958 a2=28 a3=ffffdf230a88 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.342000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdf230988 a2=28 a3=ffffdf230ab8 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdf230968 a2=28 a3=ffffdf230a98 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdf230988 a2=28 a3=ffffdf230ab8 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdf230958 a2=28 a3=ffffdf230a88 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdf2309d8 a2=28 a3=ffffdf230b18 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit: BPF prog-id=154 op=LOAD Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdf2307f8 a2=40 a3=ffffdf230828 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit: BPF prog-id=154 op=UNLOAD Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffdf230820 a2=50 a3=0 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffdf230820 a2=50 a3=0 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.343000 audit: BPF prog-id=155 op=LOAD Jul 11 00:47:06.343000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdf22ff88 a2=94 a3=2 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.343000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.344000 audit: BPF prog-id=155 op=UNLOAD Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { perfmon } for pid=3608 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit[3608]: AVC avc: denied { bpf } for pid=3608 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.344000 audit: BPF prog-id=156 op=LOAD Jul 11 00:47:06.344000 audit[3608]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdf230118 a2=94 a3=30 items=0 ppid=3449 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.344000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit: BPF prog-id=157 op=LOAD Jul 11 00:47:06.348000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe7142ce8 a2=98 a3=ffffe7142cd8 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.348000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.348000 audit: BPF prog-id=157 op=UNLOAD Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit: BPF prog-id=158 op=LOAD Jul 11 00:47:06.348000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe7142978 a2=74 a3=95 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.348000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.348000 audit: BPF prog-id=158 op=UNLOAD Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.348000 audit: BPF prog-id=159 op=LOAD Jul 11 00:47:06.348000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe71429d8 a2=94 a3=2 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.348000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.352000 audit: BPF prog-id=159 op=UNLOAD Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit: BPF prog-id=160 op=LOAD Jul 11 00:47:06.439000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe7142998 a2=40 a3=ffffe71429c8 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.439000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.439000 audit: BPF prog-id=160 op=UNLOAD Jul 11 00:47:06.439000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.439000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe7142ab0 a2=50 a3=0 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.439000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe7142a08 a2=28 a3=ffffe7142b38 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe7142a38 a2=28 a3=ffffe7142b68 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe71428e8 a2=28 a3=ffffe7142a18 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe7142a58 a2=28 a3=ffffe7142b88 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe7142a38 a2=28 a3=ffffe7142b68 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe7142a28 a2=28 a3=ffffe7142b58 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe7142a58 a2=28 a3=ffffe7142b88 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe7142a38 a2=28 a3=ffffe7142b68 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe7142a58 a2=28 a3=ffffe7142b88 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe7142a28 a2=28 a3=ffffe7142b58 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe7142aa8 a2=28 a3=ffffe7142be8 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe71427e0 a2=50 a3=0 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit: BPF prog-id=161 op=LOAD Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe71427e8 a2=94 a3=5 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit: BPF prog-id=161 op=UNLOAD Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe71428f0 a2=50 a3=0 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe7142a38 a2=4 a3=3 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { confidentiality } for pid=3611 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe7142a18 a2=94 a3=6 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.448000 audit[3611]: AVC avc: denied { confidentiality } for pid=3611 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:47:06.448000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe71421e8 a2=94 a3=83 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.448000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { perfmon } for pid=3611 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { confidentiality } for pid=3611 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 11 00:47:06.449000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe71421e8 a2=94 a3=83 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.449000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe7143c28 a2=10 a3=ffffe7143d18 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.449000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe7143ae8 a2=10 a3=ffffe7143bd8 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.449000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe7143a58 a2=10 a3=ffffe7143bd8 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.449000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.449000 audit[3611]: AVC avc: denied { bpf } for pid=3611 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.449000 audit[3611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe7143a58 a2=10 a3=ffffe7143bd8 items=0 ppid=3449 pid=3611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.449000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 11 00:47:06.458000 audit: BPF prog-id=156 op=UNLOAD Jul 11 00:47:06.505000 audit[3639]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3639 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:06.505000 audit[3639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd0750330 a2=0 a3=ffff8b957fa8 items=0 ppid=3449 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.505000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:06.509000 audit[3641]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3641 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:06.509000 audit[3641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd0776960 a2=0 a3=ffffa1007fa8 items=0 ppid=3449 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.509000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:06.516000 audit[3640]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3640 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:06.516000 audit[3640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff9cf38b0 a2=0 a3=ffffb6c7afa8 items=0 ppid=3449 pid=3640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.516000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:06.517000 audit[3644]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3644 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:06.517000 audit[3644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffc4f89ad0 a2=0 a3=ffff888bffa8 items=0 ppid=3449 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.517000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:06.754727 env[1214]: time="2025-07-11T00:47:06.754683399Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:06.756963 env[1214]: time="2025-07-11T00:47:06.756938049Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:06.758769 env[1214]: time="2025-07-11T00:47:06.758731809Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:06.760279 env[1214]: time="2025-07-11T00:47:06.760252603Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:06.760726 env[1214]: time="2025-07-11T00:47:06.760703053Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 11 00:47:06.765763 env[1214]: time="2025-07-11T00:47:06.765724124Z" level=info msg="CreateContainer within sandbox \"e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 11 00:47:06.777723 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount322619294.mount: Deactivated successfully. Jul 11 00:47:06.780689 env[1214]: time="2025-07-11T00:47:06.780657536Z" level=info msg="CreateContainer within sandbox \"e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"16866aa4b340ad8034f9105e52fcab66f123ef967a9c5aaa5db78b620dba1db7\"" Jul 11 00:47:06.781530 env[1214]: time="2025-07-11T00:47:06.781442034Z" level=info msg="StartContainer for \"16866aa4b340ad8034f9105e52fcab66f123ef967a9c5aaa5db78b620dba1db7\"" Jul 11 00:47:06.800736 systemd[1]: Started cri-containerd-16866aa4b340ad8034f9105e52fcab66f123ef967a9c5aaa5db78b620dba1db7.scope. Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit: BPF prog-id=162 op=LOAD Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3396 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136383636616134623334306164383033346639313035653532666361 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3396 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136383636616134623334306164383033346639313035653532666361 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit: BPF prog-id=163 op=LOAD Jul 11 00:47:06.824000 audit[3662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3396 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136383636616134623334306164383033346639313035653532666361 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.824000 audit: BPF prog-id=164 op=LOAD Jul 11 00:47:06.824000 audit[3662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3396 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136383636616134623334306164383033346639313035653532666361 Jul 11 00:47:06.824000 audit: BPF prog-id=164 op=UNLOAD Jul 11 00:47:06.824000 audit: BPF prog-id=163 op=UNLOAD Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:06.825000 audit: BPF prog-id=165 op=LOAD Jul 11 00:47:06.825000 audit[3662]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3396 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:06.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136383636616134623334306164383033346639313035653532666361 Jul 11 00:47:06.856298 env[1214]: time="2025-07-11T00:47:06.856244335Z" level=info msg="StartContainer for \"16866aa4b340ad8034f9105e52fcab66f123ef967a9c5aaa5db78b620dba1db7\" returns successfully" Jul 11 00:47:06.857307 env[1214]: time="2025-07-11T00:47:06.857281838Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 11 00:47:06.903000 audit[3673]: AVC avc: denied { search } for pid=3673 comm="nginx" name="crypto" dev="proc" ino=19434 scontext=system_u:system_r:svirt_lxc_net_t:s0:c672,c962 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 11 00:47:06.903000 audit[3673]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff88ddb958 a2=0 a3=0 items=0 ppid=3396 pid=3673 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c672,c962 key=(null) Jul 11 00:47:06.903000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 11 00:47:07.725187 systemd-networkd[1040]: calicbb7f500a9e: Gained IPv6LL Jul 11 00:47:07.853044 systemd-networkd[1040]: vxlan.calico: Gained IPv6LL Jul 11 00:47:08.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.3:22-10.0.0.1:38908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:08.513867 systemd[1]: Started sshd@7-10.0.0.3:22-10.0.0.1:38908.service. Jul 11 00:47:08.563000 audit[3722]: USER_ACCT pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:08.565116 sshd[3722]: Accepted publickey for core from 10.0.0.1 port 38908 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:08.567000 audit[3722]: CRED_ACQ pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:08.567000 audit[3722]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd69c0710 a2=3 a3=1 items=0 ppid=1 pid=3722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:08.568710 sshd[3722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:08.571921 systemd-logind[1205]: New session 8 of user core. Jul 11 00:47:08.572726 systemd[1]: Started session-8.scope. Jul 11 00:47:08.575000 audit[3722]: USER_START pid=3722 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:08.576000 audit[3724]: CRED_ACQ pid=3724 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:08.662143 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3633481503.mount: Deactivated successfully. Jul 11 00:47:08.676218 env[1214]: time="2025-07-11T00:47:08.676149537Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:08.677814 env[1214]: time="2025-07-11T00:47:08.677787851Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:08.680283 env[1214]: time="2025-07-11T00:47:08.680251983Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:08.681597 env[1214]: time="2025-07-11T00:47:08.681568090Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:08.682340 env[1214]: time="2025-07-11T00:47:08.682283185Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 11 00:47:08.686856 env[1214]: time="2025-07-11T00:47:08.686825041Z" level=info msg="CreateContainer within sandbox \"e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 11 00:47:08.699955 env[1214]: time="2025-07-11T00:47:08.699284702Z" level=info msg="CreateContainer within sandbox \"e0e9639e458cdc3d6cc8b26d5e5cb640acc278ce328b30ea76dd6f547099a9f2\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"c27fe745fb16c4b7504e0bd0a9587f5f2ba8087e663b51c8ced9cda8a6393503\"" Jul 11 00:47:08.700214 env[1214]: time="2025-07-11T00:47:08.700176520Z" level=info msg="StartContainer for \"c27fe745fb16c4b7504e0bd0a9587f5f2ba8087e663b51c8ced9cda8a6393503\"" Jul 11 00:47:08.717344 systemd[1]: Started cri-containerd-c27fe745fb16c4b7504e0bd0a9587f5f2ba8087e663b51c8ced9cda8a6393503.scope. Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit: BPF prog-id=166 op=LOAD Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3396 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332376665373435666231366334623735303465306264306139353837 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3396 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332376665373435666231366334623735303465306264306139353837 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit: BPF prog-id=167 op=LOAD Jul 11 00:47:08.749000 audit[3741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3396 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332376665373435666231366334623735303465306264306139353837 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.749000 audit: BPF prog-id=168 op=LOAD Jul 11 00:47:08.749000 audit[3741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3396 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332376665373435666231366334623735303465306264306139353837 Jul 11 00:47:08.751000 audit: BPF prog-id=168 op=UNLOAD Jul 11 00:47:08.751000 audit: BPF prog-id=167 op=UNLOAD Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { perfmon } for pid=3741 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit[3741]: AVC avc: denied { bpf } for pid=3741 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:08.751000 audit: BPF prog-id=169 op=LOAD Jul 11 00:47:08.751000 audit[3741]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3396 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332376665373435666231366334623735303465306264306139353837 Jul 11 00:47:08.782396 env[1214]: time="2025-07-11T00:47:08.782292440Z" level=info msg="StartContainer for \"c27fe745fb16c4b7504e0bd0a9587f5f2ba8087e663b51c8ced9cda8a6393503\" returns successfully" Jul 11 00:47:08.787414 sshd[3722]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:08.787000 audit[3722]: USER_END pid=3722 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:08.787000 audit[3722]: CRED_DISP pid=3722 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:08.792122 systemd[1]: sshd@7-10.0.0.3:22-10.0.0.1:38908.service: Deactivated successfully. Jul 11 00:47:08.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.3:22-10.0.0.1:38908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:08.792844 systemd[1]: session-8.scope: Deactivated successfully. Jul 11 00:47:08.793417 systemd-logind[1205]: Session 8 logged out. Waiting for processes to exit. Jul 11 00:47:08.795747 systemd-logind[1205]: Removed session 8. Jul 11 00:47:08.973197 kubelet[1965]: I0711 00:47:08.973126 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7769c55fc6-t9cn6" podStartSLOduration=1.064087211 podStartE2EDuration="3.973112478s" podCreationTimestamp="2025-07-11 00:47:05 +0000 UTC" firstStartedPulling="2025-07-11 00:47:05.774506665 +0000 UTC m=+34.021266730" lastFinishedPulling="2025-07-11 00:47:08.683531932 +0000 UTC m=+36.930291997" observedRunningTime="2025-07-11 00:47:08.972509145 +0000 UTC m=+37.219269210" watchObservedRunningTime="2025-07-11 00:47:08.973112478 +0000 UTC m=+37.219872543" Jul 11 00:47:08.995000 audit[3775]: NETFILTER_CFG table=filter:105 family=2 entries=19 op=nft_register_rule pid=3775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:08.995000 audit[3775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe0dab8f0 a2=0 a3=1 items=0 ppid=2081 pid=3775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:08.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:09.005000 audit[3775]: NETFILTER_CFG table=nat:106 family=2 entries=21 op=nft_register_chain pid=3775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:09.005000 audit[3775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffe0dab8f0 a2=0 a3=1 items=0 ppid=2081 pid=3775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:09.005000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:10.849038 env[1214]: time="2025-07-11T00:47:10.848983735Z" level=info msg="StopPodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\"" Jul 11 00:47:10.849424 env[1214]: time="2025-07-11T00:47:10.849396703Z" level=info msg="StopPodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\"" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.900 [INFO][3803] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.900 [INFO][3803] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" iface="eth0" netns="/var/run/netns/cni-49bf5720-2e52-44e0-44fb-5ca7f45a013f" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.900 [INFO][3803] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" iface="eth0" netns="/var/run/netns/cni-49bf5720-2e52-44e0-44fb-5ca7f45a013f" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.900 [INFO][3803] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" iface="eth0" netns="/var/run/netns/cni-49bf5720-2e52-44e0-44fb-5ca7f45a013f" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.900 [INFO][3803] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.900 [INFO][3803] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.922 [INFO][3822] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.923 [INFO][3822] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.923 [INFO][3822] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.934 [WARNING][3822] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.934 [INFO][3822] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.937 [INFO][3822] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:10.946810 env[1214]: 2025-07-11 00:47:10.939 [INFO][3803] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:10.949498 env[1214]: time="2025-07-11T00:47:10.949066320Z" level=info msg="TearDown network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" successfully" Jul 11 00:47:10.949498 env[1214]: time="2025-07-11T00:47:10.949112001Z" level=info msg="StopPodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" returns successfully" Jul 11 00:47:10.948987 systemd[1]: run-netns-cni\x2d49bf5720\x2d2e52\x2d44e0\x2d44fb\x2d5ca7f45a013f.mount: Deactivated successfully. Jul 11 00:47:10.950113 kubelet[1965]: E0711 00:47:10.950083 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:10.951220 env[1214]: time="2025-07-11T00:47:10.951157161Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sn48l,Uid:2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3,Namespace:kube-system,Attempt:1,}" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.893 [INFO][3798] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.894 [INFO][3798] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" iface="eth0" netns="/var/run/netns/cni-5387ac65-fc02-7e79-659a-5c86c0c4e4dd" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.894 [INFO][3798] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" iface="eth0" netns="/var/run/netns/cni-5387ac65-fc02-7e79-659a-5c86c0c4e4dd" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.894 [INFO][3798] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" iface="eth0" netns="/var/run/netns/cni-5387ac65-fc02-7e79-659a-5c86c0c4e4dd" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.894 [INFO][3798] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.894 [INFO][3798] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.936 [INFO][3816] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.936 [INFO][3816] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.937 [INFO][3816] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.950 [WARNING][3816] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.950 [INFO][3816] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.952 [INFO][3816] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:10.957501 env[1214]: 2025-07-11 00:47:10.954 [INFO][3798] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:10.959918 env[1214]: time="2025-07-11T00:47:10.957614569Z" level=info msg="TearDown network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" successfully" Jul 11 00:47:10.959918 env[1214]: time="2025-07-11T00:47:10.957637050Z" level=info msg="StopPodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" returns successfully" Jul 11 00:47:10.959531 systemd[1]: run-netns-cni\x2d5387ac65\x2dfc02\x2d7e79\x2d659a\x2d5c86c0c4e4dd.mount: Deactivated successfully. Jul 11 00:47:10.960411 env[1214]: time="2025-07-11T00:47:10.960374864Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-q7fh6,Uid:6b02708e-e615-4eac-9ab2-be849c532b87,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:47:11.122943 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3bf908df6b7: link becomes ready Jul 11 00:47:11.125121 systemd-networkd[1040]: cali3bf908df6b7: Link UP Jul 11 00:47:11.125525 systemd-networkd[1040]: cali3bf908df6b7: Gained carrier Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.058 [INFO][3834] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--sn48l-eth0 coredns-674b8bbfcf- kube-system 2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3 1006 0 2025-07-11 00:46:38 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-sn48l eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3bf908df6b7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.058 [INFO][3834] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.084 [INFO][3863] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" HandleID="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.084 [INFO][3863] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" HandleID="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001b1460), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-sn48l", "timestamp":"2025-07-11 00:47:11.084437283 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.084 [INFO][3863] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.084 [INFO][3863] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.084 [INFO][3863] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.094 [INFO][3863] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.098 [INFO][3863] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.102 [INFO][3863] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.104 [INFO][3863] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.106 [INFO][3863] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.106 [INFO][3863] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.108 [INFO][3863] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10 Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.111 [INFO][3863] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.115 [INFO][3863] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.115 [INFO][3863] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" host="localhost" Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.115 [INFO][3863] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:11.139219 env[1214]: 2025-07-11 00:47:11.115 [INFO][3863] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" HandleID="k8s-pod-network.1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.139761 env[1214]: 2025-07-11 00:47:11.118 [INFO][3834] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sn48l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-sn48l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3bf908df6b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:11.139761 env[1214]: 2025-07-11 00:47:11.118 [INFO][3834] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.139761 env[1214]: 2025-07-11 00:47:11.118 [INFO][3834] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3bf908df6b7 ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.139761 env[1214]: 2025-07-11 00:47:11.120 [INFO][3834] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.139761 env[1214]: 2025-07-11 00:47:11.120 [INFO][3834] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sn48l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10", Pod:"coredns-674b8bbfcf-sn48l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3bf908df6b7", MAC:"16:fa:11:c6:ea:a5", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:11.139761 env[1214]: 2025-07-11 00:47:11.135 [INFO][3834] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10" Namespace="kube-system" Pod="coredns-674b8bbfcf-sn48l" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:11.148362 env[1214]: time="2025-07-11T00:47:11.148298757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:11.148518 env[1214]: time="2025-07-11T00:47:11.148336878Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:11.148623 env[1214]: time="2025-07-11T00:47:11.148597203Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:11.148903 env[1214]: time="2025-07-11T00:47:11.148856768Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10 pid=3898 runtime=io.containerd.runc.v2 Jul 11 00:47:11.146000 audit[3897]: NETFILTER_CFG table=filter:107 family=2 entries=42 op=nft_register_chain pid=3897 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:11.150830 kernel: kauditd_printk_skb: 781 callbacks suppressed Jul 11 00:47:11.150889 kernel: audit: type=1325 audit(1752194831.146:1190): table=filter:107 family=2 entries=42 op=nft_register_chain pid=3897 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:11.150918 kernel: audit: type=1300 audit(1752194831.146:1190): arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffdb0d2c90 a2=0 a3=ffffb81cbfa8 items=0 ppid=3449 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.146000 audit[3897]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffdb0d2c90 a2=0 a3=ffffb81cbfa8 items=0 ppid=3449 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.146000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:11.155391 kernel: audit: type=1327 audit(1752194831.146:1190): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:11.159195 systemd[1]: Started cri-containerd-1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10.scope. Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.212454 kernel: audit: type=1400 audit(1752194831.206:1191): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.212527 kernel: audit: type=1400 audit(1752194831.206:1192): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.212550 kernel: audit: type=1400 audit(1752194831.206:1193): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216082 kernel: audit: type=1400 audit(1752194831.206:1194): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216155 kernel: audit: type=1400 audit(1752194831.206:1195): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.217847 kernel: audit: type=1400 audit(1752194831.206:1196): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.221625 kernel: audit: type=1400 audit(1752194831.206:1197): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.209000 audit: BPF prog-id=170 op=LOAD Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3898 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165396364376634353435636434376262383663653862393337383039 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3898 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165396364376634353435636434376262383663653862393337383039 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.213000 audit: BPF prog-id=171 op=LOAD Jul 11 00:47:11.213000 audit[3908]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3898 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165396364376634353435636434376262383663653862393337383039 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.215000 audit: BPF prog-id=172 op=LOAD Jul 11 00:47:11.215000 audit[3908]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3898 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165396364376634353435636434376262383663653862393337383039 Jul 11 00:47:11.216000 audit: BPF prog-id=172 op=UNLOAD Jul 11 00:47:11.216000 audit: BPF prog-id=171 op=UNLOAD Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { perfmon } for pid=3908 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit[3908]: AVC avc: denied { bpf } for pid=3908 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.216000 audit: BPF prog-id=173 op=LOAD Jul 11 00:47:11.216000 audit[3908]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3898 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165396364376634353435636434376262383663653862393337383039 Jul 11 00:47:11.222256 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:11.230994 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib3d0c1a45a2: link becomes ready Jul 11 00:47:11.229281 systemd-networkd[1040]: calib3d0c1a45a2: Link UP Jul 11 00:47:11.230327 systemd-networkd[1040]: calib3d0c1a45a2: Gained carrier Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.064 [INFO][3845] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0 calico-apiserver-7bd89b55d4- calico-apiserver 6b02708e-e615-4eac-9ab2-be849c532b87 1005 0 2025-07-11 00:46:47 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7bd89b55d4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7bd89b55d4-q7fh6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib3d0c1a45a2 [] [] }} ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.064 [INFO][3845] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.086 [INFO][3870] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" HandleID="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.086 [INFO][3870] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" HandleID="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d52f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7bd89b55d4-q7fh6", "timestamp":"2025-07-11 00:47:11.086315999 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.086 [INFO][3870] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.115 [INFO][3870] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.115 [INFO][3870] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.195 [INFO][3870] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.200 [INFO][3870] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.204 [INFO][3870] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.206 [INFO][3870] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.210 [INFO][3870] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.210 [INFO][3870] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.212 [INFO][3870] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1 Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.216 [INFO][3870] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.224 [INFO][3870] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.224 [INFO][3870] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" host="localhost" Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.224 [INFO][3870] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:11.250368 env[1214]: 2025-07-11 00:47:11.224 [INFO][3870] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" HandleID="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.252784 env[1214]: 2025-07-11 00:47:11.226 [INFO][3845] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6b02708e-e615-4eac-9ab2-be849c532b87", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7bd89b55d4-q7fh6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3d0c1a45a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:11.252784 env[1214]: 2025-07-11 00:47:11.226 [INFO][3845] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.252784 env[1214]: 2025-07-11 00:47:11.226 [INFO][3845] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib3d0c1a45a2 ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.252784 env[1214]: 2025-07-11 00:47:11.230 [INFO][3845] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.252784 env[1214]: 2025-07-11 00:47:11.233 [INFO][3845] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6b02708e-e615-4eac-9ab2-be849c532b87", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1", Pod:"calico-apiserver-7bd89b55d4-q7fh6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3d0c1a45a2", MAC:"fe:05:41:1d:01:9f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:11.252784 env[1214]: 2025-07-11 00:47:11.244 [INFO][3845] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-q7fh6" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:11.255056 env[1214]: time="2025-07-11T00:47:11.254433249Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-sn48l,Uid:2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3,Namespace:kube-system,Attempt:1,} returns sandbox id \"1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10\"" Jul 11 00:47:11.255215 kubelet[1965]: E0711 00:47:11.255187 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:11.258725 env[1214]: time="2025-07-11T00:47:11.258690211Z" level=info msg="CreateContainer within sandbox \"1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:47:11.264265 env[1214]: time="2025-07-11T00:47:11.264177277Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:11.264347 env[1214]: time="2025-07-11T00:47:11.264299359Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:11.264347 env[1214]: time="2025-07-11T00:47:11.264328440Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:11.265006 env[1214]: time="2025-07-11T00:47:11.264575645Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1 pid=3947 runtime=io.containerd.runc.v2 Jul 11 00:47:11.265000 audit[3956]: NETFILTER_CFG table=filter:108 family=2 entries=54 op=nft_register_chain pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:11.265000 audit[3956]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29396 a0=3 a1=ffffd03f16c0 a2=0 a3=ffff958a1fa8 items=0 ppid=3449 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.265000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:11.272492 env[1214]: time="2025-07-11T00:47:11.272384636Z" level=info msg="CreateContainer within sandbox \"1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"b5a36a6cbef357d49cec9b7d7cded34675475e832fdf2a02b68a7c3776288045\"" Jul 11 00:47:11.272935 env[1214]: time="2025-07-11T00:47:11.272902486Z" level=info msg="StartContainer for \"b5a36a6cbef357d49cec9b7d7cded34675475e832fdf2a02b68a7c3776288045\"" Jul 11 00:47:11.277588 systemd[1]: Started cri-containerd-e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1.scope. Jul 11 00:47:11.300877 systemd[1]: Started cri-containerd-b5a36a6cbef357d49cec9b7d7cded34675475e832fdf2a02b68a7c3776288045.scope. Jul 11 00:47:11.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit: BPF prog-id=174 op=LOAD Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3947 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616465313365666436623032313431653061343438623166306233 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3947 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616465313365666436623032313431653061343438623166306233 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit: BPF prog-id=175 op=LOAD Jul 11 00:47:11.315000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3947 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616465313365666436623032313431653061343438623166306233 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit: BPF prog-id=176 op=LOAD Jul 11 00:47:11.315000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3947 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616465313365666436623032313431653061343438623166306233 Jul 11 00:47:11.315000 audit: BPF prog-id=176 op=UNLOAD Jul 11 00:47:11.315000 audit: BPF prog-id=175 op=UNLOAD Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { perfmon } for pid=3957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.315000 audit: BPF prog-id=177 op=LOAD Jul 11 00:47:11.315000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3947 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537616465313365666436623032313431653061343438623166306233 Jul 11 00:47:11.318884 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.320000 audit: BPF prog-id=178 op=LOAD Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3898 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613336613663626566333537643439636563396237643763646564 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3898 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613336613663626566333537643439636563396237643763646564 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit: BPF prog-id=179 op=LOAD Jul 11 00:47:11.321000 audit[3975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3898 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613336613663626566333537643439636563396237643763646564 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit: BPF prog-id=180 op=LOAD Jul 11 00:47:11.321000 audit[3975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3898 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613336613663626566333537643439636563396237643763646564 Jul 11 00:47:11.321000 audit: BPF prog-id=180 op=UNLOAD Jul 11 00:47:11.321000 audit: BPF prog-id=179 op=UNLOAD Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:11.321000 audit: BPF prog-id=181 op=LOAD Jul 11 00:47:11.321000 audit[3975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3898 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613336613663626566333537643439636563396237643763646564 Jul 11 00:47:11.336814 env[1214]: time="2025-07-11T00:47:11.336775680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-q7fh6,Uid:6b02708e-e615-4eac-9ab2-be849c532b87,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1\"" Jul 11 00:47:11.338218 env[1214]: time="2025-07-11T00:47:11.338189268Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 11 00:47:11.345413 env[1214]: time="2025-07-11T00:47:11.345358966Z" level=info msg="StartContainer for \"b5a36a6cbef357d49cec9b7d7cded34675475e832fdf2a02b68a7c3776288045\" returns successfully" Jul 11 00:47:11.407000 audit[3991]: AVC avc: denied { getattr } for pid=3991 comm="coredns" path="cgroup:[4026532724]" dev="nsfs" ino=4026532724 scontext=system_u:system_r:svirt_lxc_net_t:s0:c85,c995 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:47:11.407000 audit[3991]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a08 a2=40000e23f8 a3=0 items=0 ppid=3898 pid=3991 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c85,c995 key=(null) Jul 11 00:47:11.407000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:47:11.848483 env[1214]: time="2025-07-11T00:47:11.848366689Z" level=info msg="StopPodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\"" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.894 [INFO][4036] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.895 [INFO][4036] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" iface="eth0" netns="/var/run/netns/cni-2945be7f-d1ad-57a1-5a47-e1eed28e4764" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.895 [INFO][4036] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" iface="eth0" netns="/var/run/netns/cni-2945be7f-d1ad-57a1-5a47-e1eed28e4764" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.897 [INFO][4036] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" iface="eth0" netns="/var/run/netns/cni-2945be7f-d1ad-57a1-5a47-e1eed28e4764" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.897 [INFO][4036] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.897 [INFO][4036] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.921 [INFO][4045] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.921 [INFO][4045] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.922 [INFO][4045] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.931 [WARNING][4045] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.931 [INFO][4045] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.932 [INFO][4045] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:11.939738 env[1214]: 2025-07-11 00:47:11.933 [INFO][4036] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:11.940415 env[1214]: time="2025-07-11T00:47:11.939859377Z" level=info msg="TearDown network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" successfully" Jul 11 00:47:11.940415 env[1214]: time="2025-07-11T00:47:11.939887658Z" level=info msg="StopPodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" returns successfully" Jul 11 00:47:11.940678 kubelet[1965]: E0711 00:47:11.940640 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:11.941768 env[1214]: time="2025-07-11T00:47:11.941242084Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xjqbp,Uid:3cc6dd69-6e20-45d6-8c39-7a4c038726dc,Namespace:kube-system,Attempt:1,}" Jul 11 00:47:11.950830 systemd[1]: run-netns-cni\x2d2945be7f\x2dd1ad\x2d57a1\x2d5a47\x2de1eed28e4764.mount: Deactivated successfully. Jul 11 00:47:11.974136 kubelet[1965]: E0711 00:47:11.974075 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:11.991656 kubelet[1965]: I0711 00:47:11.991597 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-sn48l" podStartSLOduration=33.991580937 podStartE2EDuration="33.991580937s" podCreationTimestamp="2025-07-11 00:46:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:47:11.989580298 +0000 UTC m=+40.236340443" watchObservedRunningTime="2025-07-11 00:47:11.991580937 +0000 UTC m=+40.238341002" Jul 11 00:47:11.993000 audit[4068]: NETFILTER_CFG table=filter:109 family=2 entries=18 op=nft_register_rule pid=4068 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:11.993000 audit[4068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd934fa70 a2=0 a3=1 items=0 ppid=2081 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:11.993000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:12.001000 audit[4068]: NETFILTER_CFG table=nat:110 family=2 entries=16 op=nft_register_rule pid=4068 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:12.001000 audit[4068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffd934fa70 a2=0 a3=1 items=0 ppid=2081 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.001000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:12.020000 audit[4071]: NETFILTER_CFG table=filter:111 family=2 entries=15 op=nft_register_rule pid=4071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:12.020000 audit[4071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff0b676f0 a2=0 a3=1 items=0 ppid=2081 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.020000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:12.024000 audit[4071]: NETFILTER_CFG table=nat:112 family=2 entries=37 op=nft_register_chain pid=4071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:12.024000 audit[4071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=fffff0b676f0 a2=0 a3=1 items=0 ppid=2081 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:12.120601 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif0a41dab398: link becomes ready Jul 11 00:47:12.118178 systemd-networkd[1040]: calif0a41dab398: Link UP Jul 11 00:47:12.120870 systemd-networkd[1040]: calif0a41dab398: Gained carrier Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.031 [INFO][4055] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0 coredns-674b8bbfcf- kube-system 3cc6dd69-6e20-45d6-8c39-7a4c038726dc 1024 0 2025-07-11 00:46:38 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-xjqbp eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif0a41dab398 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.031 [INFO][4055] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.059 [INFO][4074] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" HandleID="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.060 [INFO][4074] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" HandleID="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004cea0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-xjqbp", "timestamp":"2025-07-11 00:47:12.059607424 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.060 [INFO][4074] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.060 [INFO][4074] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.060 [INFO][4074] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.071 [INFO][4074] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.077 [INFO][4074] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.082 [INFO][4074] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.083 [INFO][4074] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.086 [INFO][4074] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.086 [INFO][4074] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.087 [INFO][4074] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.094 [INFO][4074] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.113 [INFO][4074] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.113 [INFO][4074] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" host="localhost" Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.113 [INFO][4074] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:12.141315 env[1214]: 2025-07-11 00:47:12.114 [INFO][4074] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" HandleID="k8s-pod-network.d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.141944 env[1214]: 2025-07-11 00:47:12.116 [INFO][4055] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"3cc6dd69-6e20-45d6-8c39-7a4c038726dc", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-xjqbp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0a41dab398", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:12.141944 env[1214]: 2025-07-11 00:47:12.116 [INFO][4055] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.141944 env[1214]: 2025-07-11 00:47:12.116 [INFO][4055] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif0a41dab398 ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.141944 env[1214]: 2025-07-11 00:47:12.119 [INFO][4055] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.141944 env[1214]: 2025-07-11 00:47:12.121 [INFO][4055] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"3cc6dd69-6e20-45d6-8c39-7a4c038726dc", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b", Pod:"coredns-674b8bbfcf-xjqbp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0a41dab398", MAC:"a6:d1:0f:d0:3f:67", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:12.141944 env[1214]: 2025-07-11 00:47:12.138 [INFO][4055] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b" Namespace="kube-system" Pod="coredns-674b8bbfcf-xjqbp" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:12.151534 env[1214]: time="2025-07-11T00:47:12.151464036Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:12.151534 env[1214]: time="2025-07-11T00:47:12.151507877Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:12.151534 env[1214]: time="2025-07-11T00:47:12.151519077Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:12.151880 env[1214]: time="2025-07-11T00:47:12.151758282Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b pid=4098 runtime=io.containerd.runc.v2 Jul 11 00:47:12.149000 audit[4099]: NETFILTER_CFG table=filter:113 family=2 entries=40 op=nft_register_chain pid=4099 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:12.149000 audit[4099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20344 a0=3 a1=fffff7ac67d0 a2=0 a3=ffff849fdfa8 items=0 ppid=3449 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.149000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:12.167165 systemd[1]: Started cri-containerd-d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b.scope. Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit: BPF prog-id=182 op=LOAD Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4098 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433656565656238353765373466363439366464373838376464306664 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4098 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433656565656238353765373466363439366464373838376464306664 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.202000 audit: BPF prog-id=183 op=LOAD Jul 11 00:47:12.202000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4098 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433656565656238353765373466363439366464373838376464306664 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit: BPF prog-id=184 op=LOAD Jul 11 00:47:12.203000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4098 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433656565656238353765373466363439366464373838376464306664 Jul 11 00:47:12.203000 audit: BPF prog-id=184 op=UNLOAD Jul 11 00:47:12.203000 audit: BPF prog-id=183 op=UNLOAD Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.203000 audit: BPF prog-id=185 op=LOAD Jul 11 00:47:12.203000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4098 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433656565656238353765373466363439366464373838376464306664 Jul 11 00:47:12.205698 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:12.226682 env[1214]: time="2025-07-11T00:47:12.226634414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xjqbp,Uid:3cc6dd69-6e20-45d6-8c39-7a4c038726dc,Namespace:kube-system,Attempt:1,} returns sandbox id \"d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b\"" Jul 11 00:47:12.227891 kubelet[1965]: E0711 00:47:12.227344 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:12.237059 env[1214]: time="2025-07-11T00:47:12.237021089Z" level=info msg="CreateContainer within sandbox \"d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 11 00:47:12.252561 env[1214]: time="2025-07-11T00:47:12.252517262Z" level=info msg="CreateContainer within sandbox \"d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"5a6b534286d82a0aed458d32a946cfea6839ecdddc71524286f1ce40b161220d\"" Jul 11 00:47:12.253125 env[1214]: time="2025-07-11T00:47:12.253087672Z" level=info msg="StartContainer for \"5a6b534286d82a0aed458d32a946cfea6839ecdddc71524286f1ce40b161220d\"" Jul 11 00:47:12.270372 systemd[1]: Started cri-containerd-5a6b534286d82a0aed458d32a946cfea6839ecdddc71524286f1ce40b161220d.scope. Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit: BPF prog-id=186 op=LOAD Jul 11 00:47:12.292000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.292000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4098 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561366235333432383664383261306165643435386433326139343663 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4098 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561366235333432383664383261306165643435386433326139343663 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit: BPF prog-id=187 op=LOAD Jul 11 00:47:12.293000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4098 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561366235333432383664383261306165643435386433326139343663 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit: BPF prog-id=188 op=LOAD Jul 11 00:47:12.293000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4098 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561366235333432383664383261306165643435386433326139343663 Jul 11 00:47:12.293000 audit: BPF prog-id=188 op=UNLOAD Jul 11 00:47:12.293000 audit: BPF prog-id=187 op=UNLOAD Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { perfmon } for pid=4138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit[4138]: AVC avc: denied { bpf } for pid=4138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:12.293000 audit: BPF prog-id=189 op=LOAD Jul 11 00:47:12.293000 audit[4138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4098 pid=4138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:12.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561366235333432383664383261306165643435386433326139343663 Jul 11 00:47:12.307113 env[1214]: time="2025-07-11T00:47:12.307074410Z" level=info msg="StartContainer for \"5a6b534286d82a0aed458d32a946cfea6839ecdddc71524286f1ce40b161220d\" returns successfully" Jul 11 00:47:12.318000 audit[4149]: AVC avc: denied { getattr } for pid=4149 comm="coredns" path="cgroup:[4026532733]" dev="nsfs" ino=4026532733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c834 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 11 00:47:12.318000 audit[4149]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056ac8 a2=40000da578 a3=0 items=0 ppid=4098 pid=4149 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c834 key=(null) Jul 11 00:47:12.318000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 11 00:47:12.397439 systemd-networkd[1040]: calib3d0c1a45a2: Gained IPv6LL Jul 11 00:47:12.848975 env[1214]: time="2025-07-11T00:47:12.848904906Z" level=info msg="StopPodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\"" Jul 11 00:47:12.849390 env[1214]: time="2025-07-11T00:47:12.849362795Z" level=info msg="StopPodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\"" Jul 11 00:47:12.909354 systemd-networkd[1040]: cali3bf908df6b7: Gained IPv6LL Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.898 [INFO][4188] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.898 [INFO][4188] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" iface="eth0" netns="/var/run/netns/cni-0483ad2a-88ca-f490-f6c9-8d27ede29555" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.898 [INFO][4188] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" iface="eth0" netns="/var/run/netns/cni-0483ad2a-88ca-f490-f6c9-8d27ede29555" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.899 [INFO][4188] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" iface="eth0" netns="/var/run/netns/cni-0483ad2a-88ca-f490-f6c9-8d27ede29555" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.899 [INFO][4188] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.899 [INFO][4188] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.939 [INFO][4209] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.939 [INFO][4209] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.939 [INFO][4209] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.952 [WARNING][4209] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.952 [INFO][4209] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.954 [INFO][4209] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:12.957665 env[1214]: 2025-07-11 00:47:12.956 [INFO][4188] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:12.958455 env[1214]: time="2025-07-11T00:47:12.958419091Z" level=info msg="TearDown network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" successfully" Jul 11 00:47:12.958538 env[1214]: time="2025-07-11T00:47:12.958520773Z" level=info msg="StopPodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" returns successfully" Jul 11 00:47:12.960442 systemd[1]: run-netns-cni\x2d0483ad2a\x2d88ca\x2df490\x2df6c9\x2d8d27ede29555.mount: Deactivated successfully. Jul 11 00:47:12.961076 env[1214]: time="2025-07-11T00:47:12.961037101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-mx7hp,Uid:8154f407-051f-40e9-9da5-21e3ee58e601,Namespace:calico-system,Attempt:1,}" Jul 11 00:47:12.984817 kubelet[1965]: E0711 00:47:12.984409 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:12.984817 kubelet[1965]: E0711 00:47:12.984526 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:13.002634 kubelet[1965]: I0711 00:47:13.001881 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-xjqbp" podStartSLOduration=35.00185379 podStartE2EDuration="35.00185379s" podCreationTimestamp="2025-07-11 00:46:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:47:13.001690667 +0000 UTC m=+41.248450732" watchObservedRunningTime="2025-07-11 00:47:13.00185379 +0000 UTC m=+41.248613855" Jul 11 00:47:13.008000 audit[4242]: NETFILTER_CFG table=filter:114 family=2 entries=12 op=nft_register_rule pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:13.008000 audit[4242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd851ef90 a2=0 a3=1 items=0 ppid=2081 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.937 [INFO][4200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.937 [INFO][4200] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" iface="eth0" netns="/var/run/netns/cni-f4752bfb-b412-ada4-3441-e97b0e30571a" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.937 [INFO][4200] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" iface="eth0" netns="/var/run/netns/cni-f4752bfb-b412-ada4-3441-e97b0e30571a" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.937 [INFO][4200] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" iface="eth0" netns="/var/run/netns/cni-f4752bfb-b412-ada4-3441-e97b0e30571a" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.937 [INFO][4200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.937 [INFO][4200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.990 [INFO][4218] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.990 [INFO][4218] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:12.990 [INFO][4218] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:13.005 [WARNING][4218] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:13.006 [INFO][4218] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:13.007 [INFO][4218] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:13.012236 env[1214]: 2025-07-11 00:47:13.009 [INFO][4200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:13.012604 env[1214]: time="2025-07-11T00:47:13.012370824Z" level=info msg="TearDown network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" successfully" Jul 11 00:47:13.012604 env[1214]: time="2025-07-11T00:47:13.012405984Z" level=info msg="StopPodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" returns successfully" Jul 11 00:47:13.013271 env[1214]: time="2025-07-11T00:47:13.013235800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b9fcdc94-2t8zl,Uid:8a625e31-e897-49ed-a12d-8a2ecfe45c50,Namespace:calico-system,Attempt:1,}" Jul 11 00:47:13.014527 systemd[1]: run-netns-cni\x2df4752bfb\x2db412\x2dada4\x2d3441\x2de97b0e30571a.mount: Deactivated successfully. Jul 11 00:47:13.014000 audit[4242]: NETFILTER_CFG table=nat:115 family=2 entries=46 op=nft_register_rule pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:13.014000 audit[4242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffd851ef90 a2=0 a3=1 items=0 ppid=2081 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.014000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:13.144159 systemd-networkd[1040]: cali8a8604a7e09: Link UP Jul 11 00:47:13.147037 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:47:13.147127 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8a8604a7e09: link becomes ready Jul 11 00:47:13.147008 systemd-networkd[1040]: cali8a8604a7e09: Gained carrier Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.044 [INFO][4227] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0 goldmane-768f4c5c69- calico-system 8154f407-051f-40e9-9da5-21e3ee58e601 1056 0 2025-07-11 00:46:51 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-mx7hp eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali8a8604a7e09 [] [] }} ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.044 [INFO][4227] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.078 [INFO][4258] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" HandleID="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.078 [INFO][4258] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" HandleID="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400011acc0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-mx7hp", "timestamp":"2025-07-11 00:47:13.078222476 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.078 [INFO][4258] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.078 [INFO][4258] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.078 [INFO][4258] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.099 [INFO][4258] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.104 [INFO][4258] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.109 [INFO][4258] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.115 [INFO][4258] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.117 [INFO][4258] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.117 [INFO][4258] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.119 [INFO][4258] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913 Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.122 [INFO][4258] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.135 [INFO][4258] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.136 [INFO][4258] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" host="localhost" Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.136 [INFO][4258] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:13.160996 env[1214]: 2025-07-11 00:47:13.136 [INFO][4258] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" HandleID="k8s-pod-network.0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.161763 env[1214]: 2025-07-11 00:47:13.140 [INFO][4227] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8154f407-051f-40e9-9da5-21e3ee58e601", ResourceVersion:"1056", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-mx7hp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8a8604a7e09", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:13.161763 env[1214]: 2025-07-11 00:47:13.141 [INFO][4227] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.161763 env[1214]: 2025-07-11 00:47:13.141 [INFO][4227] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8a8604a7e09 ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.161763 env[1214]: 2025-07-11 00:47:13.147 [INFO][4227] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.161763 env[1214]: 2025-07-11 00:47:13.147 [INFO][4227] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8154f407-051f-40e9-9da5-21e3ee58e601", ResourceVersion:"1056", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913", Pod:"goldmane-768f4c5c69-mx7hp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8a8604a7e09", MAC:"3a:48:53:46:09:ed", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:13.161763 env[1214]: 2025-07-11 00:47:13.157 [INFO][4227] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913" Namespace="calico-system" Pod="goldmane-768f4c5c69-mx7hp" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:13.169000 audit[4286]: NETFILTER_CFG table=filter:116 family=2 entries=56 op=nft_register_chain pid=4286 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:13.169000 audit[4286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28744 a0=3 a1=ffffcc0876e0 a2=0 a3=ffffa8beafa8 items=0 ppid=3449 pid=4286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.169000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:13.184310 env[1214]: time="2025-07-11T00:47:13.184232228Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:13.184406 env[1214]: time="2025-07-11T00:47:13.184313829Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:13.184406 env[1214]: time="2025-07-11T00:47:13.184341990Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:13.184581 env[1214]: time="2025-07-11T00:47:13.184539953Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913 pid=4294 runtime=io.containerd.runc.v2 Jul 11 00:47:13.194771 systemd[1]: Started cri-containerd-0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913.scope. Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.255000 audit: BPF prog-id=190 op=LOAD Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4294 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061613036363263663137363263666262336430376232356130323961 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4294 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061613036363263663137363263666262336430376232356130323961 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit: BPF prog-id=191 op=LOAD Jul 11 00:47:13.256000 audit[4303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4294 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061613036363263663137363263666262336430376232356130323961 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit: BPF prog-id=192 op=LOAD Jul 11 00:47:13.256000 audit[4303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4294 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061613036363263663137363263666262336430376232356130323961 Jul 11 00:47:13.256000 audit: BPF prog-id=192 op=UNLOAD Jul 11 00:47:13.256000 audit: BPF prog-id=191 op=UNLOAD Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { perfmon } for pid=4303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit[4303]: AVC avc: denied { bpf } for pid=4303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.256000 audit: BPF prog-id=193 op=LOAD Jul 11 00:47:13.256000 audit[4303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4294 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061613036363263663137363263666262336430376232356130323961 Jul 11 00:47:13.261832 systemd-networkd[1040]: calicda5daeb401: Link UP Jul 11 00:47:13.261985 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicda5daeb401: link becomes ready Jul 11 00:47:13.262109 systemd-networkd[1040]: calicda5daeb401: Gained carrier Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.068 [INFO][4243] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0 calico-kube-controllers-b9fcdc94- calico-system 8a625e31-e897-49ed-a12d-8a2ecfe45c50 1057 0 2025-07-11 00:46:52 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:b9fcdc94 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-b9fcdc94-2t8zl eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calicda5daeb401 [] [] }} ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.069 [INFO][4243] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.105 [INFO][4267] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" HandleID="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.105 [INFO][4267] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" HandleID="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000510bd0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-b9fcdc94-2t8zl", "timestamp":"2025-07-11 00:47:13.105663901 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.105 [INFO][4267] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.136 [INFO][4267] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.136 [INFO][4267] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.200 [INFO][4267] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.213 [INFO][4267] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.218 [INFO][4267] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.219 [INFO][4267] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.222 [INFO][4267] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.222 [INFO][4267] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.223 [INFO][4267] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5 Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.240 [INFO][4267] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.253 [INFO][4267] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.253 [INFO][4267] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" host="localhost" Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.253 [INFO][4267] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:13.292324 env[1214]: 2025-07-11 00:47:13.253 [INFO][4267] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" HandleID="k8s-pod-network.b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.292940 env[1214]: 2025-07-11 00:47:13.257 [INFO][4243] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0", GenerateName:"calico-kube-controllers-b9fcdc94-", Namespace:"calico-system", SelfLink:"", UID:"8a625e31-e897-49ed-a12d-8a2ecfe45c50", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b9fcdc94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-b9fcdc94-2t8zl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicda5daeb401", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:13.292940 env[1214]: 2025-07-11 00:47:13.257 [INFO][4243] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.292940 env[1214]: 2025-07-11 00:47:13.257 [INFO][4243] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicda5daeb401 ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.292940 env[1214]: 2025-07-11 00:47:13.261 [INFO][4243] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.292940 env[1214]: 2025-07-11 00:47:13.272 [INFO][4243] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0", GenerateName:"calico-kube-controllers-b9fcdc94-", Namespace:"calico-system", SelfLink:"", UID:"8a625e31-e897-49ed-a12d-8a2ecfe45c50", ResourceVersion:"1057", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b9fcdc94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5", Pod:"calico-kube-controllers-b9fcdc94-2t8zl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicda5daeb401", MAC:"66:aa:c7:32:49:6c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:13.292940 env[1214]: 2025-07-11 00:47:13.290 [INFO][4243] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5" Namespace="calico-system" Pod="calico-kube-controllers-b9fcdc94-2t8zl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:13.294232 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:13.307175 env[1214]: time="2025-07-11T00:47:13.307100850Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:13.307283 env[1214]: time="2025-07-11T00:47:13.307185291Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:13.307283 env[1214]: time="2025-07-11T00:47:13.307213652Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:13.307410 env[1214]: time="2025-07-11T00:47:13.307375415Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5 pid=4336 runtime=io.containerd.runc.v2 Jul 11 00:47:13.310000 audit[4340]: NETFILTER_CFG table=filter:117 family=2 entries=58 op=nft_register_chain pid=4340 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:13.310000 audit[4340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27180 a0=3 a1=fffff06dcbe0 a2=0 a3=ffffba341fa8 items=0 ppid=3449 pid=4340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.310000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:13.320853 systemd[1]: Started cri-containerd-b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5.scope. Jul 11 00:47:13.330137 env[1214]: time="2025-07-11T00:47:13.330090513Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-mx7hp,Uid:8154f407-051f-40e9-9da5-21e3ee58e601,Namespace:calico-system,Attempt:1,} returns sandbox id \"0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913\"" Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.340000 audit: BPF prog-id=194 op=LOAD Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4336 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373933626164346336663765323966313163326634633137383933 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4336 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373933626164346336663765323966313163326634633137383933 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.341000 audit: BPF prog-id=195 op=LOAD Jul 11 00:47:13.341000 audit[4347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4336 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373933626164346336663765323966313163326634633137383933 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.342000 audit: BPF prog-id=196 op=LOAD Jul 11 00:47:13.342000 audit[4347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4336 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373933626164346336663765323966313163326634633137383933 Jul 11 00:47:13.342000 audit: BPF prog-id=196 op=UNLOAD Jul 11 00:47:13.343000 audit: BPF prog-id=195 op=UNLOAD Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { perfmon } for pid=4347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit[4347]: AVC avc: denied { bpf } for pid=4347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.343000 audit: BPF prog-id=197 op=LOAD Jul 11 00:47:13.343000 audit[4347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4336 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373933626164346336663765323966313163326634633137383933 Jul 11 00:47:13.346104 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:13.361786 env[1214]: time="2025-07-11T00:47:13.361749816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-b9fcdc94-2t8zl,Uid:8a625e31-e897-49ed-a12d-8a2ecfe45c50,Namespace:calico-system,Attempt:1,} returns sandbox id \"b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5\"" Jul 11 00:47:13.436343 env[1214]: time="2025-07-11T00:47:13.436234427Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:13.440529 env[1214]: time="2025-07-11T00:47:13.440494866Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:13.442180 env[1214]: time="2025-07-11T00:47:13.442144576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:13.443450 env[1214]: time="2025-07-11T00:47:13.443412639Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:13.444159 env[1214]: time="2025-07-11T00:47:13.444117492Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 11 00:47:13.445797 env[1214]: time="2025-07-11T00:47:13.445769003Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 11 00:47:13.448299 env[1214]: time="2025-07-11T00:47:13.448263489Z" level=info msg="CreateContainer within sandbox \"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:47:13.458064 env[1214]: time="2025-07-11T00:47:13.458027869Z" level=info msg="CreateContainer within sandbox \"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\"" Jul 11 00:47:13.458476 env[1214]: time="2025-07-11T00:47:13.458451996Z" level=info msg="StartContainer for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\"" Jul 11 00:47:13.472572 systemd[1]: Started cri-containerd-1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e.scope. Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.494000 audit: BPF prog-id=198 op=LOAD Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3947 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336161353439366337363132626337376233333639666261633765 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3947 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336161353439366337363132626337376233333639666261633765 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.495000 audit: BPF prog-id=199 op=LOAD Jul 11 00:47:13.495000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3947 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336161353439366337363132626337376233333639666261633765 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.496000 audit: BPF prog-id=200 op=LOAD Jul 11 00:47:13.496000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3947 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336161353439366337363132626337376233333639666261633765 Jul 11 00:47:13.497000 audit: BPF prog-id=200 op=UNLOAD Jul 11 00:47:13.497000 audit: BPF prog-id=199 op=UNLOAD Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { perfmon } for pid=4387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit[4387]: AVC avc: denied { bpf } for pid=4387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:13.497000 audit: BPF prog-id=201 op=LOAD Jul 11 00:47:13.497000 audit[4387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3947 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336161353439366337363132626337376233333639666261633765 Jul 11 00:47:13.526124 env[1214]: time="2025-07-11T00:47:13.526083241Z" level=info msg="StartContainer for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" returns successfully" Jul 11 00:47:13.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.3:22-10.0.0.1:40880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:13.791586 systemd[1]: Started sshd@8-10.0.0.3:22-10.0.0.1:40880.service. Jul 11 00:47:13.836000 audit[4421]: USER_ACCT pid=4421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:13.837667 sshd[4421]: Accepted publickey for core from 10.0.0.1 port 40880 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:13.837000 audit[4421]: CRED_ACQ pid=4421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:13.837000 audit[4421]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde2c59d0 a2=3 a3=1 items=0 ppid=1 pid=4421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:13.837000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:13.839394 sshd[4421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:13.842892 systemd-logind[1205]: New session 9 of user core. Jul 11 00:47:13.843656 systemd[1]: Started session-9.scope. Jul 11 00:47:13.849000 audit[4421]: USER_START pid=4421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:13.855146 env[1214]: time="2025-07-11T00:47:13.850778379Z" level=info msg="StopPodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\"" Jul 11 00:47:13.855000 audit[4423]: CRED_ACQ pid=4423 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.899 [INFO][4434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.899 [INFO][4434] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" iface="eth0" netns="/var/run/netns/cni-b9ac98ff-928e-0c50-ddf6-3eb34a602283" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.901 [INFO][4434] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" iface="eth0" netns="/var/run/netns/cni-b9ac98ff-928e-0c50-ddf6-3eb34a602283" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.901 [INFO][4434] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" iface="eth0" netns="/var/run/netns/cni-b9ac98ff-928e-0c50-ddf6-3eb34a602283" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.901 [INFO][4434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.902 [INFO][4434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.930 [INFO][4446] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.930 [INFO][4446] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.930 [INFO][4446] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.944 [WARNING][4446] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.944 [INFO][4446] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.946 [INFO][4446] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:13.953053 env[1214]: 2025-07-11 00:47:13.951 [INFO][4434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:13.953479 env[1214]: time="2025-07-11T00:47:13.953281226Z" level=info msg="TearDown network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" successfully" Jul 11 00:47:13.953479 env[1214]: time="2025-07-11T00:47:13.953311267Z" level=info msg="StopPodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" returns successfully" Jul 11 00:47:13.954113 env[1214]: time="2025-07-11T00:47:13.954080241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-d9699865b-wgvvx,Uid:773bbffc-8696-4271-bbeb-cae72bb8bd55,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:47:13.955104 systemd[1]: run-netns-cni\x2db9ac98ff\x2d928e\x2d0c50\x2dddf6\x2d3eb34a602283.mount: Deactivated successfully. Jul 11 00:47:13.997031 systemd-networkd[1040]: calif0a41dab398: Gained IPv6LL Jul 11 00:47:14.007265 kubelet[1965]: I0711 00:47:14.007191 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7bd89b55d4-q7fh6" podStartSLOduration=24.900063689 podStartE2EDuration="27.007155736s" podCreationTimestamp="2025-07-11 00:46:47 +0000 UTC" firstStartedPulling="2025-07-11 00:47:11.337913422 +0000 UTC m=+39.584673487" lastFinishedPulling="2025-07-11 00:47:13.445005509 +0000 UTC m=+41.691765534" observedRunningTime="2025-07-11 00:47:14.006666727 +0000 UTC m=+42.253426792" watchObservedRunningTime="2025-07-11 00:47:14.007155736 +0000 UTC m=+42.253915801" Jul 11 00:47:14.008275 kubelet[1965]: E0711 00:47:14.008169 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:14.008842 kubelet[1965]: E0711 00:47:14.008495 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:14.016000 audit[4472]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:14.016000 audit[4472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd3e341a0 a2=0 a3=1 items=0 ppid=2081 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:14.024000 audit[4472]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=4472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:14.024000 audit[4472]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd3e341a0 a2=0 a3=1 items=0 ppid=2081 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:14.063575 sshd[4421]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:14.064000 audit[4421]: USER_END pid=4421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:14.064000 audit[4421]: CRED_DISP pid=4421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:14.067504 systemd[1]: sshd@8-10.0.0.3:22-10.0.0.1:40880.service: Deactivated successfully. Jul 11 00:47:14.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.3:22-10.0.0.1:40880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:14.068311 systemd[1]: session-9.scope: Deactivated successfully. Jul 11 00:47:14.068815 systemd-logind[1205]: Session 9 logged out. Waiting for processes to exit. Jul 11 00:47:14.069509 systemd-logind[1205]: Removed session 9. Jul 11 00:47:14.121537 systemd-networkd[1040]: calif1e3ab03c40: Link UP Jul 11 00:47:14.122875 systemd-networkd[1040]: calif1e3ab03c40: Gained carrier Jul 11 00:47:14.123015 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif1e3ab03c40: link becomes ready Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.051 [INFO][4459] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0 calico-apiserver-d9699865b- calico-apiserver 773bbffc-8696-4271-bbeb-cae72bb8bd55 1079 0 2025-07-11 00:46:48 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:d9699865b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-d9699865b-wgvvx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif1e3ab03c40 [] [] }} ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.052 [INFO][4459] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.078 [INFO][4474] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" HandleID="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.078 [INFO][4474] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" HandleID="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000492190), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-d9699865b-wgvvx", "timestamp":"2025-07-11 00:47:14.078700143 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.079 [INFO][4474] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.079 [INFO][4474] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.079 [INFO][4474] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.089 [INFO][4474] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.093 [INFO][4474] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.098 [INFO][4474] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.100 [INFO][4474] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.102 [INFO][4474] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.102 [INFO][4474] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.104 [INFO][4474] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580 Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.107 [INFO][4474] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.114 [INFO][4474] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.114 [INFO][4474] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" host="localhost" Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.114 [INFO][4474] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:14.136286 env[1214]: 2025-07-11 00:47:14.114 [INFO][4474] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" HandleID="k8s-pod-network.5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.137297 env[1214]: 2025-07-11 00:47:14.116 [INFO][4459] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0", GenerateName:"calico-apiserver-d9699865b-", Namespace:"calico-apiserver", SelfLink:"", UID:"773bbffc-8696-4271-bbeb-cae72bb8bd55", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"d9699865b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-d9699865b-wgvvx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif1e3ab03c40", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:14.137297 env[1214]: 2025-07-11 00:47:14.116 [INFO][4459] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.137297 env[1214]: 2025-07-11 00:47:14.116 [INFO][4459] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif1e3ab03c40 ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.137297 env[1214]: 2025-07-11 00:47:14.123 [INFO][4459] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.137297 env[1214]: 2025-07-11 00:47:14.123 [INFO][4459] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0", GenerateName:"calico-apiserver-d9699865b-", Namespace:"calico-apiserver", SelfLink:"", UID:"773bbffc-8696-4271-bbeb-cae72bb8bd55", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"d9699865b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580", Pod:"calico-apiserver-d9699865b-wgvvx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif1e3ab03c40", MAC:"fe:db:f1:f5:80:a5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:14.137297 env[1214]: 2025-07-11 00:47:14.134 [INFO][4459] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580" Namespace="calico-apiserver" Pod="calico-apiserver-d9699865b-wgvvx" WorkloadEndpoint="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:14.149000 audit[4500]: NETFILTER_CFG table=filter:120 family=2 entries=59 op=nft_register_chain pid=4500 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:14.149000 audit[4500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29476 a0=3 a1=ffffe61a3750 a2=0 a3=ffff9e3fffa8 items=0 ppid=3449 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.149000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:14.150793 env[1214]: time="2025-07-11T00:47:14.150724199Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:14.150793 env[1214]: time="2025-07-11T00:47:14.150764440Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:14.150793 env[1214]: time="2025-07-11T00:47:14.150774320Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:14.151052 env[1214]: time="2025-07-11T00:47:14.150912962Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580 pid=4501 runtime=io.containerd.runc.v2 Jul 11 00:47:14.167382 systemd[1]: Started cri-containerd-5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580.scope. Jul 11 00:47:14.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit: BPF prog-id=202 op=LOAD Jul 11 00:47:14.190000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[4511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4501 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539373366326437666561333338383639633564616461383532656463 Jul 11 00:47:14.190000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.190000 audit[4511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4501 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539373366326437666561333338383639633564616461383532656463 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit: BPF prog-id=203 op=LOAD Jul 11 00:47:14.191000 audit[4511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4501 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539373366326437666561333338383639633564616461383532656463 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.191000 audit: BPF prog-id=204 op=LOAD Jul 11 00:47:14.191000 audit[4511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4501 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539373366326437666561333338383639633564616461383532656463 Jul 11 00:47:14.192000 audit: BPF prog-id=204 op=UNLOAD Jul 11 00:47:14.192000 audit: BPF prog-id=203 op=UNLOAD Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { perfmon } for pid=4511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit[4511]: AVC avc: denied { bpf } for pid=4511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.192000 audit: BPF prog-id=205 op=LOAD Jul 11 00:47:14.192000 audit[4511]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4501 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539373366326437666561333338383639633564616461383532656463 Jul 11 00:47:14.194818 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:14.211125 env[1214]: time="2025-07-11T00:47:14.211083965Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-d9699865b-wgvvx,Uid:773bbffc-8696-4271-bbeb-cae72bb8bd55,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580\"" Jul 11 00:47:14.219230 env[1214]: time="2025-07-11T00:47:14.218758743Z" level=info msg="CreateContainer within sandbox \"5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:47:14.230116 env[1214]: time="2025-07-11T00:47:14.227976469Z" level=info msg="CreateContainer within sandbox \"5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"4c3f03a9c719ddb0b17fca36ab2addb1ca8151ce1656e5c06e1d093f9890c036\"" Jul 11 00:47:14.230116 env[1214]: time="2025-07-11T00:47:14.228487198Z" level=info msg="StartContainer for \"4c3f03a9c719ddb0b17fca36ab2addb1ca8151ce1656e5c06e1d093f9890c036\"" Jul 11 00:47:14.248806 systemd[1]: Started cri-containerd-4c3f03a9c719ddb0b17fca36ab2addb1ca8151ce1656e5c06e1d093f9890c036.scope. Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.269000 audit: BPF prog-id=206 op=LOAD Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4501 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463336630336139633731396464623062313766636133366162326164 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4501 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463336630336139633731396464623062313766636133366162326164 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit: BPF prog-id=207 op=LOAD Jul 11 00:47:14.270000 audit[4542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4501 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463336630336139633731396464623062313766636133366162326164 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit: BPF prog-id=208 op=LOAD Jul 11 00:47:14.270000 audit[4542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4501 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463336630336139633731396464623062313766636133366162326164 Jul 11 00:47:14.270000 audit: BPF prog-id=208 op=UNLOAD Jul 11 00:47:14.270000 audit: BPF prog-id=207 op=UNLOAD Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:14.270000 audit: BPF prog-id=209 op=LOAD Jul 11 00:47:14.270000 audit[4542]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4501 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:14.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463336630336139633731396464623062313766636133366162326164 Jul 11 00:47:14.316825 env[1214]: time="2025-07-11T00:47:14.316706706Z" level=info msg="StartContainer for \"4c3f03a9c719ddb0b17fca36ab2addb1ca8151ce1656e5c06e1d093f9890c036\" returns successfully" Jul 11 00:47:14.382326 systemd-networkd[1040]: calicda5daeb401: Gained IPv6LL Jul 11 00:47:14.573069 systemd-networkd[1040]: cali8a8604a7e09: Gained IPv6LL Jul 11 00:47:14.848552 env[1214]: time="2025-07-11T00:47:14.848444674Z" level=info msg="StopPodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\"" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.915 [INFO][4585] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.916 [INFO][4585] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" iface="eth0" netns="/var/run/netns/cni-45c2bc26-9637-3fa8-c384-c2d56b24e99e" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.917 [INFO][4585] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" iface="eth0" netns="/var/run/netns/cni-45c2bc26-9637-3fa8-c384-c2d56b24e99e" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.918 [INFO][4585] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" iface="eth0" netns="/var/run/netns/cni-45c2bc26-9637-3fa8-c384-c2d56b24e99e" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.919 [INFO][4585] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.919 [INFO][4585] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.945 [INFO][4594] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.945 [INFO][4594] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.945 [INFO][4594] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.960 [WARNING][4594] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.960 [INFO][4594] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.965 [INFO][4594] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:14.970133 env[1214]: 2025-07-11 00:47:14.968 [INFO][4585] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:14.970744 env[1214]: time="2025-07-11T00:47:14.970700314Z" level=info msg="TearDown network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" successfully" Jul 11 00:47:14.970829 env[1214]: time="2025-07-11T00:47:14.970811676Z" level=info msg="StopPodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" returns successfully" Jul 11 00:47:14.973003 systemd[1]: run-netns-cni\x2d45c2bc26\x2d9637\x2d3fa8\x2dc384\x2dc2d56b24e99e.mount: Deactivated successfully. Jul 11 00:47:14.973298 env[1214]: time="2025-07-11T00:47:14.973252599Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-hp5dq,Uid:1bb06ba8-233c-4b40-a7d3-425800a79a04,Namespace:calico-apiserver,Attempt:1,}" Jul 11 00:47:15.012224 kubelet[1965]: E0711 00:47:15.012192 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:15.013468 kubelet[1965]: I0711 00:47:15.013442 1965 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:47:15.062000 audit[4622]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:15.062000 audit[4622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc02ccc00 a2=0 a3=1 items=0 ppid=2081 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.062000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:15.074000 audit[4622]: NETFILTER_CFG table=nat:122 family=2 entries=58 op=nft_register_chain pid=4622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:15.074000 audit[4622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffc02ccc00 a2=0 a3=1 items=0 ppid=2081 pid=4622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.074000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:15.154416 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:47:15.154518 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7f41678ffb2: link becomes ready Jul 11 00:47:15.154452 systemd-networkd[1040]: cali7f41678ffb2: Link UP Jul 11 00:47:15.154579 systemd-networkd[1040]: cali7f41678ffb2: Gained carrier Jul 11 00:47:15.173719 kubelet[1965]: I0711 00:47:15.173636 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-d9699865b-wgvvx" podStartSLOduration=27.173618177 podStartE2EDuration="27.173618177s" podCreationTimestamp="2025-07-11 00:46:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:47:15.025285326 +0000 UTC m=+43.272045511" watchObservedRunningTime="2025-07-11 00:47:15.173618177 +0000 UTC m=+43.420378242" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.049 [INFO][4603] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0 calico-apiserver-7bd89b55d4- calico-apiserver 1bb06ba8-233c-4b40-a7d3-425800a79a04 1101 0 2025-07-11 00:46:47 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7bd89b55d4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7bd89b55d4-hp5dq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7f41678ffb2 [] [] }} ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.050 [INFO][4603] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.084 [INFO][4617] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" HandleID="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.084 [INFO][4617] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" HandleID="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c2fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7bd89b55d4-hp5dq", "timestamp":"2025-07-11 00:47:15.08457213 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.084 [INFO][4617] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.084 [INFO][4617] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.084 [INFO][4617] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.102 [INFO][4617] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.111 [INFO][4617] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.121 [INFO][4617] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.125 [INFO][4617] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.130 [INFO][4617] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.130 [INFO][4617] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.138 [INFO][4617] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.143 [INFO][4617] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.149 [INFO][4617] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.149 [INFO][4617] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" host="localhost" Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.149 [INFO][4617] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:15.183470 env[1214]: 2025-07-11 00:47:15.149 [INFO][4617] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" HandleID="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.184328 env[1214]: 2025-07-11 00:47:15.151 [INFO][4603] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1bb06ba8-233c-4b40-a7d3-425800a79a04", ResourceVersion:"1101", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7bd89b55d4-hp5dq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f41678ffb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:15.184328 env[1214]: 2025-07-11 00:47:15.151 [INFO][4603] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.184328 env[1214]: 2025-07-11 00:47:15.151 [INFO][4603] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7f41678ffb2 ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.184328 env[1214]: 2025-07-11 00:47:15.158 [INFO][4603] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.184328 env[1214]: 2025-07-11 00:47:15.162 [INFO][4603] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1bb06ba8-233c-4b40-a7d3-425800a79a04", ResourceVersion:"1101", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba", Pod:"calico-apiserver-7bd89b55d4-hp5dq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f41678ffb2", MAC:"26:f4:28:09:be:2f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:15.184328 env[1214]: 2025-07-11 00:47:15.176 [INFO][4603] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Namespace="calico-apiserver" Pod="calico-apiserver-7bd89b55d4-hp5dq" WorkloadEndpoint="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:15.202000 audit[4636]: NETFILTER_CFG table=filter:123 family=2 entries=53 op=nft_register_chain pid=4636 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:15.202000 audit[4636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26608 a0=3 a1=ffffd00681b0 a2=0 a3=ffffb2f58fa8 items=0 ppid=3449 pid=4636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.202000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:15.204000 audit[4552]: AVC avc: denied { watch } for pid=4552 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_46_58.3571771574/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c160,c558 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c160,c558 tclass=file permissive=0 Jul 11 00:47:15.204000 audit[4552]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003e52e0 a2=fc6 a3=0 items=0 ppid=4501 pid=4552 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c160,c558 key=(null) Jul 11 00:47:15.204000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:47:15.240747 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1602286048.mount: Deactivated successfully. Jul 11 00:47:15.255035 env[1214]: time="2025-07-11T00:47:15.254948849Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:15.255035 env[1214]: time="2025-07-11T00:47:15.255000610Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:15.255035 env[1214]: time="2025-07-11T00:47:15.255016570Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:15.256013 env[1214]: time="2025-07-11T00:47:15.255142292Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba pid=4645 runtime=io.containerd.runc.v2 Jul 11 00:47:15.271353 systemd[1]: Started cri-containerd-b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba.scope. Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit: BPF prog-id=210 op=LOAD Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4645 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323334356333383435636335633936333535353265333638633964 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4645 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323334356333383435636335633936333535353265333638633964 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.295000 audit: BPF prog-id=211 op=LOAD Jul 11 00:47:15.295000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4645 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323334356333383435636335633936333535353265333638633964 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit: BPF prog-id=212 op=LOAD Jul 11 00:47:15.296000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4645 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323334356333383435636335633936333535353265333638633964 Jul 11 00:47:15.296000 audit: BPF prog-id=212 op=UNLOAD Jul 11 00:47:15.296000 audit: BPF prog-id=211 op=UNLOAD Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.296000 audit: BPF prog-id=213 op=LOAD Jul 11 00:47:15.296000 audit[4655]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4645 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232323334356333383435636335633936333535353265333638633964 Jul 11 00:47:15.299014 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:15.324536 env[1214]: time="2025-07-11T00:47:15.324494953Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7bd89b55d4-hp5dq,Uid:1bb06ba8-233c-4b40-a7d3-425800a79a04,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba\"" Jul 11 00:47:15.331003 env[1214]: time="2025-07-11T00:47:15.330960027Z" level=info msg="CreateContainer within sandbox \"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 11 00:47:15.341157 env[1214]: time="2025-07-11T00:47:15.341109046Z" level=info msg="CreateContainer within sandbox \"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\"" Jul 11 00:47:15.341572 env[1214]: time="2025-07-11T00:47:15.341539733Z" level=info msg="StartContainer for \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\"" Jul 11 00:47:15.385183 systemd[1]: Started cri-containerd-b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69.scope. Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.404000 audit: BPF prog-id=214 op=LOAD Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4645 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626466616632663635353963613635643834373266393866616334 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4645 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626466616632663635353963613635643834373266393866616334 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit: BPF prog-id=215 op=LOAD Jul 11 00:47:15.405000 audit[4687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4645 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626466616632663635353963613635643834373266393866616334 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit: BPF prog-id=216 op=LOAD Jul 11 00:47:15.405000 audit[4687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4645 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626466616632663635353963613635643834373266393866616334 Jul 11 00:47:15.405000 audit: BPF prog-id=216 op=UNLOAD Jul 11 00:47:15.405000 audit: BPF prog-id=215 op=UNLOAD Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { perfmon } for pid=4687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit[4687]: AVC avc: denied { bpf } for pid=4687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.405000 audit: BPF prog-id=217 op=LOAD Jul 11 00:47:15.405000 audit[4687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4645 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232626466616632663635353963613635643834373266393866616334 Jul 11 00:47:15.424086 env[1214]: time="2025-07-11T00:47:15.423790261Z" level=info msg="StartContainer for \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\" returns successfully" Jul 11 00:47:15.530000 audit[4397]: AVC avc: denied { watch } for pid=4397 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_46_58.3294700197/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c541 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c109,c541 tclass=file permissive=0 Jul 11 00:47:15.530000 audit[4397]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40026e2780 a2=fc6 a3=0 items=0 ppid=3947 pid=4397 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c541 key=(null) Jul 11 00:47:15.530000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:47:15.535199 systemd-networkd[1040]: calif1e3ab03c40: Gained IPv6LL Jul 11 00:47:15.848669 env[1214]: time="2025-07-11T00:47:15.848616180Z" level=info msg="StopPodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\"" Jul 11 00:47:15.894419 env[1214]: time="2025-07-11T00:47:15.894371825Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:15.896769 env[1214]: time="2025-07-11T00:47:15.896709466Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:15.899084 env[1214]: time="2025-07-11T00:47:15.899049947Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:15.901160 env[1214]: time="2025-07-11T00:47:15.901124744Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:15.901976 env[1214]: time="2025-07-11T00:47:15.901914998Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 11 00:47:15.906366 env[1214]: time="2025-07-11T00:47:15.906321115Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 11 00:47:15.911100 env[1214]: time="2025-07-11T00:47:15.911063919Z" level=info msg="CreateContainer within sandbox \"0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 11 00:47:15.921693 env[1214]: time="2025-07-11T00:47:15.921638665Z" level=info msg="CreateContainer within sandbox \"0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"2a33fcbafba2e6eb6199bc64d63603366875b3a6012767736fc4ab44db30cabb\"" Jul 11 00:47:15.922469 env[1214]: time="2025-07-11T00:47:15.922435679Z" level=info msg="StartContainer for \"2a33fcbafba2e6eb6199bc64d63603366875b3a6012767736fc4ab44db30cabb\"" Jul 11 00:47:15.962474 systemd[1]: Started cri-containerd-2a33fcbafba2e6eb6199bc64d63603366875b3a6012767736fc4ab44db30cabb.scope. Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.910 [INFO][4731] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.910 [INFO][4731] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" iface="eth0" netns="/var/run/netns/cni-38618409-6208-07e0-f141-af0331f3db0b" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.910 [INFO][4731] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" iface="eth0" netns="/var/run/netns/cni-38618409-6208-07e0-f141-af0331f3db0b" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.911 [INFO][4731] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" iface="eth0" netns="/var/run/netns/cni-38618409-6208-07e0-f141-af0331f3db0b" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.911 [INFO][4731] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.911 [INFO][4731] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.938 [INFO][4739] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.938 [INFO][4739] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.939 [INFO][4739] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.955 [WARNING][4739] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.955 [INFO][4739] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.956 [INFO][4739] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:15.963873 env[1214]: 2025-07-11 00:47:15.960 [INFO][4731] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:15.967264 systemd[1]: run-netns-cni\x2d38618409\x2d6208\x2d07e0\x2df141\x2daf0331f3db0b.mount: Deactivated successfully. Jul 11 00:47:15.968343 env[1214]: time="2025-07-11T00:47:15.968301446Z" level=info msg="TearDown network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" successfully" Jul 11 00:47:15.968401 env[1214]: time="2025-07-11T00:47:15.968343007Z" level=info msg="StopPodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" returns successfully" Jul 11 00:47:15.969298 env[1214]: time="2025-07-11T00:47:15.969218303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bpjbx,Uid:d048fd00-e37a-441c-8b1c-ff220212c236,Namespace:calico-system,Attempt:1,}" Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.984000 audit: BPF prog-id=218 op=LOAD Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4294 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261333366636261666261326536656236313939626336346436333630 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4294 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261333366636261666261326536656236313939626336346436333630 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit: BPF prog-id=219 op=LOAD Jul 11 00:47:15.985000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4294 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261333366636261666261326536656236313939626336346436333630 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit: BPF prog-id=220 op=LOAD Jul 11 00:47:15.985000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4294 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261333366636261666261326536656236313939626336346436333630 Jul 11 00:47:15.985000 audit: BPF prog-id=220 op=UNLOAD Jul 11 00:47:15.985000 audit: BPF prog-id=219 op=UNLOAD Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { perfmon } for pid=4752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit[4752]: AVC avc: denied { bpf } for pid=4752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:15.985000 audit: BPF prog-id=221 op=LOAD Jul 11 00:47:15.985000 audit[4752]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4294 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:15.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261333366636261666261326536656236313939626336346436333630 Jul 11 00:47:16.015622 env[1214]: time="2025-07-11T00:47:16.015572553Z" level=info msg="StartContainer for \"2a33fcbafba2e6eb6199bc64d63603366875b3a6012767736fc4ab44db30cabb\" returns successfully" Jul 11 00:47:16.021392 kubelet[1965]: I0711 00:47:16.021355 1965 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:47:16.022534 kubelet[1965]: E0711 00:47:16.022494 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:16.047601 kubelet[1965]: I0711 00:47:16.047540 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7bd89b55d4-hp5dq" podStartSLOduration=29.047524064 podStartE2EDuration="29.047524064s" podCreationTimestamp="2025-07-11 00:46:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-11 00:47:16.04672769 +0000 UTC m=+44.293487795" watchObservedRunningTime="2025-07-11 00:47:16.047524064 +0000 UTC m=+44.294284129" Jul 11 00:47:16.064000 audit[4805]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:16.064000 audit[4805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcd085990 a2=0 a3=1 items=0 ppid=2081 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:16.068000 audit[4805]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:16.068000 audit[4805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffcd085990 a2=0 a3=1 items=0 ppid=2081 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.068000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:16.164537 systemd-networkd[1040]: calicdbc35490d8: Link UP Jul 11 00:47:16.172271 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 11 00:47:16.172375 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicdbc35490d8: link becomes ready Jul 11 00:47:16.172498 systemd-networkd[1040]: calicdbc35490d8: Gained carrier Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.051 [INFO][4771] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--bpjbx-eth0 csi-node-driver- calico-system d048fd00-e37a-441c-8b1c-ff220212c236 1116 0 2025-07-11 00:46:51 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-bpjbx eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calicdbc35490d8 [] [] }} ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.051 [INFO][4771] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.083 [INFO][4800] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" HandleID="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.083 [INFO][4800] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" HandleID="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dc140), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-bpjbx", "timestamp":"2025-07-11 00:47:16.082990315 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.083 [INFO][4800] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.083 [INFO][4800] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.083 [INFO][4800] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.121 [INFO][4800] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.127 [INFO][4800] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.132 [INFO][4800] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.134 [INFO][4800] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.136 [INFO][4800] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.136 [INFO][4800] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.138 [INFO][4800] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.143 [INFO][4800] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.159 [INFO][4800] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.159 [INFO][4800] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" host="localhost" Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.159 [INFO][4800] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:16.193402 env[1214]: 2025-07-11 00:47:16.159 [INFO][4800] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" HandleID="k8s-pod-network.92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.194407 env[1214]: 2025-07-11 00:47:16.162 [INFO][4771] cni-plugin/k8s.go 418: Populated endpoint ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bpjbx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d048fd00-e37a-441c-8b1c-ff220212c236", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-bpjbx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicdbc35490d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:16.194407 env[1214]: 2025-07-11 00:47:16.162 [INFO][4771] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.194407 env[1214]: 2025-07-11 00:47:16.162 [INFO][4771] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicdbc35490d8 ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.194407 env[1214]: 2025-07-11 00:47:16.164 [INFO][4771] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.194407 env[1214]: 2025-07-11 00:47:16.174 [INFO][4771] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bpjbx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d048fd00-e37a-441c-8b1c-ff220212c236", ResourceVersion:"1116", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b", Pod:"csi-node-driver-bpjbx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicdbc35490d8", MAC:"ae:7f:0f:5a:52:cc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:16.194407 env[1214]: 2025-07-11 00:47:16.191 [INFO][4771] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b" Namespace="calico-system" Pod="csi-node-driver-bpjbx" WorkloadEndpoint="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:16.206005 env[1214]: time="2025-07-11T00:47:16.205029899Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 11 00:47:16.206005 env[1214]: time="2025-07-11T00:47:16.205074460Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 11 00:47:16.206005 env[1214]: time="2025-07-11T00:47:16.205085020Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 11 00:47:16.206005 env[1214]: time="2025-07-11T00:47:16.205254543Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b pid=4825 runtime=io.containerd.runc.v2 Jul 11 00:47:16.209000 audit[4835]: NETFILTER_CFG table=filter:126 family=2 entries=40 op=nft_register_chain pid=4835 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:16.213456 kernel: kauditd_printk_skb: 811 callbacks suppressed Jul 11 00:47:16.213529 kernel: audit: type=1325 audit(1752194836.209:1456): table=filter:126 family=2 entries=40 op=nft_register_chain pid=4835 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:16.213552 kernel: audit: type=1300 audit(1752194836.209:1456): arch=c00000b7 syscall=211 success=yes exit=20784 a0=3 a1=ffffe5106750 a2=0 a3=ffff9c261fa8 items=0 ppid=3449 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.209000 audit[4835]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20784 a0=3 a1=ffffe5106750 a2=0 a3=ffff9c261fa8 items=0 ppid=3449 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.209000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:16.218585 kernel: audit: type=1327 audit(1752194836.209:1456): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:16.221251 systemd[1]: Started cri-containerd-92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b.scope. Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.247760 kernel: audit: type=1400 audit(1752194836.242:1457): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.247917 kernel: audit: type=1400 audit(1752194836.242:1458): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.248046 kernel: audit: type=1400 audit(1752194836.242:1459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.249756 kernel: audit: type=1400 audit(1752194836.242:1460): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.252114 kernel: audit: type=1400 audit(1752194836.242:1461): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.252233 systemd-resolved[1152]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.256766 kernel: audit: type=1400 audit(1752194836.242:1462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.256843 kernel: audit: type=1400 audit(1752194836.242:1463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.242000 audit: BPF prog-id=222 op=LOAD Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4825 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303336646564646637376564326564623261303162623038636562 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4825 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303336646564646637376564326564623261303162623038636562 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.243000 audit: BPF prog-id=223 op=LOAD Jul 11 00:47:16.243000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4825 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303336646564646637376564326564623261303162623038636562 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.244000 audit: BPF prog-id=224 op=LOAD Jul 11 00:47:16.244000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4825 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303336646564646637376564326564623261303162623038636562 Jul 11 00:47:16.246000 audit: BPF prog-id=224 op=UNLOAD Jul 11 00:47:16.246000 audit: BPF prog-id=223 op=UNLOAD Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { perfmon } for pid=4834 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit[4834]: AVC avc: denied { bpf } for pid=4834 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:16.246000 audit: BPF prog-id=225 op=LOAD Jul 11 00:47:16.246000 audit[4834]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4825 pid=4834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:16.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932303336646564646637376564326564623261303162623038636562 Jul 11 00:47:16.271769 env[1214]: time="2025-07-11T00:47:16.271711488Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bpjbx,Uid:d048fd00-e37a-441c-8b1c-ff220212c236,Namespace:calico-system,Attempt:1,} returns sandbox id \"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b\"" Jul 11 00:47:16.430026 systemd-networkd[1040]: cali7f41678ffb2: Gained IPv6LL Jul 11 00:47:16.634000 audit[4697]: AVC avc: denied { watch } for pid=4697 comm="apiserver" path="/calico-apiserver-certs/..2025_07_11_00_46_58.262113431/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c378 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c363,c378 tclass=file permissive=0 Jul 11 00:47:16.634000 audit[4697]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400159c7a0 a2=fc6 a3=0 items=0 ppid=4645 pid=4697 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c378 key=(null) Jul 11 00:47:16.634000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 11 00:47:17.024647 kubelet[1965]: I0711 00:47:17.024619 1965 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:47:17.037352 kubelet[1965]: I0711 00:47:17.036425 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-mx7hp" podStartSLOduration=23.462873744 podStartE2EDuration="26.036409098s" podCreationTimestamp="2025-07-11 00:46:51 +0000 UTC" firstStartedPulling="2025-07-11 00:47:13.331233694 +0000 UTC m=+41.577993759" lastFinishedPulling="2025-07-11 00:47:15.904769048 +0000 UTC m=+44.151529113" observedRunningTime="2025-07-11 00:47:17.035486442 +0000 UTC m=+45.282246507" watchObservedRunningTime="2025-07-11 00:47:17.036409098 +0000 UTC m=+45.283169163" Jul 11 00:47:17.050000 audit[4876]: NETFILTER_CFG table=filter:127 family=2 entries=12 op=nft_register_rule pid=4876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:17.050000 audit[4876]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff78f9230 a2=0 a3=1 items=0 ppid=2081 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:17.050000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:17.057000 audit[4876]: NETFILTER_CFG table=nat:128 family=2 entries=22 op=nft_register_rule pid=4876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:17.057000 audit[4876]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff78f9230 a2=0 a3=1 items=0 ppid=2081 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:17.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:18.029091 systemd-networkd[1040]: calicdbc35490d8: Gained IPv6LL Jul 11 00:47:18.172756 env[1214]: time="2025-07-11T00:47:18.172672318Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:18.174397 env[1214]: time="2025-07-11T00:47:18.174353786Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:18.176019 env[1214]: time="2025-07-11T00:47:18.175969773Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:18.177786 env[1214]: time="2025-07-11T00:47:18.177753403Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:18.178237 env[1214]: time="2025-07-11T00:47:18.178202290Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 11 00:47:18.180016 env[1214]: time="2025-07-11T00:47:18.179984760Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 11 00:47:18.198221 env[1214]: time="2025-07-11T00:47:18.198148741Z" level=info msg="CreateContainer within sandbox \"b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 11 00:47:18.209473 env[1214]: time="2025-07-11T00:47:18.209431608Z" level=info msg="CreateContainer within sandbox \"b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"ea47c268953e4d7569014fbc93d52e19ff65fd1b76ddb9b3245e8176306b66c5\"" Jul 11 00:47:18.210225 env[1214]: time="2025-07-11T00:47:18.210182580Z" level=info msg="StartContainer for \"ea47c268953e4d7569014fbc93d52e19ff65fd1b76ddb9b3245e8176306b66c5\"" Jul 11 00:47:18.225818 systemd[1]: Started cri-containerd-ea47c268953e4d7569014fbc93d52e19ff65fd1b76ddb9b3245e8176306b66c5.scope. Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit: BPF prog-id=226 op=LOAD Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4336 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:18.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561343763323638393533653464373536393031346662633933643532 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4336 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:18.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561343763323638393533653464373536393031346662633933643532 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit: BPF prog-id=227 op=LOAD Jul 11 00:47:18.243000 audit[4923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4336 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:18.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561343763323638393533653464373536393031346662633933643532 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.243000 audit: BPF prog-id=228 op=LOAD Jul 11 00:47:18.243000 audit[4923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4336 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:18.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561343763323638393533653464373536393031346662633933643532 Jul 11 00:47:18.244000 audit: BPF prog-id=228 op=UNLOAD Jul 11 00:47:18.244000 audit: BPF prog-id=227 op=UNLOAD Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { perfmon } for pid=4923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit[4923]: AVC avc: denied { bpf } for pid=4923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:18.244000 audit: BPF prog-id=229 op=LOAD Jul 11 00:47:18.244000 audit[4923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4336 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:18.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561343763323638393533653464373536393031346662633933643532 Jul 11 00:47:18.266483 env[1214]: time="2025-07-11T00:47:18.264918767Z" level=info msg="StartContainer for \"ea47c268953e4d7569014fbc93d52e19ff65fd1b76ddb9b3245e8176306b66c5\" returns successfully" Jul 11 00:47:19.056886 kubelet[1965]: I0711 00:47:19.056299 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-b9fcdc94-2t8zl" podStartSLOduration=22.240039877 podStartE2EDuration="27.056281905s" podCreationTimestamp="2025-07-11 00:46:52 +0000 UTC" firstStartedPulling="2025-07-11 00:47:13.362868397 +0000 UTC m=+41.609628462" lastFinishedPulling="2025-07-11 00:47:18.179110425 +0000 UTC m=+46.425870490" observedRunningTime="2025-07-11 00:47:19.048684941 +0000 UTC m=+47.295445006" watchObservedRunningTime="2025-07-11 00:47:19.056281905 +0000 UTC m=+47.303041970" Jul 11 00:47:19.068502 systemd[1]: Started sshd@9-10.0.0.3:22-10.0.0.1:40888.service. Jul 11 00:47:19.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.3:22-10.0.0.1:40888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:19.118189 sshd[4996]: Accepted publickey for core from 10.0.0.1 port 40888 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:19.117000 audit[4996]: USER_ACCT pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.118000 audit[4996]: CRED_ACQ pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.118000 audit[4996]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff82b66c0 a2=3 a3=1 items=0 ppid=1 pid=4996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.118000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:19.119648 sshd[4996]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:19.124029 systemd[1]: Started session-10.scope. Jul 11 00:47:19.124948 systemd-logind[1205]: New session 10 of user core. Jul 11 00:47:19.128000 audit[4996]: USER_START pid=4996 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.130000 audit[5007]: CRED_ACQ pid=5007 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.342201 sshd[4996]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:19.345619 systemd[1]: Started sshd@10-10.0.0.3:22-10.0.0.1:40900.service. Jul 11 00:47:19.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.3:22-10.0.0.1:40900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:19.346000 audit[4996]: USER_END pid=4996 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.346000 audit[4996]: CRED_DISP pid=4996 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.348997 systemd-logind[1205]: Session 10 logged out. Waiting for processes to exit. Jul 11 00:47:19.349985 systemd[1]: session-10.scope: Deactivated successfully. Jul 11 00:47:19.351002 systemd-logind[1205]: Removed session 10. Jul 11 00:47:19.351443 systemd[1]: sshd@9-10.0.0.3:22-10.0.0.1:40888.service: Deactivated successfully. Jul 11 00:47:19.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.3:22-10.0.0.1:40888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:19.386000 audit[5018]: USER_ACCT pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.387378 sshd[5018]: Accepted publickey for core from 10.0.0.1 port 40900 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:19.387000 audit[5018]: CRED_ACQ pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.387000 audit[5018]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee016d40 a2=3 a3=1 items=0 ppid=1 pid=5018 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.387000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:19.388889 sshd[5018]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:19.392809 systemd-logind[1205]: New session 11 of user core. Jul 11 00:47:19.393669 systemd[1]: Started session-11.scope. Jul 11 00:47:19.401000 audit[5018]: USER_START pid=5018 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.402000 audit[5021]: CRED_ACQ pid=5021 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.404190 env[1214]: time="2025-07-11T00:47:19.404151285Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:19.406007 env[1214]: time="2025-07-11T00:47:19.405968995Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:19.407558 env[1214]: time="2025-07-11T00:47:19.407521660Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:19.410297 env[1214]: time="2025-07-11T00:47:19.410267585Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:19.410703 env[1214]: time="2025-07-11T00:47:19.410674111Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 11 00:47:19.415283 env[1214]: time="2025-07-11T00:47:19.415247226Z" level=info msg="CreateContainer within sandbox \"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 11 00:47:19.439145 env[1214]: time="2025-07-11T00:47:19.438377122Z" level=info msg="CreateContainer within sandbox \"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"ea8bb07176a9d2243a66673fb4ed0bdbacbdc1961bd4e277f3c5db2f263efa96\"" Jul 11 00:47:19.439999 env[1214]: time="2025-07-11T00:47:19.439970948Z" level=info msg="StartContainer for \"ea8bb07176a9d2243a66673fb4ed0bdbacbdc1961bd4e277f3c5db2f263efa96\"" Jul 11 00:47:19.462420 systemd[1]: Started cri-containerd-ea8bb07176a9d2243a66673fb4ed0bdbacbdc1961bd4e277f3c5db2f263efa96.scope. Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4825 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561386262303731373661396432323433613636363733666234656430 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit: BPF prog-id=230 op=LOAD Jul 11 00:47:19.488000 audit[5034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4825 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561386262303731373661396432323433613636363733666234656430 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit: BPF prog-id=231 op=LOAD Jul 11 00:47:19.488000 audit[5034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4825 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561386262303731373661396432323433613636363733666234656430 Jul 11 00:47:19.488000 audit: BPF prog-id=231 op=UNLOAD Jul 11 00:47:19.488000 audit: BPF prog-id=230 op=UNLOAD Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { perfmon } for pid=5034 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit[5034]: AVC avc: denied { bpf } for pid=5034 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:19.488000 audit: BPF prog-id=232 op=LOAD Jul 11 00:47:19.488000 audit[5034]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4825 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561386262303731373661396432323433613636363733666234656430 Jul 11 00:47:19.551412 env[1214]: time="2025-07-11T00:47:19.551365240Z" level=info msg="StartContainer for \"ea8bb07176a9d2243a66673fb4ed0bdbacbdc1961bd4e277f3c5db2f263efa96\" returns successfully" Jul 11 00:47:19.552863 env[1214]: time="2025-07-11T00:47:19.552827144Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 11 00:47:19.665006 systemd[1]: Started sshd@11-10.0.0.3:22-10.0.0.1:40914.service. Jul 11 00:47:19.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.3:22-10.0.0.1:40914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:19.668114 sshd[5018]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:19.668000 audit[5018]: USER_END pid=5018 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.669000 audit[5018]: CRED_DISP pid=5018 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.3:22-10.0.0.1:40900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:19.678319 systemd[1]: sshd@10-10.0.0.3:22-10.0.0.1:40900.service: Deactivated successfully. Jul 11 00:47:19.679215 systemd[1]: session-11.scope: Deactivated successfully. Jul 11 00:47:19.682373 systemd-logind[1205]: Session 11 logged out. Waiting for processes to exit. Jul 11 00:47:19.683260 systemd-logind[1205]: Removed session 11. Jul 11 00:47:19.725000 audit[5065]: USER_ACCT pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.727036 sshd[5065]: Accepted publickey for core from 10.0.0.1 port 40914 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:19.726000 audit[5065]: CRED_ACQ pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.726000 audit[5065]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbc3d140 a2=3 a3=1 items=0 ppid=1 pid=5065 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:19.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:19.728067 sshd[5065]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:19.732260 systemd-logind[1205]: New session 12 of user core. Jul 11 00:47:19.732957 systemd[1]: Started session-12.scope. Jul 11 00:47:19.737000 audit[5065]: USER_START pid=5065 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.738000 audit[5068]: CRED_ACQ pid=5068 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.865706 sshd[5065]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:19.866000 audit[5065]: USER_END pid=5065 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.866000 audit[5065]: CRED_DISP pid=5065 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:19.868712 systemd[1]: session-12.scope: Deactivated successfully. Jul 11 00:47:19.869324 systemd-logind[1205]: Session 12 logged out. Waiting for processes to exit. Jul 11 00:47:19.869449 systemd[1]: sshd@11-10.0.0.3:22-10.0.0.1:40914.service: Deactivated successfully. Jul 11 00:47:19.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.3:22-10.0.0.1:40914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:19.870801 systemd-logind[1205]: Removed session 12. Jul 11 00:47:20.694556 env[1214]: time="2025-07-11T00:47:20.694513724Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:20.697021 env[1214]: time="2025-07-11T00:47:20.696987404Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:20.698953 env[1214]: time="2025-07-11T00:47:20.698918634Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:20.700421 env[1214]: time="2025-07-11T00:47:20.700395818Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 11 00:47:20.700901 env[1214]: time="2025-07-11T00:47:20.700873426Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 11 00:47:20.705316 env[1214]: time="2025-07-11T00:47:20.705282056Z" level=info msg="CreateContainer within sandbox \"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 11 00:47:20.718221 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1003329853.mount: Deactivated successfully. Jul 11 00:47:20.719089 env[1214]: time="2025-07-11T00:47:20.719049636Z" level=info msg="CreateContainer within sandbox \"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"d7cd23e6c3811b07813d3eff4f56302db2b45d1c1b5f8bd62825df95c26f6964\"" Jul 11 00:47:20.719555 env[1214]: time="2025-07-11T00:47:20.719527244Z" level=info msg="StartContainer for \"d7cd23e6c3811b07813d3eff4f56302db2b45d1c1b5f8bd62825df95c26f6964\"" Jul 11 00:47:20.743493 systemd[1]: Started cri-containerd-d7cd23e6c3811b07813d3eff4f56302db2b45d1c1b5f8bd62825df95c26f6964.scope. Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4825 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:20.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636432336536633338313162303738313364336566663466353633 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit: BPF prog-id=233 op=LOAD Jul 11 00:47:20.758000 audit[5085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4825 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:20.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636432336536633338313162303738313364336566663466353633 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit: BPF prog-id=234 op=LOAD Jul 11 00:47:20.758000 audit[5085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4825 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:20.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636432336536633338313162303738313364336566663466353633 Jul 11 00:47:20.758000 audit: BPF prog-id=234 op=UNLOAD Jul 11 00:47:20.758000 audit: BPF prog-id=233 op=UNLOAD Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { perfmon } for pid=5085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit[5085]: AVC avc: denied { bpf } for pid=5085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 11 00:47:20.758000 audit: BPF prog-id=235 op=LOAD Jul 11 00:47:20.758000 audit[5085]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4825 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:20.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437636432336536633338313162303738313364336566663466353633 Jul 11 00:47:20.786874 env[1214]: time="2025-07-11T00:47:20.786827080Z" level=info msg="StartContainer for \"d7cd23e6c3811b07813d3eff4f56302db2b45d1c1b5f8bd62825df95c26f6964\" returns successfully" Jul 11 00:47:20.918897 kubelet[1965]: I0711 00:47:20.918821 1965 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 11 00:47:20.920318 kubelet[1965]: I0711 00:47:20.920052 1965 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 11 00:47:21.050695 kubelet[1965]: I0711 00:47:21.050642 1965 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-bpjbx" podStartSLOduration=25.621489669 podStartE2EDuration="30.050628124s" podCreationTimestamp="2025-07-11 00:46:51 +0000 UTC" firstStartedPulling="2025-07-11 00:47:16.273012791 +0000 UTC m=+44.519772856" lastFinishedPulling="2025-07-11 00:47:20.702151246 +0000 UTC m=+48.948911311" observedRunningTime="2025-07-11 00:47:21.050005594 +0000 UTC m=+49.296765659" watchObservedRunningTime="2025-07-11 00:47:21.050628124 +0000 UTC m=+49.297388189" Jul 11 00:47:24.870220 systemd[1]: Started sshd@12-10.0.0.3:22-10.0.0.1:52864.service. Jul 11 00:47:24.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.3:22-10.0.0.1:52864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:24.871278 kernel: kauditd_printk_skb: 235 callbacks suppressed Jul 11 00:47:24.871335 kernel: audit: type=1130 audit(1752194844.869:1535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.3:22-10.0.0.1:52864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:24.914000 audit[5126]: USER_ACCT pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.916170 sshd[5126]: Accepted publickey for core from 10.0.0.1 port 52864 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:24.917389 sshd[5126]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:24.916000 audit[5126]: CRED_ACQ pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.920435 kernel: audit: type=1101 audit(1752194844.914:1536): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.920518 kernel: audit: type=1103 audit(1752194844.916:1537): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.920544 kernel: audit: type=1006 audit(1752194844.916:1538): pid=5126 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 11 00:47:24.916000 audit[5126]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb5727a0 a2=3 a3=1 items=0 ppid=1 pid=5126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:24.924402 kernel: audit: type=1300 audit(1752194844.916:1538): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb5727a0 a2=3 a3=1 items=0 ppid=1 pid=5126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:24.916000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:24.925305 kernel: audit: type=1327 audit(1752194844.916:1538): proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:24.926392 systemd-logind[1205]: New session 13 of user core. Jul 11 00:47:24.927203 systemd[1]: Started session-13.scope. Jul 11 00:47:24.929000 audit[5126]: USER_START pid=5126 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.935306 kernel: audit: type=1105 audit(1752194844.929:1539): pid=5126 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.935362 kernel: audit: type=1103 audit(1752194844.930:1540): pid=5128 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:24.930000 audit[5128]: CRED_ACQ pid=5128 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:25.103330 sshd[5126]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:25.103000 audit[5126]: USER_END pid=5126 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:25.103000 audit[5126]: CRED_DISP pid=5126 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:25.108715 systemd[1]: sshd@12-10.0.0.3:22-10.0.0.1:52864.service: Deactivated successfully. Jul 11 00:47:25.109118 kernel: audit: type=1106 audit(1752194845.103:1541): pid=5126 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:25.109155 kernel: audit: type=1104 audit(1752194845.103:1542): pid=5126 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:25.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.3:22-10.0.0.1:52864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:25.109530 systemd[1]: session-13.scope: Deactivated successfully. Jul 11 00:47:25.110122 systemd-logind[1205]: Session 13 logged out. Waiting for processes to exit. Jul 11 00:47:25.110813 systemd-logind[1205]: Removed session 13. Jul 11 00:47:29.377000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.377000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4009507040 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:47:29.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:47:29.377000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.377000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=400925e120 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:47:29.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:47:29.377000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.377000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=400a0a27b0 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:47:29.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:47:29.377000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.377000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=400a0a2810 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:47:29.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:47:29.499000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.499000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.499000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=400dd08700 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:47:29.499000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=400c2759e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c683,c1006 key=(null) Jul 11 00:47:29.499000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:47:29.499000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 11 00:47:29.524000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.524000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:29.524000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40026130e0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:47:29.524000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002b3f1a0 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:47:29.524000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:47:29.524000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:47:30.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.3:22-10.0.0.1:52872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:30.108117 systemd[1]: Started sshd@13-10.0.0.3:22-10.0.0.1:52872.service. Jul 11 00:47:30.110698 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 11 00:47:30.110761 kernel: audit: type=1130 audit(1752194850.107:1552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.3:22-10.0.0.1:52872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:30.148000 audit[5148]: USER_ACCT pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.150040 sshd[5148]: Accepted publickey for core from 10.0.0.1 port 52872 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:30.151000 audit[5148]: CRED_ACQ pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.153181 sshd[5148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:30.155017 kernel: audit: type=1101 audit(1752194850.148:1553): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.155109 kernel: audit: type=1103 audit(1752194850.151:1554): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.155150 kernel: audit: type=1006 audit(1752194850.151:1555): pid=5148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 11 00:47:30.156459 kernel: audit: type=1300 audit(1752194850.151:1555): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf4bfdf0 a2=3 a3=1 items=0 ppid=1 pid=5148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:30.151000 audit[5148]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf4bfdf0 a2=3 a3=1 items=0 ppid=1 pid=5148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:30.158121 systemd-logind[1205]: New session 14 of user core. Jul 11 00:47:30.151000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:30.158934 systemd[1]: Started session-14.scope. Jul 11 00:47:30.159563 kernel: audit: type=1327 audit(1752194850.151:1555): proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:30.161000 audit[5148]: USER_START pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.162000 audit[5150]: CRED_ACQ pid=5150 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.167135 kernel: audit: type=1105 audit(1752194850.161:1556): pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.167189 kernel: audit: type=1103 audit(1752194850.162:1557): pid=5150 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.314810 sshd[5148]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:30.314000 audit[5148]: USER_END pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.314000 audit[5148]: CRED_DISP pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.320448 kernel: audit: type=1106 audit(1752194850.314:1558): pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.320527 kernel: audit: type=1104 audit(1752194850.314:1559): pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:30.322439 systemd[1]: session-14.scope: Deactivated successfully. Jul 11 00:47:30.322996 systemd-logind[1205]: Session 14 logged out. Waiting for processes to exit. Jul 11 00:47:30.323134 systemd[1]: sshd@13-10.0.0.3:22-10.0.0.1:52872.service: Deactivated successfully. Jul 11 00:47:30.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.3:22-10.0.0.1:52872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:30.324101 systemd-logind[1205]: Removed session 14. Jul 11 00:47:31.838101 env[1214]: time="2025-07-11T00:47:31.838061998Z" level=info msg="StopPodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\"" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.885 [WARNING][5170] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sn48l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10", Pod:"coredns-674b8bbfcf-sn48l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3bf908df6b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.885 [INFO][5170] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.886 [INFO][5170] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" iface="eth0" netns="" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.886 [INFO][5170] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.886 [INFO][5170] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.913 [INFO][5181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.914 [INFO][5181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.914 [INFO][5181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.925 [WARNING][5181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.925 [INFO][5181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.926 [INFO][5181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:31.930508 env[1214]: 2025-07-11 00:47:31.928 [INFO][5170] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.931009 env[1214]: time="2025-07-11T00:47:31.930557198Z" level=info msg="TearDown network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" successfully" Jul 11 00:47:31.931009 env[1214]: time="2025-07-11T00:47:31.930586238Z" level=info msg="StopPodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" returns successfully" Jul 11 00:47:31.931264 env[1214]: time="2025-07-11T00:47:31.931236607Z" level=info msg="RemovePodSandbox for \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\"" Jul 11 00:47:31.931330 env[1214]: time="2025-07-11T00:47:31.931275408Z" level=info msg="Forcibly stopping sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\"" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.963 [WARNING][5199] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--sn48l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"2265c1eb-36cc-4b19-8dd9-e6e52b6b41f3", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1e9cd7f4545cd47bb86ce8b937809069a7a521bc4c9aae94b4c3b242b8a0ec10", Pod:"coredns-674b8bbfcf-sn48l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3bf908df6b7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.963 [INFO][5199] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.963 [INFO][5199] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" iface="eth0" netns="" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.963 [INFO][5199] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.963 [INFO][5199] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.981 [INFO][5208] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.981 [INFO][5208] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.981 [INFO][5208] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.990 [WARNING][5208] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.990 [INFO][5208] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" HandleID="k8s-pod-network.854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Workload="localhost-k8s-coredns--674b8bbfcf--sn48l-eth0" Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.992 [INFO][5208] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:31.995271 env[1214]: 2025-07-11 00:47:31.993 [INFO][5199] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e" Jul 11 00:47:31.995689 env[1214]: time="2025-07-11T00:47:31.995295773Z" level=info msg="TearDown network for sandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" successfully" Jul 11 00:47:31.998329 env[1214]: time="2025-07-11T00:47:31.998297095Z" level=info msg="RemovePodSandbox \"854e10d6b8418d7dad60de41b25fdd04823ec84b0ba7e06ecdd778a3123ce60e\" returns successfully" Jul 11 00:47:31.998877 env[1214]: time="2025-07-11T00:47:31.998850062Z" level=info msg="StopPodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\"" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.041 [WARNING][5227] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6b02708e-e615-4eac-9ab2-be849c532b87", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1", Pod:"calico-apiserver-7bd89b55d4-q7fh6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3d0c1a45a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.041 [INFO][5227] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.042 [INFO][5227] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" iface="eth0" netns="" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.042 [INFO][5227] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.042 [INFO][5227] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.061 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.061 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.061 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.070 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.070 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.071 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.074437 env[1214]: 2025-07-11 00:47:32.073 [INFO][5227] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.074966 env[1214]: time="2025-07-11T00:47:32.074452058Z" level=info msg="TearDown network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" successfully" Jul 11 00:47:32.074966 env[1214]: time="2025-07-11T00:47:32.074478819Z" level=info msg="StopPodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" returns successfully" Jul 11 00:47:32.074966 env[1214]: time="2025-07-11T00:47:32.074827463Z" level=info msg="RemovePodSandbox for \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\"" Jul 11 00:47:32.075041 env[1214]: time="2025-07-11T00:47:32.074952385Z" level=info msg="Forcibly stopping sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\"" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.106 [WARNING][5253] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"6b02708e-e615-4eac-9ab2-be849c532b87", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1", Pod:"calico-apiserver-7bd89b55d4-q7fh6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib3d0c1a45a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.106 [INFO][5253] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.106 [INFO][5253] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" iface="eth0" netns="" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.106 [INFO][5253] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.106 [INFO][5253] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.124 [INFO][5262] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.124 [INFO][5262] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.125 [INFO][5262] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.133 [WARNING][5262] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.133 [INFO][5262] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" HandleID="k8s-pod-network.127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.134 [INFO][5262] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.137691 env[1214]: 2025-07-11 00:47:32.136 [INFO][5253] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036" Jul 11 00:47:32.138873 env[1214]: time="2025-07-11T00:47:32.137658324Z" level=info msg="TearDown network for sandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" successfully" Jul 11 00:47:32.142220 env[1214]: time="2025-07-11T00:47:32.142181786Z" level=info msg="RemovePodSandbox \"127ea01ea544cb77aa01a6bddbe92afdf6e42c43413f0c0211ac3d1e63ef1036\" returns successfully" Jul 11 00:47:32.142727 env[1214]: time="2025-07-11T00:47:32.142677233Z" level=info msg="StopPodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\"" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.174 [WARNING][5281] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8154f407-051f-40e9-9da5-21e3ee58e601", ResourceVersion:"1137", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913", Pod:"goldmane-768f4c5c69-mx7hp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8a8604a7e09", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.174 [INFO][5281] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.174 [INFO][5281] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" iface="eth0" netns="" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.174 [INFO][5281] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.174 [INFO][5281] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.190 [INFO][5290] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.191 [INFO][5290] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.191 [INFO][5290] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.200 [WARNING][5290] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.200 [INFO][5290] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.201 [INFO][5290] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.205025 env[1214]: 2025-07-11 00:47:32.203 [INFO][5281] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.205443 env[1214]: time="2025-07-11T00:47:32.205054328Z" level=info msg="TearDown network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" successfully" Jul 11 00:47:32.205443 env[1214]: time="2025-07-11T00:47:32.205084168Z" level=info msg="StopPodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" returns successfully" Jul 11 00:47:32.205703 env[1214]: time="2025-07-11T00:47:32.205637096Z" level=info msg="RemovePodSandbox for \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\"" Jul 11 00:47:32.205744 env[1214]: time="2025-07-11T00:47:32.205698136Z" level=info msg="Forcibly stopping sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\"" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.236 [WARNING][5309] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8154f407-051f-40e9-9da5-21e3ee58e601", ResourceVersion:"1137", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0aa0662cf1762cfbb3d07b25a029a238f164b8e4d3a505bc0ae8c9d2f9707913", Pod:"goldmane-768f4c5c69-mx7hp", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8a8604a7e09", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.236 [INFO][5309] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.236 [INFO][5309] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" iface="eth0" netns="" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.236 [INFO][5309] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.236 [INFO][5309] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.259 [INFO][5318] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.259 [INFO][5318] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.259 [INFO][5318] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.268 [WARNING][5318] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.268 [INFO][5318] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" HandleID="k8s-pod-network.86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Workload="localhost-k8s-goldmane--768f4c5c69--mx7hp-eth0" Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.270 [INFO][5318] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.274481 env[1214]: 2025-07-11 00:47:32.272 [INFO][5309] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe" Jul 11 00:47:32.280115 env[1214]: time="2025-07-11T00:47:32.274584040Z" level=info msg="TearDown network for sandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" successfully" Jul 11 00:47:32.280115 env[1214]: time="2025-07-11T00:47:32.277546881Z" level=info msg="RemovePodSandbox \"86125358e73311085185969466df532d793070167d0818a6cb2ec4f59a6b1dfe\" returns successfully" Jul 11 00:47:32.280115 env[1214]: time="2025-07-11T00:47:32.278086688Z" level=info msg="StopPodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\"" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.314 [WARNING][5336] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" WorkloadEndpoint="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.314 [INFO][5336] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.314 [INFO][5336] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" iface="eth0" netns="" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.314 [INFO][5336] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.314 [INFO][5336] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.332 [INFO][5345] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.332 [INFO][5345] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.332 [INFO][5345] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.341 [WARNING][5345] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.341 [INFO][5345] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.342 [INFO][5345] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.345738 env[1214]: 2025-07-11 00:47:32.344 [INFO][5336] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.346201 env[1214]: time="2025-07-11T00:47:32.345755575Z" level=info msg="TearDown network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" successfully" Jul 11 00:47:32.346201 env[1214]: time="2025-07-11T00:47:32.345789016Z" level=info msg="StopPodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" returns successfully" Jul 11 00:47:32.346630 env[1214]: time="2025-07-11T00:47:32.346579747Z" level=info msg="RemovePodSandbox for \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\"" Jul 11 00:47:32.346698 env[1214]: time="2025-07-11T00:47:32.346625347Z" level=info msg="Forcibly stopping sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\"" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.381 [WARNING][5364] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" WorkloadEndpoint="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.381 [INFO][5364] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.381 [INFO][5364] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" iface="eth0" netns="" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.381 [INFO][5364] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.381 [INFO][5364] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.399 [INFO][5373] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.399 [INFO][5373] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.399 [INFO][5373] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.411 [WARNING][5373] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.411 [INFO][5373] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" HandleID="k8s-pod-network.b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Workload="localhost-k8s-whisker--5765cc798d--rvvhj-eth0" Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.413 [INFO][5373] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.416731 env[1214]: 2025-07-11 00:47:32.415 [INFO][5364] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39" Jul 11 00:47:32.416731 env[1214]: time="2025-07-11T00:47:32.416698387Z" level=info msg="TearDown network for sandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" successfully" Jul 11 00:47:32.422301 env[1214]: time="2025-07-11T00:47:32.422222743Z" level=info msg="RemovePodSandbox \"b08193536b9c611eec739ace3bf99a899cbdb744b1547817bda47a011fc72c39\" returns successfully" Jul 11 00:47:32.423199 env[1214]: time="2025-07-11T00:47:32.423157956Z" level=info msg="StopPodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\"" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.462 [WARNING][5391] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bpjbx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d048fd00-e37a-441c-8b1c-ff220212c236", ResourceVersion:"1187", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b", Pod:"csi-node-driver-bpjbx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicdbc35490d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.463 [INFO][5391] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.463 [INFO][5391] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" iface="eth0" netns="" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.463 [INFO][5391] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.463 [INFO][5391] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.481 [INFO][5400] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.481 [INFO][5400] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.481 [INFO][5400] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.490 [WARNING][5400] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.490 [INFO][5400] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.491 [INFO][5400] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.495004 env[1214]: 2025-07-11 00:47:32.493 [INFO][5391] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.495442 env[1214]: time="2025-07-11T00:47:32.495034301Z" level=info msg="TearDown network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" successfully" Jul 11 00:47:32.495442 env[1214]: time="2025-07-11T00:47:32.495064421Z" level=info msg="StopPodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" returns successfully" Jul 11 00:47:32.495525 env[1214]: time="2025-07-11T00:47:32.495501067Z" level=info msg="RemovePodSandbox for \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\"" Jul 11 00:47:32.495566 env[1214]: time="2025-07-11T00:47:32.495532828Z" level=info msg="Forcibly stopping sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\"" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.529 [WARNING][5418] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bpjbx-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d048fd00-e37a-441c-8b1c-ff220212c236", ResourceVersion:"1187", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 51, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"92036deddf77ed2edb2a01bb08cebf0485bb1ee3fffcbacf44b1c136ef590d1b", Pod:"csi-node-driver-bpjbx", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicdbc35490d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.529 [INFO][5418] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.529 [INFO][5418] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" iface="eth0" netns="" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.529 [INFO][5418] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.529 [INFO][5418] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.550 [INFO][5427] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.550 [INFO][5427] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.551 [INFO][5427] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.560 [WARNING][5427] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.560 [INFO][5427] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" HandleID="k8s-pod-network.7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Workload="localhost-k8s-csi--node--driver--bpjbx-eth0" Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.561 [INFO][5427] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.564797 env[1214]: 2025-07-11 00:47:32.563 [INFO][5418] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa" Jul 11 00:47:32.565373 env[1214]: time="2025-07-11T00:47:32.565328664Z" level=info msg="TearDown network for sandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" successfully" Jul 11 00:47:32.568466 env[1214]: time="2025-07-11T00:47:32.568436786Z" level=info msg="RemovePodSandbox \"7e0ead8cc2b8c85409728b63584fbeaed087954629593cb02b83ca5bc0074faa\" returns successfully" Jul 11 00:47:32.569102 env[1214]: time="2025-07-11T00:47:32.569071155Z" level=info msg="StopPodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\"" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.601 [WARNING][5445] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1bb06ba8-233c-4b40-a7d3-425800a79a04", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba", Pod:"calico-apiserver-7bd89b55d4-hp5dq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f41678ffb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.602 [INFO][5445] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.602 [INFO][5445] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" iface="eth0" netns="" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.602 [INFO][5445] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.602 [INFO][5445] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.620 [INFO][5455] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.620 [INFO][5455] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.620 [INFO][5455] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.629 [WARNING][5455] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.629 [INFO][5455] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.630 [INFO][5455] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.633967 env[1214]: 2025-07-11 00:47:32.632 [INFO][5445] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.634544 env[1214]: time="2025-07-11T00:47:32.634502412Z" level=info msg="TearDown network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" successfully" Jul 11 00:47:32.634610 env[1214]: time="2025-07-11T00:47:32.634594133Z" level=info msg="StopPodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" returns successfully" Jul 11 00:47:32.635132 env[1214]: time="2025-07-11T00:47:32.635094100Z" level=info msg="RemovePodSandbox for \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\"" Jul 11 00:47:32.635201 env[1214]: time="2025-07-11T00:47:32.635135980Z" level=info msg="Forcibly stopping sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\"" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.666 [WARNING][5472] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0", GenerateName:"calico-apiserver-7bd89b55d4-", Namespace:"calico-apiserver", SelfLink:"", UID:"1bb06ba8-233c-4b40-a7d3-425800a79a04", ResourceVersion:"1123", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 47, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7bd89b55d4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba", Pod:"calico-apiserver-7bd89b55d4-hp5dq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f41678ffb2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.666 [INFO][5472] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.666 [INFO][5472] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" iface="eth0" netns="" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.666 [INFO][5472] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.666 [INFO][5472] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.690 [INFO][5481] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.690 [INFO][5481] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.690 [INFO][5481] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.699 [WARNING][5481] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.699 [INFO][5481] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" HandleID="k8s-pod-network.1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.700 [INFO][5481] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.703830 env[1214]: 2025-07-11 00:47:32.702 [INFO][5472] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12" Jul 11 00:47:32.703830 env[1214]: time="2025-07-11T00:47:32.703801481Z" level=info msg="TearDown network for sandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" successfully" Jul 11 00:47:32.707716 env[1214]: time="2025-07-11T00:47:32.707672494Z" level=info msg="RemovePodSandbox \"1783e003c0df43d7a5aa39207262069ce003989c32feae960ce5091f8ad48e12\" returns successfully" Jul 11 00:47:32.708231 env[1214]: time="2025-07-11T00:47:32.708199541Z" level=info msg="StopPodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\"" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.739 [WARNING][5499] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0", GenerateName:"calico-apiserver-d9699865b-", Namespace:"calico-apiserver", SelfLink:"", UID:"773bbffc-8696-4271-bbeb-cae72bb8bd55", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"d9699865b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580", Pod:"calico-apiserver-d9699865b-wgvvx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif1e3ab03c40", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.740 [INFO][5499] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.740 [INFO][5499] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" iface="eth0" netns="" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.740 [INFO][5499] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.740 [INFO][5499] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.757 [INFO][5509] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.757 [INFO][5509] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.757 [INFO][5509] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.767 [WARNING][5509] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.767 [INFO][5509] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.768 [INFO][5509] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.771818 env[1214]: 2025-07-11 00:47:32.770 [INFO][5499] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.772369 env[1214]: time="2025-07-11T00:47:32.772327940Z" level=info msg="TearDown network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" successfully" Jul 11 00:47:32.772432 env[1214]: time="2025-07-11T00:47:32.772417421Z" level=info msg="StopPodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" returns successfully" Jul 11 00:47:32.773006 env[1214]: time="2025-07-11T00:47:32.772980309Z" level=info msg="RemovePodSandbox for \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\"" Jul 11 00:47:32.773056 env[1214]: time="2025-07-11T00:47:32.773011909Z" level=info msg="Forcibly stopping sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\"" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.804 [WARNING][5528] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0", GenerateName:"calico-apiserver-d9699865b-", Namespace:"calico-apiserver", SelfLink:"", UID:"773bbffc-8696-4271-bbeb-cae72bb8bd55", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 48, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"d9699865b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5973f2d7fea338869c5dada852edcebcefa662fbea3537438fd443b7c92c1580", Pod:"calico-apiserver-d9699865b-wgvvx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif1e3ab03c40", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.804 [INFO][5528] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.804 [INFO][5528] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" iface="eth0" netns="" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.805 [INFO][5528] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.805 [INFO][5528] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.823 [INFO][5536] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.823 [INFO][5536] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.823 [INFO][5536] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.831 [WARNING][5536] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.831 [INFO][5536] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" HandleID="k8s-pod-network.6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Workload="localhost-k8s-calico--apiserver--d9699865b--wgvvx-eth0" Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.832 [INFO][5536] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.835688 env[1214]: 2025-07-11 00:47:32.834 [INFO][5528] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003" Jul 11 00:47:32.836133 env[1214]: time="2025-07-11T00:47:32.835713448Z" level=info msg="TearDown network for sandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" successfully" Jul 11 00:47:32.838675 env[1214]: time="2025-07-11T00:47:32.838640528Z" level=info msg="RemovePodSandbox \"6d671bb5f724e9e3b80594e2377f50906b0ccaaa21fc7085bd8dc3773b806003\" returns successfully" Jul 11 00:47:32.839154 env[1214]: time="2025-07-11T00:47:32.839123135Z" level=info msg="StopPodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\"" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.869 [WARNING][5554] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"3cc6dd69-6e20-45d6-8c39-7a4c038726dc", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b", Pod:"coredns-674b8bbfcf-xjqbp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0a41dab398", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.869 [INFO][5554] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.869 [INFO][5554] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" iface="eth0" netns="" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.869 [INFO][5554] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.869 [INFO][5554] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.891 [INFO][5563] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.891 [INFO][5563] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.891 [INFO][5563] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.902 [WARNING][5563] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.902 [INFO][5563] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.903 [INFO][5563] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.907345 env[1214]: 2025-07-11 00:47:32.906 [INFO][5554] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.907832 env[1214]: time="2025-07-11T00:47:32.907798836Z" level=info msg="TearDown network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" successfully" Jul 11 00:47:32.907905 env[1214]: time="2025-07-11T00:47:32.907879837Z" level=info msg="StopPodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" returns successfully" Jul 11 00:47:32.908425 env[1214]: time="2025-07-11T00:47:32.908393164Z" level=info msg="RemovePodSandbox for \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\"" Jul 11 00:47:32.908487 env[1214]: time="2025-07-11T00:47:32.908432765Z" level=info msg="Forcibly stopping sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\"" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.938 [WARNING][5582] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"3cc6dd69-6e20-45d6-8c39-7a4c038726dc", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d3eeeeb857e74f6496dd7887dd0fd2e544092ec5dbc70e6006d82203adbc462b", Pod:"coredns-674b8bbfcf-xjqbp", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif0a41dab398", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.939 [INFO][5582] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.939 [INFO][5582] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" iface="eth0" netns="" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.939 [INFO][5582] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.939 [INFO][5582] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.956 [INFO][5590] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.956 [INFO][5590] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.956 [INFO][5590] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.966 [WARNING][5590] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.966 [INFO][5590] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" HandleID="k8s-pod-network.f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Workload="localhost-k8s-coredns--674b8bbfcf--xjqbp-eth0" Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.968 [INFO][5590] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:32.971780 env[1214]: 2025-07-11 00:47:32.970 [INFO][5582] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67" Jul 11 00:47:32.971780 env[1214]: time="2025-07-11T00:47:32.971750392Z" level=info msg="TearDown network for sandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" successfully" Jul 11 00:47:32.975472 env[1214]: time="2025-07-11T00:47:32.975440923Z" level=info msg="RemovePodSandbox \"f664d160a772e6e44e53069b6bd1845fdf487b5594eb1b424761d65e61be5f67\" returns successfully" Jul 11 00:47:32.975888 env[1214]: time="2025-07-11T00:47:32.975866929Z" level=info msg="StopPodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\"" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.007 [WARNING][5608] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0", GenerateName:"calico-kube-controllers-b9fcdc94-", Namespace:"calico-system", SelfLink:"", UID:"8a625e31-e897-49ed-a12d-8a2ecfe45c50", ResourceVersion:"1154", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b9fcdc94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5", Pod:"calico-kube-controllers-b9fcdc94-2t8zl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicda5daeb401", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.007 [INFO][5608] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.007 [INFO][5608] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" iface="eth0" netns="" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.007 [INFO][5608] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.007 [INFO][5608] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.031 [INFO][5617] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.031 [INFO][5617] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.031 [INFO][5617] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.039 [WARNING][5617] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.039 [INFO][5617] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.041 [INFO][5617] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:33.044518 env[1214]: 2025-07-11 00:47:33.042 [INFO][5608] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.045003 env[1214]: time="2025-07-11T00:47:33.044549584Z" level=info msg="TearDown network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" successfully" Jul 11 00:47:33.045003 env[1214]: time="2025-07-11T00:47:33.044587345Z" level=info msg="StopPodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" returns successfully" Jul 11 00:47:33.045189 env[1214]: time="2025-07-11T00:47:33.045133312Z" level=info msg="RemovePodSandbox for \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\"" Jul 11 00:47:33.045240 env[1214]: time="2025-07-11T00:47:33.045202833Z" level=info msg="Forcibly stopping sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\"" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.081 [WARNING][5635] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0", GenerateName:"calico-kube-controllers-b9fcdc94-", Namespace:"calico-system", SelfLink:"", UID:"8a625e31-e897-49ed-a12d-8a2ecfe45c50", ResourceVersion:"1154", Generation:0, CreationTimestamp:time.Date(2025, time.July, 11, 0, 46, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"b9fcdc94", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b2793bad4c6f7e29f11c2f4c1789319b378c0168320605a8539f40034b4adfb5", Pod:"calico-kube-controllers-b9fcdc94-2t8zl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calicda5daeb401", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.081 [INFO][5635] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.081 [INFO][5635] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" iface="eth0" netns="" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.081 [INFO][5635] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.081 [INFO][5635] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.097 [INFO][5644] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.097 [INFO][5644] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.097 [INFO][5644] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.106 [WARNING][5644] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.106 [INFO][5644] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" HandleID="k8s-pod-network.85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Workload="localhost-k8s-calico--kube--controllers--b9fcdc94--2t8zl-eth0" Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.107 [INFO][5644] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:33.110819 env[1214]: 2025-07-11 00:47:33.109 [INFO][5635] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5" Jul 11 00:47:33.111293 env[1214]: time="2025-07-11T00:47:33.110849565Z" level=info msg="TearDown network for sandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" successfully" Jul 11 00:47:33.113956 env[1214]: time="2025-07-11T00:47:33.113916086Z" level=info msg="RemovePodSandbox \"85f813eb47fd023dc629397d1a4f432ab78b2e6c257a1f11a203319adec27ba5\" returns successfully" Jul 11 00:47:34.227978 kubelet[1965]: I0711 00:47:34.227846 1965 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:47:34.283756 kubelet[1965]: I0711 00:47:34.283711 1965 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:47:34.284689 env[1214]: time="2025-07-11T00:47:34.284647911Z" level=info msg="StopContainer for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" with timeout 30 (s)" Jul 11 00:47:34.285336 env[1214]: time="2025-07-11T00:47:34.285300240Z" level=info msg="Stop container \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" with signal terminated" Jul 11 00:47:34.335000 audit[5660]: NETFILTER_CFG table=filter:129 family=2 entries=11 op=nft_register_rule pid=5660 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:34.335000 audit[5660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd229b9e0 a2=0 a3=1 items=0 ppid=2081 pid=5660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:34.335000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:34.343000 audit[5660]: NETFILTER_CFG table=nat:130 family=2 entries=29 op=nft_register_chain pid=5660 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:34.343000 audit[5660]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd229b9e0 a2=0 a3=1 items=0 ppid=2081 pid=5660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:34.343000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:34.346889 systemd[1]: cri-containerd-1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e.scope: Deactivated successfully. Jul 11 00:47:34.347250 systemd[1]: cri-containerd-1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e.scope: Consumed 1.423s CPU time. Jul 11 00:47:34.346000 audit: BPF prog-id=198 op=UNLOAD Jul 11 00:47:34.354000 audit: BPF prog-id=201 op=UNLOAD Jul 11 00:47:34.362000 audit[5674]: NETFILTER_CFG table=filter:131 family=2 entries=10 op=nft_register_rule pid=5674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:34.362000 audit[5674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd5543260 a2=0 a3=1 items=0 ppid=2081 pid=5674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:34.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:34.366015 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e-rootfs.mount: Deactivated successfully. Jul 11 00:47:34.367143 env[1214]: time="2025-07-11T00:47:34.367099661Z" level=info msg="shim disconnected" id=1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e Jul 11 00:47:34.367251 env[1214]: time="2025-07-11T00:47:34.367149502Z" level=warning msg="cleaning up after shim disconnected" id=1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e namespace=k8s.io Jul 11 00:47:34.367251 env[1214]: time="2025-07-11T00:47:34.367161342Z" level=info msg="cleaning up dead shim" Jul 11 00:47:34.367000 audit[5674]: NETFILTER_CFG table=nat:132 family=2 entries=32 op=nft_register_rule pid=5674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:34.367000 audit[5674]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd5543260 a2=0 a3=1 items=0 ppid=2081 pid=5674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:34.367000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:34.373796 env[1214]: time="2025-07-11T00:47:34.373763151Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:47:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5675 runtime=io.containerd.runc.v2\n" Jul 11 00:47:34.404089 env[1214]: time="2025-07-11T00:47:34.404041279Z" level=info msg="StopContainer for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" returns successfully" Jul 11 00:47:34.406252 env[1214]: time="2025-07-11T00:47:34.406221348Z" level=info msg="StopPodSandbox for \"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1\"" Jul 11 00:47:34.406329 env[1214]: time="2025-07-11T00:47:34.406298709Z" level=info msg="Container to stop \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 11 00:47:34.408953 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1-shm.mount: Deactivated successfully. Jul 11 00:47:34.416561 systemd[1]: cri-containerd-e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1.scope: Deactivated successfully. Jul 11 00:47:34.415000 audit: BPF prog-id=174 op=UNLOAD Jul 11 00:47:34.421000 audit: BPF prog-id=177 op=UNLOAD Jul 11 00:47:34.435126 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1-rootfs.mount: Deactivated successfully. Jul 11 00:47:34.436487 env[1214]: time="2025-07-11T00:47:34.436437635Z" level=info msg="shim disconnected" id=e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1 Jul 11 00:47:34.436587 env[1214]: time="2025-07-11T00:47:34.436488915Z" level=warning msg="cleaning up after shim disconnected" id=e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1 namespace=k8s.io Jul 11 00:47:34.436587 env[1214]: time="2025-07-11T00:47:34.436503196Z" level=info msg="cleaning up dead shim" Jul 11 00:47:34.447356 env[1214]: time="2025-07-11T00:47:34.447310621Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:47:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5706 runtime=io.containerd.runc.v2\n" Jul 11 00:47:34.506415 systemd-networkd[1040]: calib3d0c1a45a2: Link DOWN Jul 11 00:47:34.506422 systemd-networkd[1040]: calib3d0c1a45a2: Lost carrier Jul 11 00:47:34.525000 audit[5748]: NETFILTER_CFG table=filter:133 family=2 entries=51 op=nft_register_rule pid=5748 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:34.525000 audit[5748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7740 a0=3 a1=ffffd47b4380 a2=0 a3=ffffb99d9fa8 items=0 ppid=3449 pid=5748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:34.525000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:34.525000 audit[5748]: NETFILTER_CFG table=filter:134 family=2 entries=2 op=nft_unregister_chain pid=5748 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:34.525000 audit[5748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd47b4380 a2=0 a3=ffffb99d9fa8 items=0 ppid=3449 pid=5748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:34.525000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.503 [INFO][5730] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.503 [INFO][5730] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" iface="eth0" netns="/var/run/netns/cni-ee65c534-aab8-d9e3-7af5-d32ae3177633" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.505 [INFO][5730] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" iface="eth0" netns="/var/run/netns/cni-ee65c534-aab8-d9e3-7af5-d32ae3177633" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.521 [INFO][5730] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" after=17.580837ms iface="eth0" netns="/var/run/netns/cni-ee65c534-aab8-d9e3-7af5-d32ae3177633" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.521 [INFO][5730] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.521 [INFO][5730] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.543 [INFO][5746] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" HandleID="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.543 [INFO][5746] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.543 [INFO][5746] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.580 [INFO][5746] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" HandleID="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.580 [INFO][5746] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" HandleID="k8s-pod-network.e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--q7fh6-eth0" Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.582 [INFO][5746] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:34.586399 env[1214]: 2025-07-11 00:47:34.584 [INFO][5730] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1" Jul 11 00:47:34.589666 systemd[1]: run-netns-cni\x2dee65c534\x2daab8\x2dd9e3\x2d7af5\x2dd32ae3177633.mount: Deactivated successfully. Jul 11 00:47:34.589817 env[1214]: time="2025-07-11T00:47:34.589739459Z" level=info msg="TearDown network for sandbox \"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1\" successfully" Jul 11 00:47:34.589817 env[1214]: time="2025-07-11T00:47:34.589776659Z" level=info msg="StopPodSandbox for \"e7ade13efd6b02141e0a448b1f0b3f3fe94059cc5b2fd5b641c3404569ad72e1\" returns successfully" Jul 11 00:47:34.697684 kubelet[1965]: I0711 00:47:34.697643 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ktf6w\" (UniqueName: \"kubernetes.io/projected/6b02708e-e615-4eac-9ab2-be849c532b87-kube-api-access-ktf6w\") pod \"6b02708e-e615-4eac-9ab2-be849c532b87\" (UID: \"6b02708e-e615-4eac-9ab2-be849c532b87\") " Jul 11 00:47:34.697684 kubelet[1965]: I0711 00:47:34.697686 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6b02708e-e615-4eac-9ab2-be849c532b87-calico-apiserver-certs\") pod \"6b02708e-e615-4eac-9ab2-be849c532b87\" (UID: \"6b02708e-e615-4eac-9ab2-be849c532b87\") " Jul 11 00:47:34.701105 kubelet[1965]: I0711 00:47:34.701077 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6b02708e-e615-4eac-9ab2-be849c532b87-kube-api-access-ktf6w" (OuterVolumeSpecName: "kube-api-access-ktf6w") pod "6b02708e-e615-4eac-9ab2-be849c532b87" (UID: "6b02708e-e615-4eac-9ab2-be849c532b87"). InnerVolumeSpecName "kube-api-access-ktf6w". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 11 00:47:34.701355 kubelet[1965]: I0711 00:47:34.701330 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6b02708e-e615-4eac-9ab2-be849c532b87-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "6b02708e-e615-4eac-9ab2-be849c532b87" (UID: "6b02708e-e615-4eac-9ab2-be849c532b87"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 11 00:47:34.702997 systemd[1]: var-lib-kubelet-pods-6b02708e\x2de615\x2d4eac\x2d9ab2\x2dbe849c532b87-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dktf6w.mount: Deactivated successfully. Jul 11 00:47:34.703099 systemd[1]: var-lib-kubelet-pods-6b02708e\x2de615\x2d4eac\x2d9ab2\x2dbe849c532b87-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 11 00:47:34.799407 kubelet[1965]: I0711 00:47:34.799292 1965 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-ktf6w\" (UniqueName: \"kubernetes.io/projected/6b02708e-e615-4eac-9ab2-be849c532b87-kube-api-access-ktf6w\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:34.799407 kubelet[1965]: I0711 00:47:34.799327 1965 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6b02708e-e615-4eac-9ab2-be849c532b87-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:35.079900 kubelet[1965]: I0711 00:47:35.079807 1965 scope.go:117] "RemoveContainer" containerID="1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e" Jul 11 00:47:35.081071 env[1214]: time="2025-07-11T00:47:35.081035425Z" level=info msg="RemoveContainer for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\"" Jul 11 00:47:35.082288 systemd[1]: Removed slice kubepods-besteffort-pod6b02708e_e615_4eac_9ab2_be849c532b87.slice. Jul 11 00:47:35.082373 systemd[1]: kubepods-besteffort-pod6b02708e_e615_4eac_9ab2_be849c532b87.slice: Consumed 1.466s CPU time. Jul 11 00:47:35.084977 env[1214]: time="2025-07-11T00:47:35.084913637Z" level=info msg="RemoveContainer for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" returns successfully" Jul 11 00:47:35.086281 kubelet[1965]: I0711 00:47:35.086254 1965 scope.go:117] "RemoveContainer" containerID="1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e" Jul 11 00:47:35.087115 env[1214]: time="2025-07-11T00:47:35.086570059Z" level=error msg="ContainerStatus for \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\": not found" Jul 11 00:47:35.087200 kubelet[1965]: E0711 00:47:35.086779 1965 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\": not found" containerID="1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e" Jul 11 00:47:35.087200 kubelet[1965]: I0711 00:47:35.086803 1965 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e"} err="failed to get container status \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\": rpc error: code = NotFound desc = an error occurred when try to find container \"1e3aa5496c7612bc77b3369fbac7e865bb02a433094f754bac452e938e3c498e\": not found" Jul 11 00:47:35.320159 systemd[1]: Started sshd@14-10.0.0.3:22-10.0.0.1:60498.service. Jul 11 00:47:35.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.3:22-10.0.0.1:60498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:35.323104 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 11 00:47:35.323242 kernel: audit: type=1130 audit(1752194855.319:1571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.3:22-10.0.0.1:60498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:35.365000 audit[5758]: USER_ACCT pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.366856 sshd[5758]: Accepted publickey for core from 10.0.0.1 port 60498 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:35.369949 kernel: audit: type=1101 audit(1752194855.365:1572): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.369000 audit[5758]: CRED_ACQ pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.370632 sshd[5758]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:35.373735 kernel: audit: type=1103 audit(1752194855.369:1573): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.373800 kernel: audit: type=1006 audit(1752194855.369:1574): pid=5758 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 11 00:47:35.373823 kernel: audit: type=1300 audit(1752194855.369:1574): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb8abea0 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.369000 audit[5758]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb8abea0 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.375888 systemd[1]: Started session-15.scope. Jul 11 00:47:35.376129 kernel: audit: type=1327 audit(1752194855.369:1574): proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:35.369000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:35.376220 systemd-logind[1205]: New session 15 of user core. Jul 11 00:47:35.379000 audit[5758]: USER_START pid=5758 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.380000 audit[5761]: CRED_ACQ pid=5761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.384628 kernel: audit: type=1105 audit(1752194855.379:1575): pid=5758 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.384696 kernel: audit: type=1103 audit(1752194855.380:1576): pid=5761 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.384000 audit[5762]: NETFILTER_CFG table=filter:135 family=2 entries=10 op=nft_register_rule pid=5762 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:35.384000 audit[5762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe05d4450 a2=0 a3=1 items=0 ppid=2081 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.387009 kernel: audit: type=1325 audit(1752194855.384:1577): table=filter:135 family=2 entries=10 op=nft_register_rule pid=5762 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:35.387053 kernel: audit: type=1300 audit(1752194855.384:1577): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe05d4450 a2=0 a3=1 items=0 ppid=2081 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:35.391000 audit[5762]: NETFILTER_CFG table=nat:136 family=2 entries=32 op=nft_register_rule pid=5762 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:35.391000 audit[5762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe05d4450 a2=0 a3=1 items=0 ppid=2081 pid=5762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.391000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:35.572733 sshd[5758]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:35.572000 audit[5758]: USER_END pid=5758 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.573000 audit[5758]: CRED_DISP pid=5758 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.576768 systemd[1]: Started sshd@15-10.0.0.3:22-10.0.0.1:60506.service. Jul 11 00:47:35.577381 systemd[1]: sshd@14-10.0.0.3:22-10.0.0.1:60498.service: Deactivated successfully. Jul 11 00:47:35.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.3:22-10.0.0.1:60506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:35.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.3:22-10.0.0.1:60498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:35.578340 systemd[1]: session-15.scope: Deactivated successfully. Jul 11 00:47:35.578883 systemd-logind[1205]: Session 15 logged out. Waiting for processes to exit. Jul 11 00:47:35.579561 systemd-logind[1205]: Removed session 15. Jul 11 00:47:35.617000 audit[5773]: USER_ACCT pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.618311 sshd[5773]: Accepted publickey for core from 10.0.0.1 port 60506 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:35.619638 sshd[5773]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:35.618000 audit[5773]: CRED_ACQ pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.618000 audit[5773]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe4a6730 a2=3 a3=1 items=0 ppid=1 pid=5773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.618000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:35.623463 systemd-logind[1205]: New session 16 of user core. Jul 11 00:47:35.624477 systemd[1]: Started session-16.scope. Jul 11 00:47:35.627000 audit[5773]: USER_START pid=5773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.628000 audit[5777]: CRED_ACQ pid=5777 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.835512 sshd[5773]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:35.836000 audit[5773]: USER_END pid=5773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.836000 audit[5773]: CRED_DISP pid=5773 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.839511 systemd[1]: Started sshd@16-10.0.0.3:22-10.0.0.1:60514.service. Jul 11 00:47:35.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.3:22-10.0.0.1:60514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:35.840076 systemd[1]: sshd@15-10.0.0.3:22-10.0.0.1:60506.service: Deactivated successfully. Jul 11 00:47:35.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.3:22-10.0.0.1:60506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:35.840805 systemd[1]: session-16.scope: Deactivated successfully. Jul 11 00:47:35.841438 systemd-logind[1205]: Session 16 logged out. Waiting for processes to exit. Jul 11 00:47:35.842258 systemd-logind[1205]: Removed session 16. Jul 11 00:47:35.851718 kubelet[1965]: I0711 00:47:35.851056 1965 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6b02708e-e615-4eac-9ab2-be849c532b87" path="/var/lib/kubelet/pods/6b02708e-e615-4eac-9ab2-be849c532b87/volumes" Jul 11 00:47:35.888000 audit[5786]: USER_ACCT pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.890324 sshd[5786]: Accepted publickey for core from 10.0.0.1 port 60514 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:35.890000 audit[5786]: CRED_ACQ pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.890000 audit[5786]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec85d200 a2=3 a3=1 items=0 ppid=1 pid=5786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:35.890000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:35.891948 sshd[5786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:35.895259 systemd-logind[1205]: New session 17 of user core. Jul 11 00:47:35.896063 systemd[1]: Started session-17.scope. Jul 11 00:47:35.898000 audit[5786]: USER_START pid=5786 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:35.899000 audit[5789]: CRED_ACQ pid=5789 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:36.145000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:36.145000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40031d9540 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:47:36.145000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:47:36.146000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:36.146000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40031d9560 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:47:36.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:47:36.146000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:36.146000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002e34e60 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:47:36.146000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:47:36.147000 audit[1834]: AVC avc: denied { watch } for pid=1834 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 11 00:47:36.147000 audit[1834]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40031d9700 a2=fc6 a3=0 items=0 ppid=1682 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c463,c623 key=(null) Jul 11 00:47:36.147000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 11 00:47:36.641000 audit[5804]: NETFILTER_CFG table=filter:137 family=2 entries=22 op=nft_register_rule pid=5804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:36.641000 audit[5804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffcde9c320 a2=0 a3=1 items=0 ppid=2081 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:36.641000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:36.645000 audit[5804]: NETFILTER_CFG table=nat:138 family=2 entries=24 op=nft_register_rule pid=5804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:36.645000 audit[5804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffcde9c320 a2=0 a3=1 items=0 ppid=2081 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:36.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:36.658593 sshd[5786]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:36.659000 audit[5786]: USER_END pid=5786 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:36.659000 audit[5786]: CRED_DISP pid=5786 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:36.662768 systemd[1]: Started sshd@17-10.0.0.3:22-10.0.0.1:60528.service. Jul 11 00:47:36.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.3:22-10.0.0.1:60528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:36.663368 systemd[1]: sshd@16-10.0.0.3:22-10.0.0.1:60514.service: Deactivated successfully. Jul 11 00:47:36.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.3:22-10.0.0.1:60514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:36.664160 systemd[1]: session-17.scope: Deactivated successfully. Jul 11 00:47:36.664741 systemd-logind[1205]: Session 17 logged out. Waiting for processes to exit. Jul 11 00:47:36.666093 systemd-logind[1205]: Removed session 17. Jul 11 00:47:36.704000 audit[5806]: USER_ACCT pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:36.705224 sshd[5806]: Accepted publickey for core from 10.0.0.1 port 60528 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:36.705000 audit[5806]: CRED_ACQ pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:36.705000 audit[5806]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4112cc0 a2=3 a3=1 items=0 ppid=1 pid=5806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:36.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:36.706532 sshd[5806]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:36.710618 systemd-logind[1205]: New session 18 of user core. Jul 11 00:47:36.711063 systemd[1]: Started session-18.scope. Jul 11 00:47:36.714000 audit[5806]: USER_START pid=5806 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:36.715000 audit[5809]: CRED_ACQ pid=5809 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.078045 sshd[5806]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:37.077000 audit[5806]: USER_END pid=5806 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.078000 audit[5806]: CRED_DISP pid=5806 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.3:22-10.0.0.1:60528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:37.080267 systemd[1]: sshd@17-10.0.0.3:22-10.0.0.1:60528.service: Deactivated successfully. Jul 11 00:47:37.080907 systemd[1]: session-18.scope: Deactivated successfully. Jul 11 00:47:37.082176 systemd-logind[1205]: Session 18 logged out. Waiting for processes to exit. Jul 11 00:47:37.083438 systemd[1]: Started sshd@18-10.0.0.3:22-10.0.0.1:60534.service. Jul 11 00:47:37.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.3:22-10.0.0.1:60534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:37.086354 systemd-logind[1205]: Removed session 18. Jul 11 00:47:37.130000 audit[5841]: USER_ACCT pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.131558 sshd[5841]: Accepted publickey for core from 10.0.0.1 port 60534 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:37.131000 audit[5841]: CRED_ACQ pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.131000 audit[5841]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd54f130 a2=3 a3=1 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:37.131000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:37.133413 sshd[5841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:37.137878 systemd-logind[1205]: New session 19 of user core. Jul 11 00:47:37.138177 systemd[1]: Started session-19.scope. Jul 11 00:47:37.143000 audit[5841]: USER_START pid=5841 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.144000 audit[5843]: CRED_ACQ pid=5843 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.291553 sshd[5841]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:37.292000 audit[5841]: USER_END pid=5841 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.292000 audit[5841]: CRED_DISP pid=5841 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:37.295102 systemd[1]: sshd@18-10.0.0.3:22-10.0.0.1:60534.service: Deactivated successfully. Jul 11 00:47:37.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.3:22-10.0.0.1:60534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:37.295853 systemd[1]: session-19.scope: Deactivated successfully. Jul 11 00:47:37.296500 systemd-logind[1205]: Session 19 logged out. Waiting for processes to exit. Jul 11 00:47:37.297447 systemd-logind[1205]: Removed session 19. Jul 11 00:47:37.671000 audit[5854]: NETFILTER_CFG table=filter:139 family=2 entries=34 op=nft_register_rule pid=5854 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:37.671000 audit[5854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffeafc2890 a2=0 a3=1 items=0 ppid=2081 pid=5854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:37.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:37.679000 audit[5854]: NETFILTER_CFG table=nat:140 family=2 entries=24 op=nft_register_rule pid=5854 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:37.679000 audit[5854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffeafc2890 a2=0 a3=1 items=0 ppid=2081 pid=5854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:37.679000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:38.350000 audit[5856]: NETFILTER_CFG table=filter:141 family=2 entries=34 op=nft_register_rule pid=5856 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:38.350000 audit[5856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe3c3f8b0 a2=0 a3=1 items=0 ppid=2081 pid=5856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:38.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:38.356000 audit[5856]: NETFILTER_CFG table=nat:142 family=2 entries=32 op=nft_register_rule pid=5856 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:38.356000 audit[5856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe3c3f8b0 a2=0 a3=1 items=0 ppid=2081 pid=5856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:38.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:42.297023 systemd[1]: Started sshd@19-10.0.0.3:22-10.0.0.1:60544.service. Jul 11 00:47:42.298948 kernel: kauditd_printk_skb: 81 callbacks suppressed Jul 11 00:47:42.299026 kernel: audit: type=1130 audit(1752194862.296:1628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.3:22-10.0.0.1:60544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:42.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.3:22-10.0.0.1:60544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:42.344000 audit[5866]: USER_ACCT pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.345204 sshd[5866]: Accepted publickey for core from 10.0.0.1 port 60544 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:42.347949 kernel: audit: type=1101 audit(1752194862.344:1629): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.348000 audit[5866]: CRED_ACQ pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.351729 sshd[5866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:42.353159 kernel: audit: type=1103 audit(1752194862.348:1630): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.353222 kernel: audit: type=1006 audit(1752194862.348:1631): pid=5866 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 11 00:47:42.348000 audit[5866]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb679240 a2=3 a3=1 items=0 ppid=1 pid=5866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:42.356583 kernel: audit: type=1300 audit(1752194862.348:1631): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb679240 a2=3 a3=1 items=0 ppid=1 pid=5866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:42.348000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:42.358131 kernel: audit: type=1327 audit(1752194862.348:1631): proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:42.360633 systemd-logind[1205]: New session 20 of user core. Jul 11 00:47:42.361542 systemd[1]: Started session-20.scope. Jul 11 00:47:42.365000 audit[5866]: USER_START pid=5866 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.366000 audit[5868]: CRED_ACQ pid=5868 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.371683 kernel: audit: type=1105 audit(1752194862.365:1632): pid=5866 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.371738 kernel: audit: type=1103 audit(1752194862.366:1633): pid=5868 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.556712 sshd[5866]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:42.557000 audit[5866]: USER_END pid=5866 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.559680 systemd[1]: sshd@19-10.0.0.3:22-10.0.0.1:60544.service: Deactivated successfully. Jul 11 00:47:42.560487 systemd[1]: session-20.scope: Deactivated successfully. Jul 11 00:47:42.557000 audit[5866]: CRED_DISP pid=5866 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.562458 systemd-logind[1205]: Session 20 logged out. Waiting for processes to exit. Jul 11 00:47:42.563194 kernel: audit: type=1106 audit(1752194862.557:1634): pid=5866 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.563266 kernel: audit: type=1104 audit(1752194862.557:1635): pid=5866 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:42.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.3:22-10.0.0.1:60544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:42.563183 systemd-logind[1205]: Removed session 20. Jul 11 00:47:43.368000 audit[5880]: NETFILTER_CFG table=filter:143 family=2 entries=22 op=nft_register_rule pid=5880 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:43.368000 audit[5880]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffdb1a160 a2=0 a3=1 items=0 ppid=2081 pid=5880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:43.368000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:43.378000 audit[5880]: NETFILTER_CFG table=nat:144 family=2 entries=108 op=nft_register_chain pid=5880 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:43.378000 audit[5880]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=fffffdb1a160 a2=0 a3=1 items=0 ppid=2081 pid=5880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:43.378000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:44.851800 kubelet[1965]: E0711 00:47:44.851750 1965 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 11 00:47:47.560998 systemd[1]: Started sshd@20-10.0.0.3:22-10.0.0.1:35926.service. Jul 11 00:47:47.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.3:22-10.0.0.1:35926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:47.564144 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 11 00:47:47.564214 kernel: audit: type=1130 audit(1752194867.560:1639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.3:22-10.0.0.1:35926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:47.602000 audit[5911]: USER_ACCT pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.603950 sshd[5911]: Accepted publickey for core from 10.0.0.1 port 35926 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:47.605113 sshd[5911]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:47.603000 audit[5911]: CRED_ACQ pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.608378 kernel: audit: type=1101 audit(1752194867.602:1640): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.608421 kernel: audit: type=1103 audit(1752194867.603:1641): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.608445 kernel: audit: type=1006 audit(1752194867.603:1642): pid=5911 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 11 00:47:47.609716 kernel: audit: type=1300 audit(1752194867.603:1642): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc738e440 a2=3 a3=1 items=0 ppid=1 pid=5911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:47.603000 audit[5911]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc738e440 a2=3 a3=1 items=0 ppid=1 pid=5911 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:47.603000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:47.612952 kernel: audit: type=1327 audit(1752194867.603:1642): proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:47.616137 systemd-logind[1205]: New session 21 of user core. Jul 11 00:47:47.616966 systemd[1]: Started session-21.scope. Jul 11 00:47:47.622000 audit[5911]: USER_START pid=5911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.625953 kernel: audit: type=1105 audit(1752194867.622:1643): pid=5911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.625000 audit[5913]: CRED_ACQ pid=5913 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.628946 kernel: audit: type=1103 audit(1752194867.625:1644): pid=5913 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.758710 sshd[5911]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:47.758000 audit[5911]: USER_END pid=5911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.761067 systemd[1]: sshd@20-10.0.0.3:22-10.0.0.1:35926.service: Deactivated successfully. Jul 11 00:47:47.761820 systemd[1]: session-21.scope: Deactivated successfully. Jul 11 00:47:47.758000 audit[5911]: CRED_DISP pid=5911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.763108 systemd-logind[1205]: Session 21 logged out. Waiting for processes to exit. Jul 11 00:47:47.764038 systemd-logind[1205]: Removed session 21. Jul 11 00:47:47.764383 kernel: audit: type=1106 audit(1752194867.758:1645): pid=5911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.764435 kernel: audit: type=1104 audit(1752194867.758:1646): pid=5911 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:47.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.3:22-10.0.0.1:35926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:49.147000 audit[5966]: NETFILTER_CFG table=filter:145 family=2 entries=9 op=nft_register_rule pid=5966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:49.147000 audit[5966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcd473970 a2=0 a3=1 items=0 ppid=2081 pid=5966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:49.147000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:49.159000 audit[5966]: NETFILTER_CFG table=nat:146 family=2 entries=55 op=nft_register_chain pid=5966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:49.159000 audit[5966]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=ffffcd473970 a2=0 a3=1 items=0 ppid=2081 pid=5966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:49.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:51.981000 audit[5968]: NETFILTER_CFG table=filter:147 family=2 entries=8 op=nft_register_rule pid=5968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:51.981000 audit[5968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd5369520 a2=0 a3=1 items=0 ppid=2081 pid=5968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:51.981000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:51.987889 kubelet[1965]: I0711 00:47:51.987824 1965 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 11 00:47:51.988641 env[1214]: time="2025-07-11T00:47:51.988582992Z" level=info msg="StopContainer for \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\" with timeout 30 (s)" Jul 11 00:47:51.989188 env[1214]: time="2025-07-11T00:47:51.989152673Z" level=info msg="Stop container \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\" with signal terminated" Jul 11 00:47:51.996000 audit[5968]: NETFILTER_CFG table=nat:148 family=2 entries=62 op=nft_register_chain pid=5968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:51.996000 audit[5968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffd5369520 a2=0 a3=1 items=0 ppid=2081 pid=5968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:51.996000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:52.007104 systemd[1]: cri-containerd-b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69.scope: Deactivated successfully. Jul 11 00:47:52.006000 audit: BPF prog-id=214 op=UNLOAD Jul 11 00:47:52.012000 audit: BPF prog-id=217 op=UNLOAD Jul 11 00:47:52.012000 audit[5981]: NETFILTER_CFG table=filter:149 family=2 entries=8 op=nft_register_rule pid=5981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:52.012000 audit[5981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe06f4cd0 a2=0 a3=1 items=0 ppid=2081 pid=5981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:52.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:52.017000 audit[5981]: NETFILTER_CFG table=nat:150 family=2 entries=64 op=nft_register_rule pid=5981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:52.017000 audit[5981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffe06f4cd0 a2=0 a3=1 items=0 ppid=2081 pid=5981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:52.017000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:52.025698 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69-rootfs.mount: Deactivated successfully. Jul 11 00:47:52.026701 env[1214]: time="2025-07-11T00:47:52.026659542Z" level=info msg="shim disconnected" id=b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69 Jul 11 00:47:52.026780 env[1214]: time="2025-07-11T00:47:52.026705862Z" level=warning msg="cleaning up after shim disconnected" id=b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69 namespace=k8s.io Jul 11 00:47:52.026780 env[1214]: time="2025-07-11T00:47:52.026716422Z" level=info msg="cleaning up dead shim" Jul 11 00:47:52.033663 env[1214]: time="2025-07-11T00:47:52.033629875Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:47:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5989 runtime=io.containerd.runc.v2\n" Jul 11 00:47:52.049621 env[1214]: time="2025-07-11T00:47:52.049572386Z" level=info msg="StopContainer for \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\" returns successfully" Jul 11 00:47:52.050117 env[1214]: time="2025-07-11T00:47:52.050090427Z" level=info msg="StopPodSandbox for \"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba\"" Jul 11 00:47:52.050326 env[1214]: time="2025-07-11T00:47:52.050290587Z" level=info msg="Container to stop \"b2bdfaf2f6559ca65d8472f98fac4c7af025775f2b9b9c709efb18aa318f3a69\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 11 00:47:52.052939 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba-shm.mount: Deactivated successfully. Jul 11 00:47:52.057100 systemd[1]: cri-containerd-b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba.scope: Deactivated successfully. Jul 11 00:47:52.056000 audit: BPF prog-id=210 op=UNLOAD Jul 11 00:47:52.061000 audit: BPF prog-id=213 op=UNLOAD Jul 11 00:47:52.076090 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba-rootfs.mount: Deactivated successfully. Jul 11 00:47:52.076581 env[1214]: time="2025-07-11T00:47:52.076546157Z" level=info msg="shim disconnected" id=b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba Jul 11 00:47:52.076947 env[1214]: time="2025-07-11T00:47:52.076912318Z" level=warning msg="cleaning up after shim disconnected" id=b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba namespace=k8s.io Jul 11 00:47:52.077027 env[1214]: time="2025-07-11T00:47:52.077012518Z" level=info msg="cleaning up dead shim" Jul 11 00:47:52.084956 env[1214]: time="2025-07-11T00:47:52.084567453Z" level=warning msg="cleanup warnings time=\"2025-07-11T00:47:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6020 runtime=io.containerd.runc.v2\n" Jul 11 00:47:52.121060 kubelet[1965]: I0711 00:47:52.121024 1965 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Jul 11 00:47:52.153852 systemd-networkd[1040]: cali7f41678ffb2: Link DOWN Jul 11 00:47:52.153860 systemd-networkd[1040]: cali7f41678ffb2: Lost carrier Jul 11 00:47:52.165000 audit[6059]: NETFILTER_CFG table=filter:151 family=2 entries=47 op=nft_register_rule pid=6059 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:52.165000 audit[6059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6552 a0=3 a1=ffffcfd78420 a2=0 a3=ffffa120efa8 items=0 ppid=3449 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:52.165000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:52.166000 audit[6059]: NETFILTER_CFG table=filter:152 family=2 entries=2 op=nft_unregister_chain pid=6059 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 11 00:47:52.166000 audit[6059]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcfd78420 a2=0 a3=ffffa120efa8 items=0 ppid=3449 pid=6059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:52.166000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.152 [INFO][6044] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.153 [INFO][6044] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" iface="eth0" netns="/var/run/netns/cni-609a5a98-6479-9af3-86a3-40abdf4641b4" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.153 [INFO][6044] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" iface="eth0" netns="/var/run/netns/cni-609a5a98-6479-9af3-86a3-40abdf4641b4" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.166 [INFO][6044] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" after=12.846985ms iface="eth0" netns="/var/run/netns/cni-609a5a98-6479-9af3-86a3-40abdf4641b4" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.166 [INFO][6044] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.166 [INFO][6044] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.183 [INFO][6061] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" HandleID="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.183 [INFO][6061] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.183 [INFO][6061] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.219 [INFO][6061] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" HandleID="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.219 [INFO][6061] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" HandleID="k8s-pod-network.b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Workload="localhost-k8s-calico--apiserver--7bd89b55d4--hp5dq-eth0" Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.221 [INFO][6061] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 11 00:47:52.225161 env[1214]: 2025-07-11 00:47:52.223 [INFO][6044] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba" Jul 11 00:47:52.225868 env[1214]: time="2025-07-11T00:47:52.225819243Z" level=info msg="TearDown network for sandbox \"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba\" successfully" Jul 11 00:47:52.225969 env[1214]: time="2025-07-11T00:47:52.225950763Z" level=info msg="StopPodSandbox for \"b22345c3845cc5c9635552e368c9d1905c514bfe6ea9c5a2640e4467c537eaba\" returns successfully" Jul 11 00:47:52.228312 systemd[1]: run-netns-cni\x2d609a5a98\x2d6479\x2d9af3\x2d86a3\x2d40abdf4641b4.mount: Deactivated successfully. Jul 11 00:47:52.309559 kubelet[1965]: I0711 00:47:52.309454 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-q9hld\" (UniqueName: \"kubernetes.io/projected/1bb06ba8-233c-4b40-a7d3-425800a79a04-kube-api-access-q9hld\") pod \"1bb06ba8-233c-4b40-a7d3-425800a79a04\" (UID: \"1bb06ba8-233c-4b40-a7d3-425800a79a04\") " Jul 11 00:47:52.309559 kubelet[1965]: I0711 00:47:52.309506 1965 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1bb06ba8-233c-4b40-a7d3-425800a79a04-calico-apiserver-certs\") pod \"1bb06ba8-233c-4b40-a7d3-425800a79a04\" (UID: \"1bb06ba8-233c-4b40-a7d3-425800a79a04\") " Jul 11 00:47:52.313224 kubelet[1965]: I0711 00:47:52.313180 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1bb06ba8-233c-4b40-a7d3-425800a79a04-kube-api-access-q9hld" (OuterVolumeSpecName: "kube-api-access-q9hld") pod "1bb06ba8-233c-4b40-a7d3-425800a79a04" (UID: "1bb06ba8-233c-4b40-a7d3-425800a79a04"). InnerVolumeSpecName "kube-api-access-q9hld". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 11 00:47:52.313883 kubelet[1965]: I0711 00:47:52.313817 1965 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1bb06ba8-233c-4b40-a7d3-425800a79a04-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "1bb06ba8-233c-4b40-a7d3-425800a79a04" (UID: "1bb06ba8-233c-4b40-a7d3-425800a79a04"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 11 00:47:52.315573 systemd[1]: var-lib-kubelet-pods-1bb06ba8\x2d233c\x2d4b40\x2da7d3\x2d425800a79a04-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 11 00:47:52.315669 systemd[1]: var-lib-kubelet-pods-1bb06ba8\x2d233c\x2d4b40\x2da7d3\x2d425800a79a04-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dq9hld.mount: Deactivated successfully. Jul 11 00:47:52.410064 kubelet[1965]: I0711 00:47:52.410028 1965 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-q9hld\" (UniqueName: \"kubernetes.io/projected/1bb06ba8-233c-4b40-a7d3-425800a79a04-kube-api-access-q9hld\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:52.410064 kubelet[1965]: I0711 00:47:52.410059 1965 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1bb06ba8-233c-4b40-a7d3-425800a79a04-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 11 00:47:52.764262 systemd[1]: Started sshd@21-10.0.0.3:22-10.0.0.1:47118.service. Jul 11 00:47:52.767195 kernel: kauditd_printk_skb: 29 callbacks suppressed Jul 11 00:47:52.767277 kernel: audit: type=1130 audit(1752194872.763:1660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.3:22-10.0.0.1:47118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:52.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.3:22-10.0.0.1:47118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:52.812000 audit[6072]: USER_ACCT pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.816065 kernel: audit: type=1101 audit(1752194872.812:1661): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.816100 sshd[6072]: Accepted publickey for core from 10.0.0.1 port 47118 ssh2: RSA SHA256:DO2RFOHl/GvUCVdCGSWUeFt6wdih0tefOeEyRQ07TAM Jul 11 00:47:52.815000 audit[6072]: CRED_ACQ pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.816855 sshd[6072]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 11 00:47:52.820117 kernel: audit: type=1103 audit(1752194872.815:1662): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.820190 kernel: audit: type=1006 audit(1752194872.815:1663): pid=6072 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 11 00:47:52.815000 audit[6072]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe30faf70 a2=3 a3=1 items=0 ppid=1 pid=6072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:52.824042 kernel: audit: type=1300 audit(1752194872.815:1663): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe30faf70 a2=3 a3=1 items=0 ppid=1 pid=6072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:52.824109 kernel: audit: type=1327 audit(1752194872.815:1663): proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:52.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 11 00:47:52.823536 systemd[1]: Started session-22.scope. Jul 11 00:47:52.823687 systemd-logind[1205]: New session 22 of user core. Jul 11 00:47:52.827000 audit[6072]: USER_START pid=6072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.830000 audit[6074]: CRED_ACQ pid=6074 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.833501 kernel: audit: type=1105 audit(1752194872.827:1664): pid=6072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.833583 kernel: audit: type=1103 audit(1752194872.830:1665): pid=6074 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.989976 sshd[6072]: pam_unix(sshd:session): session closed for user core Jul 11 00:47:52.989000 audit[6072]: USER_END pid=6072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.992498 systemd[1]: sshd@21-10.0.0.3:22-10.0.0.1:47118.service: Deactivated successfully. Jul 11 00:47:52.993306 systemd[1]: session-22.scope: Deactivated successfully. Jul 11 00:47:52.990000 audit[6072]: CRED_DISP pid=6072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.993888 systemd-logind[1205]: Session 22 logged out. Waiting for processes to exit. Jul 11 00:47:52.994608 systemd-logind[1205]: Removed session 22. Jul 11 00:47:52.995634 kernel: audit: type=1106 audit(1752194872.989:1666): pid=6072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.995676 kernel: audit: type=1104 audit(1752194872.990:1667): pid=6072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 11 00:47:52.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.3:22-10.0.0.1:47118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 11 00:47:53.032000 audit[6086]: NETFILTER_CFG table=filter:153 family=2 entries=8 op=nft_register_rule pid=6086 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:53.032000 audit[6086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff9e8d040 a2=0 a3=1 items=0 ppid=2081 pid=6086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:53.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:53.040000 audit[6086]: NETFILTER_CFG table=nat:154 family=2 entries=64 op=nft_register_rule pid=6086 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 11 00:47:53.040000 audit[6086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=fffff9e8d040 a2=0 a3=1 items=0 ppid=2081 pid=6086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 11 00:47:53.040000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 11 00:47:53.126565 systemd[1]: Removed slice kubepods-besteffort-pod1bb06ba8_233c_4b40_a7d3_425800a79a04.slice. Jul 11 00:47:53.854239 kubelet[1965]: I0711 00:47:53.854203 1965 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1bb06ba8-233c-4b40-a7d3-425800a79a04" path="/var/lib/kubelet/pods/1bb06ba8-233c-4b40-a7d3-425800a79a04/volumes"