Jul 12 00:23:16.027328 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Jul 12 00:23:16.027392 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Jul 11 23:15:18 -00 2025 Jul 12 00:23:16.027421 kernel: efi: EFI v2.70 by EDK II Jul 12 00:23:16.027437 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Jul 12 00:23:16.027450 kernel: ACPI: Early table checksum verification disabled Jul 12 00:23:16.027464 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Jul 12 00:23:16.027480 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Jul 12 00:23:16.027494 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Jul 12 00:23:16.027507 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Jul 12 00:23:16.027521 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Jul 12 00:23:16.027539 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Jul 12 00:23:16.027552 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Jul 12 00:23:16.027566 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Jul 12 00:23:16.027580 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Jul 12 00:23:16.027596 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Jul 12 00:23:16.027615 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Jul 12 00:23:16.027629 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Jul 12 00:23:16.027644 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Jul 12 00:23:16.027658 kernel: printk: bootconsole [uart0] enabled Jul 12 00:23:16.027672 kernel: NUMA: Failed to initialise from firmware Jul 12 00:23:16.027687 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Jul 12 00:23:16.027701 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Jul 12 00:23:16.027716 kernel: Zone ranges: Jul 12 00:23:16.027730 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Jul 12 00:23:16.027744 kernel: DMA32 empty Jul 12 00:23:16.027758 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Jul 12 00:23:16.027776 kernel: Movable zone start for each node Jul 12 00:23:16.027791 kernel: Early memory node ranges Jul 12 00:23:16.027805 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Jul 12 00:23:16.027819 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Jul 12 00:23:16.027834 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Jul 12 00:23:16.027848 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Jul 12 00:23:16.027862 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Jul 12 00:23:16.027876 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Jul 12 00:23:16.027890 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Jul 12 00:23:16.027905 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Jul 12 00:23:16.027919 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Jul 12 00:23:16.027933 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Jul 12 00:23:16.027966 kernel: psci: probing for conduit method from ACPI. Jul 12 00:23:16.027986 kernel: psci: PSCIv1.0 detected in firmware. Jul 12 00:23:16.028008 kernel: psci: Using standard PSCI v0.2 function IDs Jul 12 00:23:16.028024 kernel: psci: Trusted OS migration not required Jul 12 00:23:16.028039 kernel: psci: SMC Calling Convention v1.1 Jul 12 00:23:16.028058 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Jul 12 00:23:16.028073 kernel: ACPI: SRAT not present Jul 12 00:23:16.028089 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 12 00:23:16.028104 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 12 00:23:16.028119 kernel: pcpu-alloc: [0] 0 [0] 1 Jul 12 00:23:16.028134 kernel: Detected PIPT I-cache on CPU0 Jul 12 00:23:16.028149 kernel: CPU features: detected: GIC system register CPU interface Jul 12 00:23:16.028164 kernel: CPU features: detected: Spectre-v2 Jul 12 00:23:16.028178 kernel: CPU features: detected: Spectre-v3a Jul 12 00:23:16.028212 kernel: CPU features: detected: Spectre-BHB Jul 12 00:23:16.028230 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 12 00:23:16.028250 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 12 00:23:16.028266 kernel: CPU features: detected: ARM erratum 1742098 Jul 12 00:23:16.028281 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Jul 12 00:23:16.028296 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Jul 12 00:23:16.028311 kernel: Policy zone: Normal Jul 12 00:23:16.028328 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:23:16.028345 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 12 00:23:16.028360 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 12 00:23:16.028375 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 12 00:23:16.028390 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 12 00:23:16.028409 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Jul 12 00:23:16.028426 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Jul 12 00:23:16.028441 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 12 00:23:16.028456 kernel: trace event string verifier disabled Jul 12 00:23:16.028471 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 12 00:23:16.028487 kernel: rcu: RCU event tracing is enabled. Jul 12 00:23:16.028577 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 12 00:23:16.028600 kernel: Trampoline variant of Tasks RCU enabled. Jul 12 00:23:16.028616 kernel: Tracing variant of Tasks RCU enabled. Jul 12 00:23:16.028631 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 12 00:23:16.028646 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 12 00:23:16.028661 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 12 00:23:16.028682 kernel: GICv3: 96 SPIs implemented Jul 12 00:23:16.028697 kernel: GICv3: 0 Extended SPIs implemented Jul 12 00:23:16.028711 kernel: GICv3: Distributor has no Range Selector support Jul 12 00:23:16.028726 kernel: Root IRQ handler: gic_handle_irq Jul 12 00:23:16.028741 kernel: GICv3: 16 PPIs implemented Jul 12 00:23:16.028756 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Jul 12 00:23:16.028771 kernel: ACPI: SRAT not present Jul 12 00:23:16.028786 kernel: ITS [mem 0x10080000-0x1009ffff] Jul 12 00:23:16.028801 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Jul 12 00:23:16.028817 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Jul 12 00:23:16.028832 kernel: GICv3: using LPI property table @0x00000004000b0000 Jul 12 00:23:16.028852 kernel: ITS: Using hypervisor restricted LPI range [128] Jul 12 00:23:16.028868 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Jul 12 00:23:16.028883 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Jul 12 00:23:16.028898 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Jul 12 00:23:16.028913 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Jul 12 00:23:16.028929 kernel: Console: colour dummy device 80x25 Jul 12 00:23:16.028944 kernel: printk: console [tty1] enabled Jul 12 00:23:16.028960 kernel: ACPI: Core revision 20210730 Jul 12 00:23:16.028976 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Jul 12 00:23:16.028991 kernel: pid_max: default: 32768 minimum: 301 Jul 12 00:23:16.029012 kernel: LSM: Security Framework initializing Jul 12 00:23:16.029061 kernel: SELinux: Initializing. Jul 12 00:23:16.029078 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:23:16.029094 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:23:16.029110 kernel: rcu: Hierarchical SRCU implementation. Jul 12 00:23:16.029125 kernel: Platform MSI: ITS@0x10080000 domain created Jul 12 00:23:16.029140 kernel: PCI/MSI: ITS@0x10080000 domain created Jul 12 00:23:16.029156 kernel: Remapping and enabling EFI services. Jul 12 00:23:16.029171 kernel: smp: Bringing up secondary CPUs ... Jul 12 00:23:16.029186 kernel: Detected PIPT I-cache on CPU1 Jul 12 00:23:16.029301 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Jul 12 00:23:16.029318 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Jul 12 00:23:16.029334 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Jul 12 00:23:16.029349 kernel: smp: Brought up 1 node, 2 CPUs Jul 12 00:23:16.029364 kernel: SMP: Total of 2 processors activated. Jul 12 00:23:16.029380 kernel: CPU features: detected: 32-bit EL0 Support Jul 12 00:23:16.029395 kernel: CPU features: detected: 32-bit EL1 Support Jul 12 00:23:16.029411 kernel: CPU features: detected: CRC32 instructions Jul 12 00:23:16.029426 kernel: CPU: All CPU(s) started at EL1 Jul 12 00:23:16.029445 kernel: alternatives: patching kernel code Jul 12 00:23:16.029461 kernel: devtmpfs: initialized Jul 12 00:23:16.029487 kernel: KASLR disabled due to lack of seed Jul 12 00:23:16.029508 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 12 00:23:16.029524 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 12 00:23:16.029540 kernel: pinctrl core: initialized pinctrl subsystem Jul 12 00:23:16.029555 kernel: SMBIOS 3.0.0 present. Jul 12 00:23:16.029571 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Jul 12 00:23:16.029587 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 12 00:23:16.029604 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 12 00:23:16.029620 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 12 00:23:16.029640 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 12 00:23:16.029657 kernel: audit: initializing netlink subsys (disabled) Jul 12 00:23:16.029673 kernel: audit: type=2000 audit(0.296:1): state=initialized audit_enabled=0 res=1 Jul 12 00:23:16.029689 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 12 00:23:16.029705 kernel: cpuidle: using governor menu Jul 12 00:23:16.029725 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 12 00:23:16.029742 kernel: ASID allocator initialised with 32768 entries Jul 12 00:23:16.029758 kernel: ACPI: bus type PCI registered Jul 12 00:23:16.029774 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 12 00:23:16.029790 kernel: Serial: AMBA PL011 UART driver Jul 12 00:23:16.029806 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 12 00:23:16.029822 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 12 00:23:16.029838 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 12 00:23:16.029854 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 12 00:23:16.029874 kernel: cryptd: max_cpu_qlen set to 1000 Jul 12 00:23:16.029890 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 12 00:23:16.029906 kernel: ACPI: Added _OSI(Module Device) Jul 12 00:23:16.029922 kernel: ACPI: Added _OSI(Processor Device) Jul 12 00:23:16.029938 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 12 00:23:16.029954 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 12 00:23:16.029970 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 12 00:23:16.029986 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 12 00:23:16.030002 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 12 00:23:16.030018 kernel: ACPI: Interpreter enabled Jul 12 00:23:16.030038 kernel: ACPI: Using GIC for interrupt routing Jul 12 00:23:16.030054 kernel: ACPI: MCFG table detected, 1 entries Jul 12 00:23:16.030070 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Jul 12 00:23:16.030391 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 12 00:23:16.030586 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 12 00:23:16.030771 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 12 00:23:16.030955 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Jul 12 00:23:16.031148 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Jul 12 00:23:16.031173 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Jul 12 00:23:16.031208 kernel: acpiphp: Slot [1] registered Jul 12 00:23:16.031229 kernel: acpiphp: Slot [2] registered Jul 12 00:23:16.031246 kernel: acpiphp: Slot [3] registered Jul 12 00:23:16.031262 kernel: acpiphp: Slot [4] registered Jul 12 00:23:16.031278 kernel: acpiphp: Slot [5] registered Jul 12 00:23:16.031294 kernel: acpiphp: Slot [6] registered Jul 12 00:23:16.031309 kernel: acpiphp: Slot [7] registered Jul 12 00:23:16.031331 kernel: acpiphp: Slot [8] registered Jul 12 00:23:16.031347 kernel: acpiphp: Slot [9] registered Jul 12 00:23:16.031362 kernel: acpiphp: Slot [10] registered Jul 12 00:23:16.031378 kernel: acpiphp: Slot [11] registered Jul 12 00:23:16.031394 kernel: acpiphp: Slot [12] registered Jul 12 00:23:16.031410 kernel: acpiphp: Slot [13] registered Jul 12 00:23:16.031426 kernel: acpiphp: Slot [14] registered Jul 12 00:23:16.033265 kernel: acpiphp: Slot [15] registered Jul 12 00:23:16.033291 kernel: acpiphp: Slot [16] registered Jul 12 00:23:16.033315 kernel: acpiphp: Slot [17] registered Jul 12 00:23:16.033332 kernel: acpiphp: Slot [18] registered Jul 12 00:23:16.033348 kernel: acpiphp: Slot [19] registered Jul 12 00:23:16.033364 kernel: acpiphp: Slot [20] registered Jul 12 00:23:16.033380 kernel: acpiphp: Slot [21] registered Jul 12 00:23:16.033396 kernel: acpiphp: Slot [22] registered Jul 12 00:23:16.033412 kernel: acpiphp: Slot [23] registered Jul 12 00:23:16.033427 kernel: acpiphp: Slot [24] registered Jul 12 00:23:16.033443 kernel: acpiphp: Slot [25] registered Jul 12 00:23:16.033459 kernel: acpiphp: Slot [26] registered Jul 12 00:23:16.033479 kernel: acpiphp: Slot [27] registered Jul 12 00:23:16.033494 kernel: acpiphp: Slot [28] registered Jul 12 00:23:16.033510 kernel: acpiphp: Slot [29] registered Jul 12 00:23:16.033526 kernel: acpiphp: Slot [30] registered Jul 12 00:23:16.033543 kernel: acpiphp: Slot [31] registered Jul 12 00:23:16.033558 kernel: PCI host bridge to bus 0000:00 Jul 12 00:23:16.033811 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Jul 12 00:23:16.033996 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 12 00:23:16.034175 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Jul 12 00:23:16.048979 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Jul 12 00:23:16.049265 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Jul 12 00:23:16.049486 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Jul 12 00:23:16.049718 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Jul 12 00:23:16.049955 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Jul 12 00:23:16.050176 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Jul 12 00:23:16.050427 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 12 00:23:16.050671 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Jul 12 00:23:16.050917 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Jul 12 00:23:16.051151 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Jul 12 00:23:16.054272 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Jul 12 00:23:16.054502 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 12 00:23:16.054702 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Jul 12 00:23:16.054923 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Jul 12 00:23:16.055121 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Jul 12 00:23:16.055367 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Jul 12 00:23:16.055569 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Jul 12 00:23:16.055745 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Jul 12 00:23:16.055914 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 12 00:23:16.056116 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Jul 12 00:23:16.056141 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 12 00:23:16.056158 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 12 00:23:16.056175 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 12 00:23:16.056218 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 12 00:23:16.056238 kernel: iommu: Default domain type: Translated Jul 12 00:23:16.056255 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 12 00:23:16.056271 kernel: vgaarb: loaded Jul 12 00:23:16.056287 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 12 00:23:16.056309 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 12 00:23:16.056325 kernel: PTP clock support registered Jul 12 00:23:16.056341 kernel: Registered efivars operations Jul 12 00:23:16.056357 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 12 00:23:16.056373 kernel: VFS: Disk quotas dquot_6.6.0 Jul 12 00:23:16.056390 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 12 00:23:16.056406 kernel: pnp: PnP ACPI init Jul 12 00:23:16.056622 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Jul 12 00:23:16.056653 kernel: pnp: PnP ACPI: found 1 devices Jul 12 00:23:16.056670 kernel: NET: Registered PF_INET protocol family Jul 12 00:23:16.056686 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 12 00:23:16.056703 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 12 00:23:16.056720 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 12 00:23:16.056736 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 12 00:23:16.056752 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 12 00:23:16.056769 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 12 00:23:16.056785 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:23:16.056805 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:23:16.056822 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 12 00:23:16.056838 kernel: PCI: CLS 0 bytes, default 64 Jul 12 00:23:16.056854 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Jul 12 00:23:16.056870 kernel: kvm [1]: HYP mode not available Jul 12 00:23:16.056886 kernel: Initialise system trusted keyrings Jul 12 00:23:16.056902 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 12 00:23:16.056919 kernel: Key type asymmetric registered Jul 12 00:23:16.056935 kernel: Asymmetric key parser 'x509' registered Jul 12 00:23:16.056955 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 12 00:23:16.056972 kernel: io scheduler mq-deadline registered Jul 12 00:23:16.056988 kernel: io scheduler kyber registered Jul 12 00:23:16.057004 kernel: io scheduler bfq registered Jul 12 00:23:16.057271 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Jul 12 00:23:16.057303 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 12 00:23:16.057320 kernel: ACPI: button: Power Button [PWRB] Jul 12 00:23:16.057336 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Jul 12 00:23:16.057353 kernel: ACPI: button: Sleep Button [SLPB] Jul 12 00:23:16.057377 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 12 00:23:16.057394 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Jul 12 00:23:16.057604 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Jul 12 00:23:16.057630 kernel: printk: console [ttyS0] disabled Jul 12 00:23:16.057647 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Jul 12 00:23:16.057664 kernel: printk: console [ttyS0] enabled Jul 12 00:23:16.057679 kernel: printk: bootconsole [uart0] disabled Jul 12 00:23:16.057696 kernel: thunder_xcv, ver 1.0 Jul 12 00:23:16.057712 kernel: thunder_bgx, ver 1.0 Jul 12 00:23:16.057734 kernel: nicpf, ver 1.0 Jul 12 00:23:16.057750 kernel: nicvf, ver 1.0 Jul 12 00:23:16.057951 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 12 00:23:16.058139 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-12T00:23:15 UTC (1752279795) Jul 12 00:23:16.058163 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 12 00:23:16.058179 kernel: NET: Registered PF_INET6 protocol family Jul 12 00:23:16.065050 kernel: Segment Routing with IPv6 Jul 12 00:23:16.065081 kernel: In-situ OAM (IOAM) with IPv6 Jul 12 00:23:16.065107 kernel: NET: Registered PF_PACKET protocol family Jul 12 00:23:16.065125 kernel: Key type dns_resolver registered Jul 12 00:23:16.065142 kernel: registered taskstats version 1 Jul 12 00:23:16.065158 kernel: Loading compiled-in X.509 certificates Jul 12 00:23:16.065175 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: de2ee1d04443f96c763927c453375bbe23b5752a' Jul 12 00:23:16.065225 kernel: Key type .fscrypt registered Jul 12 00:23:16.065246 kernel: Key type fscrypt-provisioning registered Jul 12 00:23:16.065263 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 12 00:23:16.065279 kernel: ima: Allocated hash algorithm: sha1 Jul 12 00:23:16.065302 kernel: ima: No architecture policies found Jul 12 00:23:16.065319 kernel: clk: Disabling unused clocks Jul 12 00:23:16.065335 kernel: Freeing unused kernel memory: 36416K Jul 12 00:23:16.065351 kernel: Run /init as init process Jul 12 00:23:16.065368 kernel: with arguments: Jul 12 00:23:16.065383 kernel: /init Jul 12 00:23:16.065399 kernel: with environment: Jul 12 00:23:16.065414 kernel: HOME=/ Jul 12 00:23:16.065430 kernel: TERM=linux Jul 12 00:23:16.065450 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 12 00:23:16.065473 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:23:16.065495 systemd[1]: Detected virtualization amazon. Jul 12 00:23:16.065513 systemd[1]: Detected architecture arm64. Jul 12 00:23:16.065531 systemd[1]: Running in initrd. Jul 12 00:23:16.065548 systemd[1]: No hostname configured, using default hostname. Jul 12 00:23:16.065565 systemd[1]: Hostname set to . Jul 12 00:23:16.065588 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:23:16.065606 systemd[1]: Queued start job for default target initrd.target. Jul 12 00:23:16.065623 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:23:16.065640 systemd[1]: Reached target cryptsetup.target. Jul 12 00:23:16.065657 systemd[1]: Reached target paths.target. Jul 12 00:23:16.065675 systemd[1]: Reached target slices.target. Jul 12 00:23:16.065692 systemd[1]: Reached target swap.target. Jul 12 00:23:16.065709 systemd[1]: Reached target timers.target. Jul 12 00:23:16.065731 systemd[1]: Listening on iscsid.socket. Jul 12 00:23:16.065773 systemd[1]: Listening on iscsiuio.socket. Jul 12 00:23:16.065792 systemd[1]: Listening on systemd-journald-audit.socket. Jul 12 00:23:16.065809 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 12 00:23:16.065827 systemd[1]: Listening on systemd-journald.socket. Jul 12 00:23:16.065845 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:23:16.065863 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:23:16.065880 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:23:16.065903 systemd[1]: Reached target sockets.target. Jul 12 00:23:16.065921 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:23:16.065939 systemd[1]: Finished network-cleanup.service. Jul 12 00:23:16.065956 systemd[1]: Starting systemd-fsck-usr.service... Jul 12 00:23:16.065974 systemd[1]: Starting systemd-journald.service... Jul 12 00:23:16.065991 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:23:16.066008 systemd[1]: Starting systemd-resolved.service... Jul 12 00:23:16.066026 systemd[1]: Starting systemd-vconsole-setup.service... Jul 12 00:23:16.066044 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:23:16.066065 systemd[1]: Finished systemd-fsck-usr.service. Jul 12 00:23:16.066084 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 12 00:23:16.066101 systemd[1]: Finished systemd-vconsole-setup.service. Jul 12 00:23:16.066119 systemd[1]: Starting dracut-cmdline-ask.service... Jul 12 00:23:16.066137 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 12 00:23:16.066155 kernel: audit: type=1130 audit(1752279796.039:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.066178 systemd-journald[310]: Journal started Jul 12 00:23:16.066315 systemd-journald[310]: Runtime Journal (/run/log/journal/ec2ddd9688a0afc059ff1e0d04334977) is 8.0M, max 75.4M, 67.4M free. Jul 12 00:23:16.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.997938 systemd-modules-load[311]: Inserted module 'overlay' Jul 12 00:23:16.073464 systemd[1]: Started systemd-journald.service. Jul 12 00:23:16.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.093912 kernel: audit: type=1130 audit(1752279796.079:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.093984 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 12 00:23:16.095370 systemd[1]: Finished dracut-cmdline-ask.service. Jul 12 00:23:16.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.100546 systemd[1]: Starting dracut-cmdline.service... Jul 12 00:23:16.116229 kernel: audit: type=1130 audit(1752279796.096:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.116301 kernel: Bridge firewalling registered Jul 12 00:23:16.116584 systemd-resolved[312]: Positive Trust Anchors: Jul 12 00:23:16.116611 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:23:16.116671 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:23:16.120383 systemd-modules-load[311]: Inserted module 'br_netfilter' Jul 12 00:23:16.159235 kernel: SCSI subsystem initialized Jul 12 00:23:16.160837 dracut-cmdline[328]: dracut-dracut-053 Jul 12 00:23:16.166913 dracut-cmdline[328]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:23:16.188976 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 12 00:23:16.189063 kernel: device-mapper: uevent: version 1.0.3 Jul 12 00:23:16.194237 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 12 00:23:16.198407 systemd-modules-load[311]: Inserted module 'dm_multipath' Jul 12 00:23:16.201881 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:23:16.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.205347 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:23:16.226233 kernel: audit: type=1130 audit(1752279796.202:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.232781 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:23:16.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.248239 kernel: audit: type=1130 audit(1752279796.233:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.347224 kernel: Loading iSCSI transport class v2.0-870. Jul 12 00:23:16.367228 kernel: iscsi: registered transport (tcp) Jul 12 00:23:16.394988 kernel: iscsi: registered transport (qla4xxx) Jul 12 00:23:16.395059 kernel: QLogic iSCSI HBA Driver Jul 12 00:23:16.576277 kernel: random: crng init done Jul 12 00:23:16.576386 systemd-resolved[312]: Defaulting to hostname 'linux'. Jul 12 00:23:16.580110 systemd[1]: Started systemd-resolved.service. Jul 12 00:23:16.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.582110 systemd[1]: Reached target nss-lookup.target. Jul 12 00:23:16.598933 kernel: audit: type=1130 audit(1752279796.579:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.603435 systemd[1]: Finished dracut-cmdline.service. Jul 12 00:23:16.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.608315 systemd[1]: Starting dracut-pre-udev.service... Jul 12 00:23:16.617346 kernel: audit: type=1130 audit(1752279796.604:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.676231 kernel: raid6: neonx8 gen() 6238 MB/s Jul 12 00:23:16.694236 kernel: raid6: neonx8 xor() 4657 MB/s Jul 12 00:23:16.712225 kernel: raid6: neonx4 gen() 6555 MB/s Jul 12 00:23:16.730234 kernel: raid6: neonx4 xor() 4816 MB/s Jul 12 00:23:16.748229 kernel: raid6: neonx2 gen() 5796 MB/s Jul 12 00:23:16.766233 kernel: raid6: neonx2 xor() 4426 MB/s Jul 12 00:23:16.784233 kernel: raid6: neonx1 gen() 4470 MB/s Jul 12 00:23:16.802236 kernel: raid6: neonx1 xor() 3597 MB/s Jul 12 00:23:16.820227 kernel: raid6: int64x8 gen() 3429 MB/s Jul 12 00:23:16.838239 kernel: raid6: int64x8 xor() 2055 MB/s Jul 12 00:23:16.856235 kernel: raid6: int64x4 gen() 3834 MB/s Jul 12 00:23:16.874233 kernel: raid6: int64x4 xor() 2172 MB/s Jul 12 00:23:16.892237 kernel: raid6: int64x2 gen() 3602 MB/s Jul 12 00:23:16.910235 kernel: raid6: int64x2 xor() 1928 MB/s Jul 12 00:23:16.928234 kernel: raid6: int64x1 gen() 2753 MB/s Jul 12 00:23:16.947906 kernel: raid6: int64x1 xor() 1434 MB/s Jul 12 00:23:16.947974 kernel: raid6: using algorithm neonx4 gen() 6555 MB/s Jul 12 00:23:16.948001 kernel: raid6: .... xor() 4816 MB/s, rmw enabled Jul 12 00:23:16.949779 kernel: raid6: using neon recovery algorithm Jul 12 00:23:16.970556 kernel: xor: measuring software checksum speed Jul 12 00:23:16.970624 kernel: 8regs : 9330 MB/sec Jul 12 00:23:16.972478 kernel: 32regs : 11099 MB/sec Jul 12 00:23:16.974440 kernel: arm64_neon : 9550 MB/sec Jul 12 00:23:16.974476 kernel: xor: using function: 32regs (11099 MB/sec) Jul 12 00:23:17.074249 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 12 00:23:17.091957 systemd[1]: Finished dracut-pre-udev.service. Jul 12 00:23:17.103133 kernel: audit: type=1130 audit(1752279797.092:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.102000 audit: BPF prog-id=7 op=LOAD Jul 12 00:23:17.106238 kernel: audit: type=1334 audit(1752279797.102:10): prog-id=7 op=LOAD Jul 12 00:23:17.105000 audit: BPF prog-id=8 op=LOAD Jul 12 00:23:17.106987 systemd[1]: Starting systemd-udevd.service... Jul 12 00:23:17.136986 systemd-udevd[509]: Using default interface naming scheme 'v252'. Jul 12 00:23:17.147959 systemd[1]: Started systemd-udevd.service. Jul 12 00:23:17.152091 systemd[1]: Starting dracut-pre-trigger.service... Jul 12 00:23:17.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.184698 dracut-pre-trigger[511]: rd.md=0: removing MD RAID activation Jul 12 00:23:17.247973 systemd[1]: Finished dracut-pre-trigger.service. Jul 12 00:23:17.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.251753 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:23:17.354843 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:23:17.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.498144 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 12 00:23:17.498248 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Jul 12 00:23:17.516115 kernel: ena 0000:00:05.0: ENA device version: 0.10 Jul 12 00:23:17.516452 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Jul 12 00:23:17.516689 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Jul 12 00:23:17.516716 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:09:1c:c8:d5:4d Jul 12 00:23:17.516927 kernel: nvme nvme0: pci function 0000:00:04.0 Jul 12 00:23:17.520434 (udev-worker)[567]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:23:17.529232 kernel: nvme nvme0: 2/0/0 default/read/poll queues Jul 12 00:23:17.538107 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 12 00:23:17.538168 kernel: GPT:9289727 != 16777215 Jul 12 00:23:17.538223 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 12 00:23:17.542484 kernel: GPT:9289727 != 16777215 Jul 12 00:23:17.542543 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 12 00:23:17.546300 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:17.627248 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (564) Jul 12 00:23:17.716660 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:23:17.739892 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 12 00:23:17.777649 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 12 00:23:17.789182 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 12 00:23:17.794679 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 12 00:23:17.797621 systemd[1]: Starting disk-uuid.service... Jul 12 00:23:17.810894 disk-uuid[669]: Primary Header is updated. Jul 12 00:23:17.810894 disk-uuid[669]: Secondary Entries is updated. Jul 12 00:23:17.810894 disk-uuid[669]: Secondary Header is updated. Jul 12 00:23:17.821247 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:17.828231 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:17.837240 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:18.839243 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:18.839646 disk-uuid[670]: The operation has completed successfully. Jul 12 00:23:19.030762 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 12 00:23:19.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.031018 systemd[1]: Finished disk-uuid.service. Jul 12 00:23:19.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.057979 systemd[1]: Starting verity-setup.service... Jul 12 00:23:19.096907 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 12 00:23:19.197421 systemd[1]: Found device dev-mapper-usr.device. Jul 12 00:23:19.204890 systemd[1]: Mounting sysusr-usr.mount... Jul 12 00:23:19.210479 systemd[1]: Finished verity-setup.service. Jul 12 00:23:19.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.307258 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 12 00:23:19.308006 systemd[1]: Mounted sysusr-usr.mount. Jul 12 00:23:19.311136 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 12 00:23:19.313211 systemd[1]: Starting ignition-setup.service... Jul 12 00:23:19.323085 systemd[1]: Starting parse-ip-for-networkd.service... Jul 12 00:23:19.345880 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:23:19.345963 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 12 00:23:19.348637 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 12 00:23:19.381232 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 12 00:23:19.400651 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 12 00:23:19.430250 systemd[1]: Finished ignition-setup.service. Jul 12 00:23:19.437857 systemd[1]: Starting ignition-fetch-offline.service... Jul 12 00:23:19.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.491875 systemd[1]: Finished parse-ip-for-networkd.service. Jul 12 00:23:19.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.496000 audit: BPF prog-id=9 op=LOAD Jul 12 00:23:19.498853 systemd[1]: Starting systemd-networkd.service... Jul 12 00:23:19.553833 systemd-networkd[1182]: lo: Link UP Jul 12 00:23:19.553862 systemd-networkd[1182]: lo: Gained carrier Jul 12 00:23:19.554968 systemd-networkd[1182]: Enumeration completed Jul 12 00:23:19.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.555510 systemd-networkd[1182]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:23:19.557367 systemd[1]: Started systemd-networkd.service. Jul 12 00:23:19.576056 systemd[1]: Reached target network.target. Jul 12 00:23:19.578626 systemd-networkd[1182]: eth0: Link UP Jul 12 00:23:19.578840 systemd-networkd[1182]: eth0: Gained carrier Jul 12 00:23:19.594012 systemd[1]: Starting iscsiuio.service... Jul 12 00:23:19.609087 systemd[1]: Started iscsiuio.service. Jul 12 00:23:19.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.617395 systemd-networkd[1182]: eth0: DHCPv4 address 172.31.27.156/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 12 00:23:19.629308 systemd[1]: Starting iscsid.service... Jul 12 00:23:19.640090 iscsid[1187]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:23:19.640090 iscsid[1187]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 12 00:23:19.640090 iscsid[1187]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 12 00:23:19.640090 iscsid[1187]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 12 00:23:19.640090 iscsid[1187]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:23:19.640090 iscsid[1187]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 12 00:23:19.647579 systemd[1]: Started iscsid.service. Jul 12 00:23:19.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.676321 systemd[1]: Starting dracut-initqueue.service... Jul 12 00:23:19.703182 systemd[1]: Finished dracut-initqueue.service. Jul 12 00:23:19.709282 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 12 00:23:19.709335 kernel: audit: type=1130 audit(1752279799.705:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.707054 systemd[1]: Reached target remote-fs-pre.target. Jul 12 00:23:19.718640 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:23:19.722279 systemd[1]: Reached target remote-fs.target. Jul 12 00:23:19.727763 systemd[1]: Starting dracut-pre-mount.service... Jul 12 00:23:19.750656 systemd[1]: Finished dracut-pre-mount.service. Jul 12 00:23:19.762314 kernel: audit: type=1130 audit(1752279799.751:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:19.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.271161 ignition[1149]: Ignition 2.14.0 Jul 12 00:23:20.272853 ignition[1149]: Stage: fetch-offline Jul 12 00:23:20.273499 ignition[1149]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:20.273611 ignition[1149]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:20.300119 ignition[1149]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:20.303037 ignition[1149]: Ignition finished successfully Jul 12 00:23:20.306138 systemd[1]: Finished ignition-fetch-offline.service. Jul 12 00:23:20.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.320249 systemd[1]: Starting ignition-fetch.service... Jul 12 00:23:20.329221 kernel: audit: type=1130 audit(1752279800.308:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.334304 ignition[1206]: Ignition 2.14.0 Jul 12 00:23:20.334332 ignition[1206]: Stage: fetch Jul 12 00:23:20.334649 ignition[1206]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:20.334710 ignition[1206]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:20.349929 ignition[1206]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:20.352342 ignition[1206]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:20.363107 ignition[1206]: INFO : PUT result: OK Jul 12 00:23:20.366622 ignition[1206]: DEBUG : parsed url from cmdline: "" Jul 12 00:23:20.366622 ignition[1206]: INFO : no config URL provided Jul 12 00:23:20.366622 ignition[1206]: INFO : reading system config file "/usr/lib/ignition/user.ign" Jul 12 00:23:20.373079 ignition[1206]: INFO : no config at "/usr/lib/ignition/user.ign" Jul 12 00:23:20.373079 ignition[1206]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:20.377825 ignition[1206]: INFO : PUT result: OK Jul 12 00:23:20.379442 ignition[1206]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Jul 12 00:23:20.382826 ignition[1206]: INFO : GET result: OK Jul 12 00:23:20.385354 ignition[1206]: DEBUG : parsing config with SHA512: 374ebdeffe2f9659ca6d8c811c1ea473d346983b1b78e4c7784e49bd03ac511a63509fe3160befded35f425defa01b51c69fd48bd7995928952fe6be84bbc39f Jul 12 00:23:20.394150 unknown[1206]: fetched base config from "system" Jul 12 00:23:20.394207 unknown[1206]: fetched base config from "system" Jul 12 00:23:20.394253 unknown[1206]: fetched user config from "aws" Jul 12 00:23:20.401383 ignition[1206]: fetch: fetch complete Jul 12 00:23:20.401410 ignition[1206]: fetch: fetch passed Jul 12 00:23:20.401512 ignition[1206]: Ignition finished successfully Jul 12 00:23:20.408085 systemd[1]: Finished ignition-fetch.service. Jul 12 00:23:20.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.412785 systemd[1]: Starting ignition-kargs.service... Jul 12 00:23:20.428152 kernel: audit: type=1130 audit(1752279800.410:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.435857 ignition[1212]: Ignition 2.14.0 Jul 12 00:23:20.435886 ignition[1212]: Stage: kargs Jul 12 00:23:20.436224 ignition[1212]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:20.436284 ignition[1212]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:20.452300 ignition[1212]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:20.455628 ignition[1212]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:20.459005 ignition[1212]: INFO : PUT result: OK Jul 12 00:23:20.463078 ignition[1212]: kargs: kargs passed Jul 12 00:23:20.463231 ignition[1212]: Ignition finished successfully Jul 12 00:23:20.468443 systemd[1]: Finished ignition-kargs.service. Jul 12 00:23:20.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.471814 systemd[1]: Starting ignition-disks.service... Jul 12 00:23:20.484222 kernel: audit: type=1130 audit(1752279800.469:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.490785 ignition[1218]: Ignition 2.14.0 Jul 12 00:23:20.490813 ignition[1218]: Stage: disks Jul 12 00:23:20.491116 ignition[1218]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:20.491176 ignition[1218]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:20.508843 ignition[1218]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:20.511284 ignition[1218]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:20.518509 ignition[1218]: INFO : PUT result: OK Jul 12 00:23:20.524285 ignition[1218]: disks: disks passed Jul 12 00:23:20.524625 ignition[1218]: Ignition finished successfully Jul 12 00:23:20.528913 systemd[1]: Finished ignition-disks.service. Jul 12 00:23:20.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.532383 systemd[1]: Reached target initrd-root-device.target. Jul 12 00:23:20.543158 kernel: audit: type=1130 audit(1752279800.530:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.541536 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:23:20.545019 systemd[1]: Reached target local-fs.target. Jul 12 00:23:20.548369 systemd[1]: Reached target sysinit.target. Jul 12 00:23:20.551471 systemd[1]: Reached target basic.target. Jul 12 00:23:20.556454 systemd[1]: Starting systemd-fsck-root.service... Jul 12 00:23:20.596455 systemd-fsck[1226]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 12 00:23:20.602914 systemd[1]: Finished systemd-fsck-root.service. Jul 12 00:23:20.616984 kernel: audit: type=1130 audit(1752279800.604:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.607474 systemd[1]: Mounting sysroot.mount... Jul 12 00:23:20.638218 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 12 00:23:20.640806 systemd[1]: Mounted sysroot.mount. Jul 12 00:23:20.645662 systemd[1]: Reached target initrd-root-fs.target. Jul 12 00:23:20.656318 systemd[1]: Mounting sysroot-usr.mount... Jul 12 00:23:20.663735 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 12 00:23:20.663835 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 12 00:23:20.663893 systemd[1]: Reached target ignition-diskful.target. Jul 12 00:23:20.677699 systemd[1]: Mounted sysroot-usr.mount. Jul 12 00:23:20.687314 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 12 00:23:20.695422 systemd[1]: Starting initrd-setup-root.service... Jul 12 00:23:20.714680 initrd-setup-root[1248]: cut: /sysroot/etc/passwd: No such file or directory Jul 12 00:23:20.717490 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1243) Jul 12 00:23:20.725244 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:23:20.725318 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 12 00:23:20.727588 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 12 00:23:20.730601 initrd-setup-root[1260]: cut: /sysroot/etc/group: No such file or directory Jul 12 00:23:20.740628 initrd-setup-root[1280]: cut: /sysroot/etc/shadow: No such file or directory Jul 12 00:23:20.749632 initrd-setup-root[1288]: cut: /sysroot/etc/gshadow: No such file or directory Jul 12 00:23:20.760239 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 12 00:23:20.771705 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 12 00:23:20.964247 systemd[1]: Finished initrd-setup-root.service. Jul 12 00:23:20.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.976240 kernel: audit: type=1130 audit(1752279800.965:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:20.976743 systemd[1]: Starting ignition-mount.service... Jul 12 00:23:20.992750 systemd[1]: Starting sysroot-boot.service... Jul 12 00:23:21.001001 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 12 00:23:21.001377 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 12 00:23:21.025730 ignition[1309]: INFO : Ignition 2.14.0 Jul 12 00:23:21.025730 ignition[1309]: INFO : Stage: mount Jul 12 00:23:21.033776 ignition[1309]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:21.033776 ignition[1309]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:21.054645 ignition[1309]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:21.058604 ignition[1309]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:21.058604 ignition[1309]: INFO : PUT result: OK Jul 12 00:23:21.067769 ignition[1309]: INFO : mount: mount passed Jul 12 00:23:21.069659 ignition[1309]: INFO : Ignition finished successfully Jul 12 00:23:21.072506 systemd[1]: Finished ignition-mount.service. Jul 12 00:23:21.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:21.088240 kernel: audit: type=1130 audit(1752279801.078:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:21.089135 systemd[1]: Starting ignition-files.service... Jul 12 00:23:21.099548 systemd[1]: Finished sysroot-boot.service. Jul 12 00:23:21.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:21.114280 kernel: audit: type=1130 audit(1752279801.104:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:21.115057 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 12 00:23:21.142488 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1319) Jul 12 00:23:21.148101 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:23:21.148174 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 12 00:23:21.148227 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 12 00:23:21.164242 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 12 00:23:21.170225 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 12 00:23:21.191013 ignition[1338]: INFO : Ignition 2.14.0 Jul 12 00:23:21.191013 ignition[1338]: INFO : Stage: files Jul 12 00:23:21.198923 ignition[1338]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:21.198923 ignition[1338]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:21.211953 ignition[1338]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:21.214933 ignition[1338]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:21.218755 ignition[1338]: INFO : PUT result: OK Jul 12 00:23:21.224734 ignition[1338]: DEBUG : files: compiled without relabeling support, skipping Jul 12 00:23:21.230951 ignition[1338]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 12 00:23:21.234179 ignition[1338]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 12 00:23:21.261664 ignition[1338]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 12 00:23:21.265117 ignition[1338]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 12 00:23:21.267811 systemd-networkd[1182]: eth0: Gained IPv6LL Jul 12 00:23:21.271758 unknown[1338]: wrote ssh authorized keys file for user: core Jul 12 00:23:21.274289 ignition[1338]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 12 00:23:21.278638 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 12 00:23:21.282904 ignition[1338]: INFO : GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Jul 12 00:23:21.395495 ignition[1338]: INFO : GET result: OK Jul 12 00:23:21.580901 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 12 00:23:21.580901 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 12 00:23:21.589083 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:21.600909 ignition[1338]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1535404394" Jul 12 00:23:21.604242 ignition[1338]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1535404394": device or resource busy Jul 12 00:23:21.604242 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1535404394", trying btrfs: device or resource busy Jul 12 00:23:21.604242 ignition[1338]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1535404394" Jul 12 00:23:21.604242 ignition[1338]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1535404394" Jul 12 00:23:21.626232 ignition[1338]: INFO : op(3): [started] unmounting "/mnt/oem1535404394" Jul 12 00:23:21.631639 ignition[1338]: INFO : op(3): [finished] unmounting "/mnt/oem1535404394" Jul 12 00:23:21.631639 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 12 00:23:21.631639 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Jul 12 00:23:21.646740 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Jul 12 00:23:21.646740 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:23:21.654480 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 12 00:23:21.654480 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:21.711495 ignition[1338]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1142929723" Jul 12 00:23:21.711495 ignition[1338]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1142929723": device or resource busy Jul 12 00:23:21.711495 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1142929723", trying btrfs: device or resource busy Jul 12 00:23:21.711495 ignition[1338]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1142929723" Jul 12 00:23:21.711495 ignition[1338]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1142929723" Jul 12 00:23:21.711495 ignition[1338]: INFO : op(6): [started] unmounting "/mnt/oem1142929723" Jul 12 00:23:21.732079 ignition[1338]: INFO : op(6): [finished] unmounting "/mnt/oem1142929723" Jul 12 00:23:21.732079 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 12 00:23:21.732079 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 12 00:23:21.732079 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:21.751940 systemd[1]: mnt-oem1142929723.mount: Deactivated successfully. Jul 12 00:23:21.768223 ignition[1338]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem837454889" Jul 12 00:23:21.772260 ignition[1338]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem837454889": device or resource busy Jul 12 00:23:21.772260 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem837454889", trying btrfs: device or resource busy Jul 12 00:23:21.772260 ignition[1338]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem837454889" Jul 12 00:23:21.772260 ignition[1338]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem837454889" Jul 12 00:23:21.772260 ignition[1338]: INFO : op(9): [started] unmounting "/mnt/oem837454889" Jul 12 00:23:21.772260 ignition[1338]: INFO : op(9): [finished] unmounting "/mnt/oem837454889" Jul 12 00:23:21.772260 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 12 00:23:21.795587 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 12 00:23:21.795587 ignition[1338]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:21.815794 systemd[1]: mnt-oem837454889.mount: Deactivated successfully. Jul 12 00:23:21.842614 ignition[1338]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307572034" Jul 12 00:23:21.845967 ignition[1338]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307572034": device or resource busy Jul 12 00:23:21.849644 ignition[1338]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2307572034", trying btrfs: device or resource busy Jul 12 00:23:21.849644 ignition[1338]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307572034" Jul 12 00:23:21.856879 ignition[1338]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2307572034" Jul 12 00:23:21.856879 ignition[1338]: INFO : op(c): [started] unmounting "/mnt/oem2307572034" Jul 12 00:23:21.856879 ignition[1338]: INFO : op(c): [finished] unmounting "/mnt/oem2307572034" Jul 12 00:23:21.856879 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 12 00:23:21.856879 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:23:21.856879 ignition[1338]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Jul 12 00:23:22.584731 ignition[1338]: INFO : GET result: OK Jul 12 00:23:23.113598 ignition[1338]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(12): [started] processing unit "nvidia.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(12): [finished] processing unit "nvidia.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(15): [started] setting preset to enabled for "nvidia.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(15): [finished] setting preset to enabled for "nvidia.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(17): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(17): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" Jul 12 00:23:23.118307 ignition[1338]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" Jul 12 00:23:23.183099 ignition[1338]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:23:23.187262 ignition[1338]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:23:23.187262 ignition[1338]: INFO : files: files passed Jul 12 00:23:23.187262 ignition[1338]: INFO : Ignition finished successfully Jul 12 00:23:23.196741 systemd[1]: Finished ignition-files.service. Jul 12 00:23:23.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.209222 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 12 00:23:23.211315 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 12 00:23:23.219493 systemd[1]: Starting ignition-quench.service... Jul 12 00:23:23.227317 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 12 00:23:23.229645 systemd[1]: Finished ignition-quench.service. Jul 12 00:23:23.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.238307 initrd-setup-root-after-ignition[1363]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 12 00:23:23.243091 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 12 00:23:23.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.247637 systemd[1]: Reached target ignition-complete.target. Jul 12 00:23:23.252742 systemd[1]: Starting initrd-parse-etc.service... Jul 12 00:23:23.281652 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 12 00:23:23.284014 systemd[1]: Finished initrd-parse-etc.service. Jul 12 00:23:23.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.287716 systemd[1]: Reached target initrd-fs.target. Jul 12 00:23:23.290864 systemd[1]: Reached target initrd.target. Jul 12 00:23:23.294025 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 12 00:23:23.298221 systemd[1]: Starting dracut-pre-pivot.service... Jul 12 00:23:23.322347 systemd[1]: Finished dracut-pre-pivot.service. Jul 12 00:23:23.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.327153 systemd[1]: Starting initrd-cleanup.service... Jul 12 00:23:23.351783 systemd[1]: Stopped target nss-lookup.target. Jul 12 00:23:23.355507 systemd[1]: Stopped target remote-cryptsetup.target. Jul 12 00:23:23.359455 systemd[1]: Stopped target timers.target. Jul 12 00:23:23.362830 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 12 00:23:23.363498 systemd[1]: Stopped dracut-pre-pivot.service. Jul 12 00:23:23.368751 systemd[1]: Stopped target initrd.target. Jul 12 00:23:23.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.371934 systemd[1]: Stopped target basic.target. Jul 12 00:23:23.375125 systemd[1]: Stopped target ignition-complete.target. Jul 12 00:23:23.378954 systemd[1]: Stopped target ignition-diskful.target. Jul 12 00:23:23.382548 systemd[1]: Stopped target initrd-root-device.target. Jul 12 00:23:23.386274 systemd[1]: Stopped target remote-fs.target. Jul 12 00:23:23.392129 systemd[1]: Stopped target remote-fs-pre.target. Jul 12 00:23:23.395704 systemd[1]: Stopped target sysinit.target. Jul 12 00:23:23.399034 systemd[1]: Stopped target local-fs.target. Jul 12 00:23:23.402406 systemd[1]: Stopped target local-fs-pre.target. Jul 12 00:23:23.405844 systemd[1]: Stopped target swap.target. Jul 12 00:23:23.408967 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 12 00:23:23.411255 systemd[1]: Stopped dracut-pre-mount.service. Jul 12 00:23:23.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.414783 systemd[1]: Stopped target cryptsetup.target. Jul 12 00:23:23.418132 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 12 00:23:23.420277 systemd[1]: Stopped dracut-initqueue.service. Jul 12 00:23:23.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.423853 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 12 00:23:23.426378 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 12 00:23:23.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.430621 systemd[1]: ignition-files.service: Deactivated successfully. Jul 12 00:23:23.430844 systemd[1]: Stopped ignition-files.service. Jul 12 00:23:23.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.437583 systemd[1]: Stopping ignition-mount.service... Jul 12 00:23:23.451206 iscsid[1187]: iscsid shutting down. Jul 12 00:23:23.444639 systemd[1]: Stopping iscsid.service... Jul 12 00:23:23.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.464961 ignition[1376]: INFO : Ignition 2.14.0 Jul 12 00:23:23.464961 ignition[1376]: INFO : Stage: umount Jul 12 00:23:23.464961 ignition[1376]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:23.464961 ignition[1376]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:23.460887 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 12 00:23:23.461235 systemd[1]: Stopped kmod-static-nodes.service. Jul 12 00:23:23.476277 systemd[1]: Stopping sysroot-boot.service... Jul 12 00:23:23.492133 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 12 00:23:23.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.492473 systemd[1]: Stopped systemd-udev-trigger.service. Jul 12 00:23:23.494830 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 12 00:23:23.495049 systemd[1]: Stopped dracut-pre-trigger.service. Jul 12 00:23:23.513820 systemd[1]: iscsid.service: Deactivated successfully. Jul 12 00:23:23.516074 systemd[1]: Stopped iscsid.service. Jul 12 00:23:23.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.523068 ignition[1376]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:23.525868 ignition[1376]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:23.533486 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 12 00:23:23.537522 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 12 00:23:23.539922 systemd[1]: Finished initrd-cleanup.service. Jul 12 00:23:23.543859 ignition[1376]: INFO : PUT result: OK Jul 12 00:23:23.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.545883 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 12 00:23:23.546067 systemd[1]: Stopped sysroot-boot.service. Jul 12 00:23:23.549529 systemd[1]: Stopping iscsiuio.service... Jul 12 00:23:23.563633 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 12 00:23:23.564656 systemd[1]: Stopped iscsiuio.service. Jul 12 00:23:23.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.569438 ignition[1376]: INFO : umount: umount passed Jul 12 00:23:23.571311 ignition[1376]: INFO : Ignition finished successfully Jul 12 00:23:23.574667 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 12 00:23:23.575029 systemd[1]: Stopped ignition-mount.service. Jul 12 00:23:23.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.580698 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 12 00:23:23.580910 systemd[1]: Stopped ignition-disks.service. Jul 12 00:23:23.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.586838 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 12 00:23:23.587041 systemd[1]: Stopped ignition-kargs.service. Jul 12 00:23:23.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.592413 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 12 00:23:23.592611 systemd[1]: Stopped ignition-fetch.service. Jul 12 00:23:23.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.598220 systemd[1]: Stopped target network.target. Jul 12 00:23:23.601574 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 12 00:23:23.601775 systemd[1]: Stopped ignition-fetch-offline.service. Jul 12 00:23:23.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.607737 systemd[1]: Stopped target paths.target. Jul 12 00:23:23.610868 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 12 00:23:23.613261 systemd[1]: Stopped systemd-ask-password-console.path. Jul 12 00:23:23.616967 systemd[1]: Stopped target slices.target. Jul 12 00:23:23.618630 systemd[1]: Stopped target sockets.target. Jul 12 00:23:23.621717 systemd[1]: iscsid.socket: Deactivated successfully. Jul 12 00:23:23.623222 systemd[1]: Closed iscsid.socket. Jul 12 00:23:23.626452 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 12 00:23:23.626532 systemd[1]: Closed iscsiuio.socket. Jul 12 00:23:23.629302 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 12 00:23:23.631090 systemd[1]: Stopped ignition-setup.service. Jul 12 00:23:23.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.637151 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 12 00:23:23.637261 systemd[1]: Stopped initrd-setup-root.service. Jul 12 00:23:23.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.642694 systemd[1]: Stopping systemd-networkd.service... Jul 12 00:23:23.646069 systemd[1]: Stopping systemd-resolved.service... Jul 12 00:23:23.648488 systemd-networkd[1182]: eth0: DHCPv6 lease lost Jul 12 00:23:23.652495 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 12 00:23:23.656482 systemd[1]: Stopped systemd-networkd.service. Jul 12 00:23:23.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.659000 audit: BPF prog-id=9 op=UNLOAD Jul 12 00:23:23.660627 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 12 00:23:23.663036 systemd[1]: Stopped systemd-resolved.service. Jul 12 00:23:23.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.665000 audit: BPF prog-id=6 op=UNLOAD Jul 12 00:23:23.666978 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 12 00:23:23.667062 systemd[1]: Closed systemd-networkd.socket. Jul 12 00:23:23.673389 systemd[1]: Stopping network-cleanup.service... Jul 12 00:23:23.676413 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 12 00:23:23.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.676531 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 12 00:23:23.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.681650 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 12 00:23:23.681746 systemd[1]: Stopped systemd-sysctl.service. Jul 12 00:23:23.686384 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 12 00:23:23.686468 systemd[1]: Stopped systemd-modules-load.service. Jul 12 00:23:23.696804 systemd[1]: Stopping systemd-udevd.service... Jul 12 00:23:23.710697 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 12 00:23:23.720315 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 12 00:23:23.720794 systemd[1]: Stopped systemd-udevd.service. Jul 12 00:23:23.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.726862 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 12 00:23:23.727225 systemd[1]: Stopped network-cleanup.service. Jul 12 00:23:23.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.732709 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 12 00:23:23.732923 systemd[1]: Closed systemd-udevd-control.socket. Jul 12 00:23:23.738885 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 12 00:23:23.739073 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 12 00:23:23.744483 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 12 00:23:23.744675 systemd[1]: Stopped dracut-pre-udev.service. Jul 12 00:23:23.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.750321 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 12 00:23:23.750410 systemd[1]: Stopped dracut-cmdline.service. Jul 12 00:23:23.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.755450 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 12 00:23:23.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.755555 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 12 00:23:23.762511 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 12 00:23:23.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:23.775310 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 12 00:23:23.775440 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 12 00:23:23.781024 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 12 00:23:23.781246 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 12 00:23:23.781799 systemd[1]: Reached target initrd-switch-root.target. Jul 12 00:23:23.783173 systemd[1]: Starting initrd-switch-root.service... Jul 12 00:23:23.809306 systemd[1]: Switching root. Jul 12 00:23:23.838516 systemd-journald[310]: Journal stopped Jul 12 00:23:28.854584 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Jul 12 00:23:28.854696 kernel: SELinux: Class mctp_socket not defined in policy. Jul 12 00:23:28.859956 kernel: SELinux: Class anon_inode not defined in policy. Jul 12 00:23:28.860013 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 12 00:23:28.860045 kernel: SELinux: policy capability network_peer_controls=1 Jul 12 00:23:28.860076 kernel: SELinux: policy capability open_perms=1 Jul 12 00:23:28.860108 kernel: SELinux: policy capability extended_socket_class=1 Jul 12 00:23:28.860145 kernel: SELinux: policy capability always_check_network=0 Jul 12 00:23:28.860173 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 12 00:23:28.860413 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 12 00:23:28.860444 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 12 00:23:28.860477 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 12 00:23:28.860509 systemd[1]: Successfully loaded SELinux policy in 93.835ms. Jul 12 00:23:28.860563 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.998ms. Jul 12 00:23:28.860600 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:23:28.860636 systemd[1]: Detected virtualization amazon. Jul 12 00:23:28.860667 systemd[1]: Detected architecture arm64. Jul 12 00:23:28.860698 systemd[1]: Detected first boot. Jul 12 00:23:28.860730 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:23:28.860762 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 12 00:23:28.860794 kernel: kauditd_printk_skb: 49 callbacks suppressed Jul 12 00:23:28.860831 kernel: audit: type=1400 audit(1752279804.727:83): avc: denied { associate } for pid=1409 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 12 00:23:28.860866 kernel: audit: type=1300 audit(1752279804.727:83): arch=c00000b7 syscall=5 success=yes exit=0 a0=40001158cc a1=4000028e40 a2=4000027100 a3=32 items=0 ppid=1392 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:28.860899 kernel: audit: type=1327 audit(1752279804.727:83): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:23:28.860929 kernel: audit: type=1400 audit(1752279804.733:84): avc: denied { associate } for pid=1409 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 12 00:23:28.860963 kernel: audit: type=1300 audit(1752279804.733:84): arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001159a5 a2=1ed a3=0 items=2 ppid=1392 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:28.860996 kernel: audit: type=1307 audit(1752279804.733:84): cwd="/" Jul 12 00:23:28.861027 kernel: audit: type=1302 audit(1752279804.733:84): item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:23:28.861062 kernel: audit: type=1302 audit(1752279804.733:84): item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:23:28.861094 kernel: audit: type=1327 audit(1752279804.733:84): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:23:28.861123 systemd[1]: Populated /etc with preset unit settings. Jul 12 00:23:28.861154 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:23:28.861186 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:23:28.861242 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:23:28.861273 kernel: audit: type=1334 audit(1752279808.413:85): prog-id=12 op=LOAD Jul 12 00:23:28.861306 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 12 00:23:28.861338 systemd[1]: Stopped initrd-switch-root.service. Jul 12 00:23:28.861367 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 12 00:23:28.861397 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 12 00:23:28.861426 systemd[1]: Created slice system-addon\x2drun.slice. Jul 12 00:23:28.861456 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 12 00:23:28.861484 systemd[1]: Created slice system-getty.slice. Jul 12 00:23:28.861516 systemd[1]: Created slice system-modprobe.slice. Jul 12 00:23:28.861553 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 12 00:23:28.861584 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 12 00:23:28.861613 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 12 00:23:28.861643 systemd[1]: Created slice user.slice. Jul 12 00:23:28.861676 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:23:28.861707 systemd[1]: Started systemd-ask-password-wall.path. Jul 12 00:23:28.861738 systemd[1]: Set up automount boot.automount. Jul 12 00:23:28.861769 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 12 00:23:28.861798 systemd[1]: Stopped target initrd-switch-root.target. Jul 12 00:23:28.861832 systemd[1]: Stopped target initrd-fs.target. Jul 12 00:23:28.861862 systemd[1]: Stopped target initrd-root-fs.target. Jul 12 00:23:28.861893 systemd[1]: Reached target integritysetup.target. Jul 12 00:23:28.861924 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:23:28.861952 systemd[1]: Reached target remote-fs.target. Jul 12 00:23:28.861984 systemd[1]: Reached target slices.target. Jul 12 00:23:28.862016 systemd[1]: Reached target swap.target. Jul 12 00:23:28.862045 systemd[1]: Reached target torcx.target. Jul 12 00:23:28.862076 systemd[1]: Reached target veritysetup.target. Jul 12 00:23:28.862110 systemd[1]: Listening on systemd-coredump.socket. Jul 12 00:23:28.862139 systemd[1]: Listening on systemd-initctl.socket. Jul 12 00:23:28.862172 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:23:28.862220 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:23:28.862253 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:23:28.862285 systemd[1]: Listening on systemd-userdbd.socket. Jul 12 00:23:28.863300 systemd[1]: Mounting dev-hugepages.mount... Jul 12 00:23:28.863355 systemd[1]: Mounting dev-mqueue.mount... Jul 12 00:23:28.863388 systemd[1]: Mounting media.mount... Jul 12 00:23:28.863426 systemd[1]: Mounting sys-kernel-debug.mount... Jul 12 00:23:28.863457 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 12 00:23:28.863489 systemd[1]: Mounting tmp.mount... Jul 12 00:23:28.863520 systemd[1]: Starting flatcar-tmpfiles.service... Jul 12 00:23:28.863551 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:28.863580 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:23:28.868570 systemd[1]: Starting modprobe@configfs.service... Jul 12 00:23:28.868617 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:28.868649 systemd[1]: Starting modprobe@drm.service... Jul 12 00:23:28.868678 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:28.868715 systemd[1]: Starting modprobe@fuse.service... Jul 12 00:23:28.868748 systemd[1]: Starting modprobe@loop.service... Jul 12 00:23:28.868781 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 12 00:23:28.868810 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 12 00:23:28.868843 systemd[1]: Stopped systemd-fsck-root.service. Jul 12 00:23:28.868874 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 12 00:23:28.868903 systemd[1]: Stopped systemd-fsck-usr.service. Jul 12 00:23:28.868932 systemd[1]: Stopped systemd-journald.service. Jul 12 00:23:28.868964 kernel: fuse: init (API version 7.34) Jul 12 00:23:28.868996 systemd[1]: Starting systemd-journald.service... Jul 12 00:23:28.869025 kernel: loop: module loaded Jul 12 00:23:28.869054 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:23:28.869083 systemd[1]: Starting systemd-network-generator.service... Jul 12 00:23:28.869111 systemd[1]: Starting systemd-remount-fs.service... Jul 12 00:23:28.869140 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:23:28.869171 systemd[1]: verity-setup.service: Deactivated successfully. Jul 12 00:23:28.869240 systemd[1]: Stopped verity-setup.service. Jul 12 00:23:28.869273 systemd[1]: Mounted dev-hugepages.mount. Jul 12 00:23:28.869308 systemd[1]: Mounted dev-mqueue.mount. Jul 12 00:23:28.869337 systemd[1]: Mounted media.mount. Jul 12 00:23:28.869366 systemd[1]: Mounted sys-kernel-debug.mount. Jul 12 00:23:28.869407 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 12 00:23:28.869436 systemd[1]: Mounted tmp.mount. Jul 12 00:23:28.869465 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:23:28.869494 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 12 00:23:28.869533 systemd[1]: Finished modprobe@configfs.service. Jul 12 00:23:28.869562 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:28.869597 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:28.869626 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:23:28.869658 systemd[1]: Finished modprobe@drm.service. Jul 12 00:23:28.869688 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:28.869720 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:28.869754 systemd[1]: Finished flatcar-tmpfiles.service. Jul 12 00:23:28.869783 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 12 00:23:28.869814 systemd[1]: Finished modprobe@fuse.service. Jul 12 00:23:28.869845 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:23:28.869876 systemd[1]: Finished modprobe@loop.service. Jul 12 00:23:28.869909 systemd-journald[1504]: Journal started Jul 12 00:23:28.870003 systemd-journald[1504]: Runtime Journal (/run/log/journal/ec2ddd9688a0afc059ff1e0d04334977) is 8.0M, max 75.4M, 67.4M free. Jul 12 00:23:24.448000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 12 00:23:24.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:23:24.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:23:24.572000 audit: BPF prog-id=10 op=LOAD Jul 12 00:23:24.572000 audit: BPF prog-id=10 op=UNLOAD Jul 12 00:23:24.572000 audit: BPF prog-id=11 op=LOAD Jul 12 00:23:24.572000 audit: BPF prog-id=11 op=UNLOAD Jul 12 00:23:24.727000 audit[1409]: AVC avc: denied { associate } for pid=1409 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 12 00:23:24.727000 audit[1409]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001158cc a1=4000028e40 a2=4000027100 a3=32 items=0 ppid=1392 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:24.727000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:23:24.733000 audit[1409]: AVC avc: denied { associate } for pid=1409 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 12 00:23:24.733000 audit[1409]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001159a5 a2=1ed a3=0 items=2 ppid=1392 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:24.733000 audit: CWD cwd="/" Jul 12 00:23:24.733000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:23:24.733000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:23:24.733000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:23:28.413000 audit: BPF prog-id=12 op=LOAD Jul 12 00:23:28.414000 audit: BPF prog-id=3 op=UNLOAD Jul 12 00:23:28.416000 audit: BPF prog-id=13 op=LOAD Jul 12 00:23:28.416000 audit: BPF prog-id=14 op=LOAD Jul 12 00:23:28.416000 audit: BPF prog-id=4 op=UNLOAD Jul 12 00:23:28.416000 audit: BPF prog-id=5 op=UNLOAD Jul 12 00:23:28.416000 audit: BPF prog-id=15 op=LOAD Jul 12 00:23:28.416000 audit: BPF prog-id=12 op=UNLOAD Jul 12 00:23:28.417000 audit: BPF prog-id=16 op=LOAD Jul 12 00:23:28.417000 audit: BPF prog-id=17 op=LOAD Jul 12 00:23:28.417000 audit: BPF prog-id=13 op=UNLOAD Jul 12 00:23:28.417000 audit: BPF prog-id=14 op=UNLOAD Jul 12 00:23:28.418000 audit: BPF prog-id=18 op=LOAD Jul 12 00:23:28.418000 audit: BPF prog-id=15 op=UNLOAD Jul 12 00:23:28.877373 systemd[1]: Started systemd-journald.service. Jul 12 00:23:28.418000 audit: BPF prog-id=19 op=LOAD Jul 12 00:23:28.418000 audit: BPF prog-id=20 op=LOAD Jul 12 00:23:28.418000 audit: BPF prog-id=16 op=UNLOAD Jul 12 00:23:28.418000 audit: BPF prog-id=17 op=UNLOAD Jul 12 00:23:28.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.426000 audit: BPF prog-id=18 op=UNLOAD Jul 12 00:23:28.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.719000 audit: BPF prog-id=21 op=LOAD Jul 12 00:23:28.721000 audit: BPF prog-id=22 op=LOAD Jul 12 00:23:28.722000 audit: BPF prog-id=23 op=LOAD Jul 12 00:23:28.722000 audit: BPF prog-id=19 op=UNLOAD Jul 12 00:23:28.722000 audit: BPF prog-id=20 op=UNLOAD Jul 12 00:23:28.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.851000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 12 00:23:28.851000 audit[1504]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff95b4540 a2=4000 a3=1 items=0 ppid=1 pid=1504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:28.851000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 12 00:23:28.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:24.714777 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:23:28.410003 systemd[1]: Queued start job for default target multi-user.target. Jul 12 00:23:24.715993 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:23:28.410024 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Jul 12 00:23:24.716046 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:23:28.420876 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 12 00:23:24.716115 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 12 00:23:28.878007 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:23:28.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:24.716141 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 12 00:23:24.716258 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 12 00:23:24.716291 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 12 00:23:28.883337 systemd[1]: Finished systemd-network-generator.service. Jul 12 00:23:24.716710 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 12 00:23:24.716805 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:23:28.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:24.716843 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:23:24.720292 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 12 00:23:24.720377 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 12 00:23:24.720428 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 12 00:23:24.720469 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 12 00:23:28.886774 systemd[1]: Finished systemd-remount-fs.service. Jul 12 00:23:24.720521 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 12 00:23:24.720560 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:24Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 12 00:23:27.629342 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:27Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:27.629854 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:27Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:28.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:27.630082 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:27Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:27.630543 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:27Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:27.630645 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:27Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 12 00:23:27.630778 /usr/lib/systemd/system-generators/torcx-generator[1409]: time="2025-07-12T00:23:27Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 12 00:23:28.891410 systemd[1]: Reached target network-pre.target. Jul 12 00:23:28.895605 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 12 00:23:28.904821 systemd[1]: Mounting sys-kernel-config.mount... Jul 12 00:23:28.906583 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 12 00:23:28.914391 systemd[1]: Starting systemd-hwdb-update.service... Jul 12 00:23:28.923645 systemd[1]: Starting systemd-journal-flush.service... Jul 12 00:23:28.925574 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:28.927814 systemd[1]: Starting systemd-random-seed.service... Jul 12 00:23:28.929726 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:23:28.932128 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:23:28.936469 systemd[1]: Starting systemd-sysusers.service... Jul 12 00:23:28.945136 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 12 00:23:28.949555 systemd[1]: Mounted sys-kernel-config.mount. Jul 12 00:23:28.966457 systemd-journald[1504]: Time spent on flushing to /var/log/journal/ec2ddd9688a0afc059ff1e0d04334977 is 59.042ms for 1141 entries. Jul 12 00:23:28.966457 systemd-journald[1504]: System Journal (/var/log/journal/ec2ddd9688a0afc059ff1e0d04334977) is 8.0M, max 195.6M, 187.6M free. Jul 12 00:23:29.052608 systemd-journald[1504]: Received client request to flush runtime journal. Jul 12 00:23:28.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:28.977123 systemd[1]: Finished systemd-random-seed.service. Jul 12 00:23:28.979393 systemd[1]: Reached target first-boot-complete.target. Jul 12 00:23:29.005674 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:23:29.026756 systemd[1]: Finished systemd-sysusers.service. Jul 12 00:23:29.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.054530 systemd[1]: Finished systemd-journal-flush.service. Jul 12 00:23:29.074314 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:23:29.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.078588 systemd[1]: Starting systemd-udev-settle.service... Jul 12 00:23:29.094625 udevadm[1528]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 12 00:23:29.757056 systemd[1]: Finished systemd-hwdb-update.service. Jul 12 00:23:29.771426 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 12 00:23:29.771582 kernel: audit: type=1130 audit(1752279809.760:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.762000 audit: BPF prog-id=24 op=LOAD Jul 12 00:23:29.774406 kernel: audit: type=1334 audit(1752279809.762:142): prog-id=24 op=LOAD Jul 12 00:23:29.773160 systemd[1]: Starting systemd-udevd.service... Jul 12 00:23:29.770000 audit: BPF prog-id=25 op=LOAD Jul 12 00:23:29.779553 kernel: audit: type=1334 audit(1752279809.770:143): prog-id=25 op=LOAD Jul 12 00:23:29.770000 audit: BPF prog-id=7 op=UNLOAD Jul 12 00:23:29.782405 kernel: audit: type=1334 audit(1752279809.770:144): prog-id=7 op=UNLOAD Jul 12 00:23:29.770000 audit: BPF prog-id=8 op=UNLOAD Jul 12 00:23:29.785206 kernel: audit: type=1334 audit(1752279809.770:145): prog-id=8 op=UNLOAD Jul 12 00:23:29.816923 systemd-udevd[1529]: Using default interface naming scheme 'v252'. Jul 12 00:23:29.863655 systemd[1]: Started systemd-udevd.service. Jul 12 00:23:29.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.868705 systemd[1]: Starting systemd-networkd.service... Jul 12 00:23:29.893376 kernel: audit: type=1130 audit(1752279809.864:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:29.893475 kernel: audit: type=1334 audit(1752279809.866:147): prog-id=26 op=LOAD Jul 12 00:23:29.866000 audit: BPF prog-id=26 op=LOAD Jul 12 00:23:29.888453 systemd[1]: Starting systemd-userdbd.service... Jul 12 00:23:29.898292 kernel: audit: type=1334 audit(1752279809.885:148): prog-id=27 op=LOAD Jul 12 00:23:29.885000 audit: BPF prog-id=27 op=LOAD Jul 12 00:23:29.901868 kernel: audit: type=1334 audit(1752279809.885:149): prog-id=28 op=LOAD Jul 12 00:23:29.885000 audit: BPF prog-id=28 op=LOAD Jul 12 00:23:29.905607 kernel: audit: type=1334 audit(1752279809.885:150): prog-id=29 op=LOAD Jul 12 00:23:29.885000 audit: BPF prog-id=29 op=LOAD Jul 12 00:23:29.962715 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 12 00:23:30.004438 systemd[1]: Started systemd-userdbd.service. Jul 12 00:23:30.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.057099 (udev-worker)[1542]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:23:30.163453 systemd-networkd[1535]: lo: Link UP Jul 12 00:23:30.163970 systemd-networkd[1535]: lo: Gained carrier Jul 12 00:23:30.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.165000 systemd-networkd[1535]: Enumeration completed Jul 12 00:23:30.165166 systemd[1]: Started systemd-networkd.service. Jul 12 00:23:30.169563 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 12 00:23:30.174156 systemd-networkd[1535]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:23:30.182245 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:23:30.182610 systemd-networkd[1535]: eth0: Link UP Jul 12 00:23:30.183169 systemd-networkd[1535]: eth0: Gained carrier Jul 12 00:23:30.197534 systemd-networkd[1535]: eth0: DHCPv4 address 172.31.27.156/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 12 00:23:30.372111 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:23:30.374995 systemd[1]: Finished systemd-udev-settle.service. Jul 12 00:23:30.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.379301 systemd[1]: Starting lvm2-activation-early.service... Jul 12 00:23:30.462486 lvm[1648]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:23:30.501901 systemd[1]: Finished lvm2-activation-early.service. Jul 12 00:23:30.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.504167 systemd[1]: Reached target cryptsetup.target. Jul 12 00:23:30.508621 systemd[1]: Starting lvm2-activation.service... Jul 12 00:23:30.517796 lvm[1649]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:23:30.553926 systemd[1]: Finished lvm2-activation.service. Jul 12 00:23:30.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.556128 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:23:30.558185 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 12 00:23:30.558264 systemd[1]: Reached target local-fs.target. Jul 12 00:23:30.560399 systemd[1]: Reached target machines.target. Jul 12 00:23:30.564646 systemd[1]: Starting ldconfig.service... Jul 12 00:23:30.567662 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:30.567970 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:30.570355 systemd[1]: Starting systemd-boot-update.service... Jul 12 00:23:30.578135 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 12 00:23:30.583042 systemd[1]: Starting systemd-machine-id-commit.service... Jul 12 00:23:30.588212 systemd[1]: Starting systemd-sysext.service... Jul 12 00:23:30.594118 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1651 (bootctl) Jul 12 00:23:30.596988 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 12 00:23:30.624851 systemd[1]: Unmounting usr-share-oem.mount... Jul 12 00:23:30.629486 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 12 00:23:30.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.649586 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 12 00:23:30.650002 systemd[1]: Unmounted usr-share-oem.mount. Jul 12 00:23:30.671249 kernel: loop0: detected capacity change from 0 to 207008 Jul 12 00:23:30.749072 systemd-fsck[1661]: fsck.fat 4.2 (2021-01-31) Jul 12 00:23:30.749072 systemd-fsck[1661]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Jul 12 00:23:30.753629 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 12 00:23:30.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.759073 systemd[1]: Mounting boot.mount... Jul 12 00:23:30.794695 systemd[1]: Mounted boot.mount. Jul 12 00:23:30.810562 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 12 00:23:30.845833 kernel: loop1: detected capacity change from 0 to 207008 Jul 12 00:23:30.849633 systemd[1]: Finished systemd-boot-update.service. Jul 12 00:23:30.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.881956 (sd-sysext)[1676]: Using extensions 'kubernetes'. Jul 12 00:23:30.883104 (sd-sysext)[1676]: Merged extensions into '/usr'. Jul 12 00:23:30.930940 systemd[1]: Mounting usr-share-oem.mount... Jul 12 00:23:30.936892 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:30.939894 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:30.944824 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:30.950923 systemd[1]: Starting modprobe@loop.service... Jul 12 00:23:30.954027 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:30.954332 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:30.964290 systemd[1]: Mounted usr-share-oem.mount. Jul 12 00:23:30.967297 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:30.967776 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:30.971596 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:30.972159 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:30.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.977722 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:23:30.978510 systemd[1]: Finished modprobe@loop.service. Jul 12 00:23:30.983721 systemd[1]: Finished systemd-sysext.service. Jul 12 00:23:30.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.991558 systemd[1]: Starting ensure-sysext.service... Jul 12 00:23:30.994036 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:30.994256 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:23:30.998521 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 12 00:23:31.004440 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 12 00:23:31.007131 systemd[1]: Finished systemd-machine-id-commit.service. Jul 12 00:23:31.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.016143 systemd[1]: Reloading. Jul 12 00:23:31.045987 systemd-tmpfiles[1684]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 12 00:23:31.054103 systemd-tmpfiles[1684]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 12 00:23:31.066438 systemd-tmpfiles[1684]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 12 00:23:31.195218 /usr/lib/systemd/system-generators/torcx-generator[1706]: time="2025-07-12T00:23:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:23:31.195279 /usr/lib/systemd/system-generators/torcx-generator[1706]: time="2025-07-12T00:23:31Z" level=info msg="torcx already run" Jul 12 00:23:31.442571 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:23:31.442614 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:23:31.469958 ldconfig[1650]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 12 00:23:31.486351 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:23:31.571359 systemd-networkd[1535]: eth0: Gained IPv6LL Jul 12 00:23:31.629000 audit: BPF prog-id=30 op=LOAD Jul 12 00:23:31.629000 audit: BPF prog-id=31 op=LOAD Jul 12 00:23:31.629000 audit: BPF prog-id=24 op=UNLOAD Jul 12 00:23:31.629000 audit: BPF prog-id=25 op=UNLOAD Jul 12 00:23:31.632000 audit: BPF prog-id=32 op=LOAD Jul 12 00:23:31.632000 audit: BPF prog-id=26 op=UNLOAD Jul 12 00:23:31.636000 audit: BPF prog-id=33 op=LOAD Jul 12 00:23:31.636000 audit: BPF prog-id=21 op=UNLOAD Jul 12 00:23:31.636000 audit: BPF prog-id=34 op=LOAD Jul 12 00:23:31.636000 audit: BPF prog-id=35 op=LOAD Jul 12 00:23:31.636000 audit: BPF prog-id=22 op=UNLOAD Jul 12 00:23:31.636000 audit: BPF prog-id=23 op=UNLOAD Jul 12 00:23:31.637000 audit: BPF prog-id=36 op=LOAD Jul 12 00:23:31.637000 audit: BPF prog-id=27 op=UNLOAD Jul 12 00:23:31.637000 audit: BPF prog-id=37 op=LOAD Jul 12 00:23:31.637000 audit: BPF prog-id=38 op=LOAD Jul 12 00:23:31.637000 audit: BPF prog-id=28 op=UNLOAD Jul 12 00:23:31.638000 audit: BPF prog-id=29 op=UNLOAD Jul 12 00:23:31.644726 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 12 00:23:31.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.650239 systemd[1]: Finished ldconfig.service. Jul 12 00:23:31.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.654157 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 12 00:23:31.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.666781 systemd[1]: Starting audit-rules.service... Jul 12 00:23:31.671109 systemd[1]: Starting clean-ca-certificates.service... Jul 12 00:23:31.678033 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 12 00:23:31.683000 audit: BPF prog-id=39 op=LOAD Jul 12 00:23:31.688000 audit: BPF prog-id=40 op=LOAD Jul 12 00:23:31.686732 systemd[1]: Starting systemd-resolved.service... Jul 12 00:23:31.692923 systemd[1]: Starting systemd-timesyncd.service... Jul 12 00:23:31.699511 systemd[1]: Starting systemd-update-utmp.service... Jul 12 00:23:31.716418 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.719061 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:31.724840 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:31.733000 audit[1765]: SYSTEM_BOOT pid=1765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.730105 systemd[1]: Starting modprobe@loop.service... Jul 12 00:23:31.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.731920 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.733130 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:31.735914 systemd[1]: Finished clean-ca-certificates.service. Jul 12 00:23:31.738981 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:31.739313 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:31.750623 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.755611 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:31.757506 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.757854 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:31.758148 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:23:31.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.761809 systemd[1]: Finished systemd-update-utmp.service. Jul 12 00:23:31.764874 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:31.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.767360 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:31.779933 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.784123 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:31.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.789142 systemd[1]: Starting modprobe@drm.service... Jul 12 00:23:31.792221 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.792624 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:31.792972 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:23:31.797112 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:23:31.797468 systemd[1]: Finished modprobe@loop.service. Jul 12 00:23:31.803783 systemd[1]: Finished ensure-sysext.service. Jul 12 00:23:31.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.809752 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:31.810049 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:31.812502 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:23:31.819959 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:31.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.820372 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:31.823136 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:23:31.823464 systemd[1]: Finished modprobe@drm.service. Jul 12 00:23:31.825762 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:31.860865 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 12 00:23:31.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.865603 systemd[1]: Starting systemd-update-done.service... Jul 12 00:23:31.885000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 12 00:23:31.885000 audit[1787]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff0aadd70 a2=420 a3=0 items=0 ppid=1760 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.885000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 12 00:23:31.890337 augenrules[1787]: No rules Jul 12 00:23:31.887921 systemd[1]: Finished systemd-update-done.service. Jul 12 00:23:31.891244 systemd[1]: Finished audit-rules.service. Jul 12 00:23:31.941434 systemd-resolved[1763]: Positive Trust Anchors: Jul 12 00:23:31.941462 systemd-resolved[1763]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:23:31.941484 systemd[1]: Started systemd-timesyncd.service. Jul 12 00:23:31.941513 systemd-resolved[1763]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:23:31.943508 systemd[1]: Reached target time-set.target. Jul 12 00:23:31.977569 systemd-resolved[1763]: Defaulting to hostname 'linux'. Jul 12 00:23:31.980580 systemd[1]: Started systemd-resolved.service. Jul 12 00:23:31.982521 systemd[1]: Reached target network.target. Jul 12 00:23:31.984309 systemd[1]: Reached target network-online.target. Jul 12 00:23:31.986172 systemd[1]: Reached target nss-lookup.target. Jul 12 00:23:31.988158 systemd[1]: Reached target sysinit.target. Jul 12 00:23:31.990099 systemd[1]: Started motdgen.path. Jul 12 00:23:31.991769 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 12 00:23:31.994625 systemd[1]: Started logrotate.timer. Jul 12 00:23:31.996462 systemd[1]: Started mdadm.timer. Jul 12 00:23:31.998044 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 12 00:23:31.999951 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 12 00:23:32.000016 systemd[1]: Reached target paths.target. Jul 12 00:23:32.001700 systemd[1]: Reached target timers.target. Jul 12 00:23:32.003882 systemd[1]: Listening on dbus.socket. Jul 12 00:23:32.007535 systemd[1]: Starting docker.socket... Jul 12 00:23:32.014320 systemd[1]: Listening on sshd.socket. Jul 12 00:23:32.016285 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:32.017167 systemd[1]: Listening on docker.socket. Jul 12 00:23:32.019185 systemd[1]: Reached target sockets.target. Jul 12 00:23:32.021134 systemd[1]: Reached target basic.target. Jul 12 00:23:32.022906 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:23:32.022957 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:23:32.025129 systemd[1]: Started amazon-ssm-agent.service. Jul 12 00:23:32.031210 systemd[1]: Starting containerd.service... Jul 12 00:23:32.036343 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 12 00:23:32.040796 systemd[1]: Starting dbus.service... Jul 12 00:23:32.055793 systemd[1]: Starting enable-oem-cloudinit.service... Jul 12 00:23:32.070714 systemd[1]: Starting extend-filesystems.service... Jul 12 00:23:32.072641 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 12 00:23:32.081399 systemd[1]: Starting kubelet.service... Jul 12 00:23:32.088022 systemd[1]: Starting motdgen.service... Jul 12 00:23:32.099080 systemd[1]: Started nvidia.service. Jul 12 00:23:32.106562 systemd[1]: Starting prepare-helm.service... Jul 12 00:23:32.112522 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 12 00:23:32.116641 systemd[1]: Starting sshd-keygen.service... Jul 12 00:23:32.126943 systemd[1]: Starting systemd-logind.service... Jul 12 00:23:32.128898 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:32.129024 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 12 00:23:32.130532 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 12 00:23:32.141798 systemd[1]: Starting update-engine.service... Jul 12 00:23:32.147457 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 12 00:23:32.219040 systemd-timesyncd[1764]: Contacted time server 15.204.87.223:123 (0.flatcar.pool.ntp.org). Jul 12 00:23:32.219242 systemd-timesyncd[1764]: Initial clock synchronization to Sat 2025-07-12 00:23:32.539735 UTC. Jul 12 00:23:32.242720 jq[1800]: false Jul 12 00:23:32.254136 tar[1815]: linux-arm64/LICENSE Jul 12 00:23:32.254802 tar[1815]: linux-arm64/helm Jul 12 00:23:32.256889 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 12 00:23:32.257292 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 12 00:23:32.260331 jq[1810]: true Jul 12 00:23:32.267790 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 12 00:23:32.268277 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 12 00:23:32.289042 dbus-daemon[1798]: [system] SELinux support is enabled Jul 12 00:23:32.289416 systemd[1]: Started dbus.service. Jul 12 00:23:32.295097 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 12 00:23:32.295154 systemd[1]: Reached target system-config.target. Jul 12 00:23:32.297347 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 12 00:23:32.297400 systemd[1]: Reached target user-config.target. Jul 12 00:23:32.310925 dbus-daemon[1798]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1535 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jul 12 00:23:32.314183 dbus-daemon[1798]: [system] Successfully activated service 'org.freedesktop.systemd1' Jul 12 00:23:32.320641 systemd[1]: Starting systemd-hostnamed.service... Jul 12 00:23:32.356397 extend-filesystems[1801]: Found loop1 Jul 12 00:23:32.356397 extend-filesystems[1801]: Found nvme0n1 Jul 12 00:23:32.360667 extend-filesystems[1801]: Found nvme0n1p1 Jul 12 00:23:32.363901 extend-filesystems[1801]: Found nvme0n1p2 Jul 12 00:23:32.363901 extend-filesystems[1801]: Found nvme0n1p3 Jul 12 00:23:32.363901 extend-filesystems[1801]: Found usr Jul 12 00:23:32.363901 extend-filesystems[1801]: Found nvme0n1p4 Jul 12 00:23:32.363901 extend-filesystems[1801]: Found nvme0n1p6 Jul 12 00:23:32.363901 extend-filesystems[1801]: Found nvme0n1p7 Jul 12 00:23:32.363901 extend-filesystems[1801]: Found nvme0n1p9 Jul 12 00:23:32.363901 extend-filesystems[1801]: Checking size of /dev/nvme0n1p9 Jul 12 00:23:32.400868 systemd[1]: motdgen.service: Deactivated successfully. Jul 12 00:23:32.401274 systemd[1]: Finished motdgen.service. Jul 12 00:23:32.417707 jq[1829]: true Jul 12 00:23:32.479741 extend-filesystems[1801]: Resized partition /dev/nvme0n1p9 Jul 12 00:23:32.506123 extend-filesystems[1848]: resize2fs 1.46.5 (30-Dec-2021) Jul 12 00:23:32.569235 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Jul 12 00:23:32.602783 systemd[1]: nvidia.service: Deactivated successfully. Jul 12 00:23:32.661224 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Jul 12 00:23:32.673099 update_engine[1809]: I0712 00:23:32.671602 1809 main.cc:92] Flatcar Update Engine starting Jul 12 00:23:32.677812 extend-filesystems[1848]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Jul 12 00:23:32.677812 extend-filesystems[1848]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 12 00:23:32.677812 extend-filesystems[1848]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Jul 12 00:23:32.691464 extend-filesystems[1801]: Resized filesystem in /dev/nvme0n1p9 Jul 12 00:23:32.687723 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 12 00:23:32.695845 bash[1863]: Updated "/home/core/.ssh/authorized_keys" Jul 12 00:23:32.688247 systemd[1]: Finished extend-filesystems.service. Jul 12 00:23:32.695044 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 12 00:23:32.711086 systemd[1]: Started update-engine.service. Jul 12 00:23:32.716574 systemd[1]: Started locksmithd.service. Jul 12 00:23:32.727676 update_engine[1809]: I0712 00:23:32.727452 1809 update_check_scheduler.cc:74] Next update check in 3m41s Jul 12 00:23:32.791994 amazon-ssm-agent[1795]: 2025/07/12 00:23:32 Failed to load instance info from vault. RegistrationKey does not exist. Jul 12 00:23:32.828399 amazon-ssm-agent[1795]: Initializing new seelog logger Jul 12 00:23:32.829689 systemd-logind[1808]: Watching system buttons on /dev/input/event0 (Power Button) Jul 12 00:23:32.829756 systemd-logind[1808]: Watching system buttons on /dev/input/event1 (Sleep Button) Jul 12 00:23:32.834870 systemd-logind[1808]: New seat seat0. Jul 12 00:23:32.836997 amazon-ssm-agent[1795]: New Seelog Logger Creation Complete Jul 12 00:23:32.837942 systemd[1]: Started systemd-logind.service. Jul 12 00:23:32.841583 amazon-ssm-agent[1795]: 2025/07/12 00:23:32 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Jul 12 00:23:32.845277 amazon-ssm-agent[1795]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Jul 12 00:23:32.847715 amazon-ssm-agent[1795]: 2025/07/12 00:23:32 processing appconfig overrides Jul 12 00:23:32.901716 env[1813]: time="2025-07-12T00:23:32.901623134Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 12 00:23:33.001645 dbus-daemon[1798]: [system] Successfully activated service 'org.freedesktop.hostname1' Jul 12 00:23:33.001943 systemd[1]: Started systemd-hostnamed.service. Jul 12 00:23:33.006621 dbus-daemon[1798]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1832 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jul 12 00:23:33.012469 systemd[1]: Starting polkit.service... Jul 12 00:23:33.072623 polkitd[1896]: Started polkitd version 121 Jul 12 00:23:33.136852 polkitd[1896]: Loading rules from directory /etc/polkit-1/rules.d Jul 12 00:23:33.136987 polkitd[1896]: Loading rules from directory /usr/share/polkit-1/rules.d Jul 12 00:23:33.145262 polkitd[1896]: Finished loading, compiling and executing 2 rules Jul 12 00:23:33.146783 dbus-daemon[1798]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jul 12 00:23:33.147070 systemd[1]: Started polkit.service. Jul 12 00:23:33.159418 polkitd[1896]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jul 12 00:23:33.175809 env[1813]: time="2025-07-12T00:23:33.175746788Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 12 00:23:33.186618 env[1813]: time="2025-07-12T00:23:33.186561551Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:33.197337 env[1813]: time="2025-07-12T00:23:33.197242164Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:23:33.202020 env[1813]: time="2025-07-12T00:23:33.201942128Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:33.204319 env[1813]: time="2025-07-12T00:23:33.204155807Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:23:33.204932 systemd-resolved[1763]: System hostname changed to 'ip-172-31-27-156'. Jul 12 00:23:33.204935 systemd-hostnamed[1832]: Hostname set to (transient) Jul 12 00:23:33.206045 env[1813]: time="2025-07-12T00:23:33.205963093Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:33.207315 env[1813]: time="2025-07-12T00:23:33.207166071Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 12 00:23:33.212361 env[1813]: time="2025-07-12T00:23:33.212295679Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:33.212868 env[1813]: time="2025-07-12T00:23:33.212828633Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:33.214156 env[1813]: time="2025-07-12T00:23:33.214087814Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:33.219097 env[1813]: time="2025-07-12T00:23:33.219038690Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:23:33.222016 env[1813]: time="2025-07-12T00:23:33.221937919Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 12 00:23:33.222515 env[1813]: time="2025-07-12T00:23:33.222449417Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 12 00:23:33.222726 env[1813]: time="2025-07-12T00:23:33.222692042Z" level=info msg="metadata content store policy set" policy=shared Jul 12 00:23:33.240272 env[1813]: time="2025-07-12T00:23:33.240067937Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 12 00:23:33.240272 env[1813]: time="2025-07-12T00:23:33.240145259Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 12 00:23:33.240272 env[1813]: time="2025-07-12T00:23:33.240184026Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.240590568Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.240642116Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.240677988Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.240710364Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241407710Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241463177Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241495678Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241528841Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241567084Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241802669Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 12 00:23:33.242287 env[1813]: time="2025-07-12T00:23:33.241974076Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 12 00:23:33.243171 env[1813]: time="2025-07-12T00:23:33.243131608Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 12 00:23:33.243408 env[1813]: time="2025-07-12T00:23:33.243375344Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.243560 env[1813]: time="2025-07-12T00:23:33.243528428Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 12 00:23:33.243899 env[1813]: time="2025-07-12T00:23:33.243862579Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244037 env[1813]: time="2025-07-12T00:23:33.244005677Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244164 env[1813]: time="2025-07-12T00:23:33.244134198Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244319 env[1813]: time="2025-07-12T00:23:33.244289815Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244443 env[1813]: time="2025-07-12T00:23:33.244413605Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244565 env[1813]: time="2025-07-12T00:23:33.244535236Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244720 env[1813]: time="2025-07-12T00:23:33.244689480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.244854 env[1813]: time="2025-07-12T00:23:33.244822943Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.245002 env[1813]: time="2025-07-12T00:23:33.244970311Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 12 00:23:33.245495 env[1813]: time="2025-07-12T00:23:33.245450480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.246389 env[1813]: time="2025-07-12T00:23:33.246345455Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.246556 env[1813]: time="2025-07-12T00:23:33.246524500Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.246717 env[1813]: time="2025-07-12T00:23:33.246685697Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 12 00:23:33.246857 env[1813]: time="2025-07-12T00:23:33.246820907Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 12 00:23:33.246978 env[1813]: time="2025-07-12T00:23:33.246948217Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 12 00:23:33.247134 env[1813]: time="2025-07-12T00:23:33.247101638Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 12 00:23:33.247390 env[1813]: time="2025-07-12T00:23:33.247357530Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 12 00:23:33.247910 env[1813]: time="2025-07-12T00:23:33.247805598Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 12 00:23:33.249895 env[1813]: time="2025-07-12T00:23:33.248869958Z" level=info msg="Connect containerd service" Jul 12 00:23:33.249895 env[1813]: time="2025-07-12T00:23:33.249072430Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 12 00:23:33.258755 env[1813]: time="2025-07-12T00:23:33.258697521Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:23:33.266361 env[1813]: time="2025-07-12T00:23:33.266293244Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 12 00:23:33.267038 env[1813]: time="2025-07-12T00:23:33.266983812Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 12 00:23:33.267482 systemd[1]: Started containerd.service. Jul 12 00:23:33.270177 env[1813]: time="2025-07-12T00:23:33.270104174Z" level=info msg="containerd successfully booted in 0.388080s" Jul 12 00:23:33.275416 coreos-metadata[1797]: Jul 12 00:23:33.275 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Jul 12 00:23:33.279136 coreos-metadata[1797]: Jul 12 00:23:33.278 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Jul 12 00:23:33.281746 coreos-metadata[1797]: Jul 12 00:23:33.281 INFO Fetch successful Jul 12 00:23:33.282113 coreos-metadata[1797]: Jul 12 00:23:33.281 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 12 00:23:33.285735 coreos-metadata[1797]: Jul 12 00:23:33.285 INFO Fetch successful Jul 12 00:23:33.289798 unknown[1797]: wrote ssh authorized keys file for user: core Jul 12 00:23:33.291357 env[1813]: time="2025-07-12T00:23:33.291248736Z" level=info msg="Start subscribing containerd event" Jul 12 00:23:33.291625 env[1813]: time="2025-07-12T00:23:33.291393769Z" level=info msg="Start recovering state" Jul 12 00:23:33.291625 env[1813]: time="2025-07-12T00:23:33.291558760Z" level=info msg="Start event monitor" Jul 12 00:23:33.291625 env[1813]: time="2025-07-12T00:23:33.291611144Z" level=info msg="Start snapshots syncer" Jul 12 00:23:33.291828 env[1813]: time="2025-07-12T00:23:33.291647615Z" level=info msg="Start cni network conf syncer for default" Jul 12 00:23:33.291828 env[1813]: time="2025-07-12T00:23:33.291676647Z" level=info msg="Start streaming server" Jul 12 00:23:33.318196 update-ssh-keys[1935]: Updated "/home/core/.ssh/authorized_keys" Jul 12 00:23:33.344157 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 12 00:23:33.562412 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Create new startup processor Jul 12 00:23:33.594901 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [LongRunningPluginsManager] registered plugins: {} Jul 12 00:23:33.594901 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing bookkeeping folders Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO removing the completed state files Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing bookkeeping folders for long running plugins Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing healthcheck folders for long running plugins Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing locations for inventory plugin Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing default location for custom inventory Jul 12 00:23:33.595134 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing default location for file inventory Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Initializing default location for role inventory Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Init the cloudwatchlogs publisher Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:downloadContent Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:runDocument Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:softwareInventory Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:runPowerShellScript Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:updateSsmAgent Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:configureDocker Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:runDockerAction Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:refreshAssociation Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform independent plugin aws:configurePackage Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Successfully loaded platform dependent plugin aws:runShellScript Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Jul 12 00:23:33.595527 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO OS: linux, Arch: arm64 Jul 12 00:23:33.597072 amazon-ssm-agent[1795]: datastore file /var/lib/amazon/ssm/i-05db31a0d4cfa7839/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Jul 12 00:23:33.664063 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] Starting document processing engine... Jul 12 00:23:33.762271 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [EngineProcessor] Starting Jul 12 00:23:33.856641 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Jul 12 00:23:33.951279 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] Starting message polling Jul 12 00:23:34.047079 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] Starting send replies to MDS Jul 12 00:23:34.140934 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [instanceID=i-05db31a0d4cfa7839] Starting association polling Jul 12 00:23:34.236562 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Jul 12 00:23:34.259440 tar[1815]: linux-arm64/README.md Jul 12 00:23:34.270751 systemd[1]: Finished prepare-helm.service. Jul 12 00:23:34.331525 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [Association] Launching response handler Jul 12 00:23:34.427151 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Jul 12 00:23:34.444842 locksmithd[1875]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 12 00:23:34.522836 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Jul 12 00:23:34.618806 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Jul 12 00:23:34.714878 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] Starting session document processing engine... Jul 12 00:23:34.811262 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] [EngineProcessor] Starting Jul 12 00:23:34.907728 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Jul 12 00:23:35.004504 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-05db31a0d4cfa7839, requestId: e75deb47-441e-4041-9320-f84a6c71a347 Jul 12 00:23:35.101431 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [OfflineService] Starting document processing engine... Jul 12 00:23:35.198518 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [OfflineService] [EngineProcessor] Starting Jul 12 00:23:35.295762 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [OfflineService] [EngineProcessor] Initial processing Jul 12 00:23:35.393416 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [OfflineService] Starting message polling Jul 12 00:23:35.491019 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [OfflineService] Starting send replies to MDS Jul 12 00:23:35.588959 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [LongRunningPluginsManager] starting long running plugin manager Jul 12 00:23:35.629472 systemd[1]: Started kubelet.service. Jul 12 00:23:35.687086 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Jul 12 00:23:35.785333 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [HealthCheck] HealthCheck reporting agent health. Jul 12 00:23:35.883825 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Jul 12 00:23:35.982590 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [StartupProcessor] Executing startup processor tasks Jul 12 00:23:36.081349 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Jul 12 00:23:36.180502 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Jul 12 00:23:36.279714 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.7 Jul 12 00:23:36.379254 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] listening reply. Jul 12 00:23:36.478853 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-05db31a0d4cfa7839?role=subscribe&stream=input Jul 12 00:23:36.578806 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-05db31a0d4cfa7839?role=subscribe&stream=input Jul 12 00:23:36.605180 kubelet[2003]: E0712 00:23:36.605116 2003 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:23:36.609087 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:23:36.609458 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:23:36.609899 systemd[1]: kubelet.service: Consumed 1.552s CPU time. Jul 12 00:23:36.678774 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] Starting receiving message from control channel Jul 12 00:23:36.778951 amazon-ssm-agent[1795]: 2025-07-12 00:23:33 INFO [MessageGatewayService] [EngineProcessor] Initial processing Jul 12 00:23:41.154866 systemd[1]: Created slice system-sshd.slice. Jul 12 00:23:41.289146 sshd_keygen[1822]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 12 00:23:41.326011 systemd[1]: Finished sshd-keygen.service. Jul 12 00:23:41.330597 systemd[1]: Starting issuegen.service... Jul 12 00:23:41.337002 systemd[1]: Started sshd@0-172.31.27.156:22-147.75.109.163:51410.service. Jul 12 00:23:41.343571 systemd[1]: issuegen.service: Deactivated successfully. Jul 12 00:23:41.343942 systemd[1]: Finished issuegen.service. Jul 12 00:23:41.348875 systemd[1]: Starting systemd-user-sessions.service... Jul 12 00:23:41.364982 systemd[1]: Finished systemd-user-sessions.service. Jul 12 00:23:41.370360 systemd[1]: Started getty@tty1.service. Jul 12 00:23:41.375817 systemd[1]: Started serial-getty@ttyS0.service. Jul 12 00:23:41.382409 systemd[1]: Reached target getty.target. Jul 12 00:23:41.386173 systemd[1]: Reached target multi-user.target. Jul 12 00:23:41.391970 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 12 00:23:41.410493 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 12 00:23:41.410852 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 12 00:23:41.413215 systemd[1]: Startup finished in 1.213s (kernel) + 8.746s (initrd) + 17.064s (userspace) = 27.024s. Jul 12 00:23:41.551025 sshd[2018]: Accepted publickey for core from 147.75.109.163 port 51410 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:41.556709 sshd[2018]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:41.578303 systemd[1]: Created slice user-500.slice. Jul 12 00:23:41.580703 systemd[1]: Starting user-runtime-dir@500.service... Jul 12 00:23:41.590328 systemd-logind[1808]: New session 1 of user core. Jul 12 00:23:41.601353 systemd[1]: Finished user-runtime-dir@500.service. Jul 12 00:23:41.604507 systemd[1]: Starting user@500.service... Jul 12 00:23:41.612701 (systemd)[2027]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:41.794521 systemd[2027]: Queued start job for default target default.target. Jul 12 00:23:41.795581 systemd[2027]: Reached target paths.target. Jul 12 00:23:41.795635 systemd[2027]: Reached target sockets.target. Jul 12 00:23:41.795670 systemd[2027]: Reached target timers.target. Jul 12 00:23:41.795700 systemd[2027]: Reached target basic.target. Jul 12 00:23:41.795795 systemd[2027]: Reached target default.target. Jul 12 00:23:41.795860 systemd[2027]: Startup finished in 171ms. Jul 12 00:23:41.796728 systemd[1]: Started user@500.service. Jul 12 00:23:41.799508 systemd[1]: Started session-1.scope. Jul 12 00:23:41.947060 systemd[1]: Started sshd@1-172.31.27.156:22-147.75.109.163:51416.service. Jul 12 00:23:42.120192 sshd[2036]: Accepted publickey for core from 147.75.109.163 port 51416 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:42.122748 sshd[2036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:42.129960 systemd-logind[1808]: New session 2 of user core. Jul 12 00:23:42.131952 systemd[1]: Started session-2.scope. Jul 12 00:23:42.262173 sshd[2036]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:42.267377 systemd-logind[1808]: Session 2 logged out. Waiting for processes to exit. Jul 12 00:23:42.268885 systemd[1]: sshd@1-172.31.27.156:22-147.75.109.163:51416.service: Deactivated successfully. Jul 12 00:23:42.270181 systemd[1]: session-2.scope: Deactivated successfully. Jul 12 00:23:42.271156 systemd-logind[1808]: Removed session 2. Jul 12 00:23:42.291161 systemd[1]: Started sshd@2-172.31.27.156:22-147.75.109.163:51424.service. Jul 12 00:23:42.467082 sshd[2042]: Accepted publickey for core from 147.75.109.163 port 51424 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:42.470181 sshd[2042]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:42.477704 systemd-logind[1808]: New session 3 of user core. Jul 12 00:23:42.478776 systemd[1]: Started session-3.scope. Jul 12 00:23:42.602503 sshd[2042]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:42.607564 systemd[1]: sshd@2-172.31.27.156:22-147.75.109.163:51424.service: Deactivated successfully. Jul 12 00:23:42.608823 systemd[1]: session-3.scope: Deactivated successfully. Jul 12 00:23:42.609984 systemd-logind[1808]: Session 3 logged out. Waiting for processes to exit. Jul 12 00:23:42.612064 systemd-logind[1808]: Removed session 3. Jul 12 00:23:42.631591 systemd[1]: Started sshd@3-172.31.27.156:22-147.75.109.163:51440.service. Jul 12 00:23:42.807372 sshd[2048]: Accepted publickey for core from 147.75.109.163 port 51440 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:42.810397 sshd[2048]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:42.817299 systemd-logind[1808]: New session 4 of user core. Jul 12 00:23:42.818790 systemd[1]: Started session-4.scope. Jul 12 00:23:42.951987 sshd[2048]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:42.956619 systemd-logind[1808]: Session 4 logged out. Waiting for processes to exit. Jul 12 00:23:42.957251 systemd[1]: sshd@3-172.31.27.156:22-147.75.109.163:51440.service: Deactivated successfully. Jul 12 00:23:42.958558 systemd[1]: session-4.scope: Deactivated successfully. Jul 12 00:23:42.960056 systemd-logind[1808]: Removed session 4. Jul 12 00:23:42.981654 systemd[1]: Started sshd@4-172.31.27.156:22-147.75.109.163:51452.service. Jul 12 00:23:43.156112 sshd[2054]: Accepted publickey for core from 147.75.109.163 port 51452 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:43.159179 sshd[2054]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:43.167385 systemd[1]: Started session-5.scope. Jul 12 00:23:43.169251 systemd-logind[1808]: New session 5 of user core. Jul 12 00:23:43.294929 sudo[2057]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 12 00:23:43.295502 sudo[2057]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:43.312479 dbus-daemon[1798]: avc: received setenforce notice (enforcing=1) Jul 12 00:23:43.315991 sudo[2057]: pam_unix(sudo:session): session closed for user root Jul 12 00:23:43.341349 sshd[2054]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:43.346512 systemd-logind[1808]: Session 5 logged out. Waiting for processes to exit. Jul 12 00:23:43.347167 systemd[1]: sshd@4-172.31.27.156:22-147.75.109.163:51452.service: Deactivated successfully. Jul 12 00:23:43.348655 systemd[1]: session-5.scope: Deactivated successfully. Jul 12 00:23:43.350339 systemd-logind[1808]: Removed session 5. Jul 12 00:23:43.372020 systemd[1]: Started sshd@5-172.31.27.156:22-147.75.109.163:51454.service. Jul 12 00:23:43.546383 sshd[2061]: Accepted publickey for core from 147.75.109.163 port 51454 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:43.549007 sshd[2061]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:43.557016 systemd-logind[1808]: New session 6 of user core. Jul 12 00:23:43.557959 systemd[1]: Started session-6.scope. Jul 12 00:23:43.637887 amazon-ssm-agent[1795]: 2025-07-12 00:23:43 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Jul 12 00:23:43.666110 sudo[2065]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 12 00:23:43.666691 sudo[2065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:43.672167 sudo[2065]: pam_unix(sudo:session): session closed for user root Jul 12 00:23:43.681735 sudo[2064]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 12 00:23:43.682748 sudo[2064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:43.701300 systemd[1]: Stopping audit-rules.service... Jul 12 00:23:43.701000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:23:43.705076 kernel: kauditd_printk_skb: 59 callbacks suppressed Jul 12 00:23:43.705165 kernel: audit: type=1305 audit(1752279823.701:208): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:23:43.705571 auditctl[2068]: No rules Jul 12 00:23:43.710912 systemd[1]: audit-rules.service: Deactivated successfully. Jul 12 00:23:43.701000 audit[2068]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdca59cd0 a2=420 a3=0 items=0 ppid=1 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:43.711310 systemd[1]: Stopped audit-rules.service. Jul 12 00:23:43.723101 systemd[1]: Starting audit-rules.service... Jul 12 00:23:43.701000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:23:43.730774 kernel: audit: type=1300 audit(1752279823.701:208): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdca59cd0 a2=420 a3=0 items=0 ppid=1 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:43.730874 kernel: audit: type=1327 audit(1752279823.701:208): proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:23:43.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.739540 kernel: audit: type=1131 audit(1752279823.710:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.760825 augenrules[2085]: No rules Jul 12 00:23:43.762486 systemd[1]: Finished audit-rules.service. Jul 12 00:23:43.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.764775 sudo[2064]: pam_unix(sudo:session): session closed for user root Jul 12 00:23:43.763000 audit[2064]: USER_END pid=2064 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.781168 kernel: audit: type=1130 audit(1752279823.762:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.781317 kernel: audit: type=1106 audit(1752279823.763:211): pid=2064 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.781364 kernel: audit: type=1104 audit(1752279823.763:212): pid=2064 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.763000 audit[2064]: CRED_DISP pid=2064 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.790588 sshd[2061]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:43.791000 audit[2061]: USER_END pid=2061 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:43.806593 systemd[1]: sshd@5-172.31.27.156:22-147.75.109.163:51454.service: Deactivated successfully. Jul 12 00:23:43.791000 audit[2061]: CRED_DISP pid=2061 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:43.816257 kernel: audit: type=1106 audit(1752279823.791:213): pid=2061 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:43.816370 kernel: audit: type=1104 audit(1752279823.791:214): pid=2061 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:43.807837 systemd[1]: session-6.scope: Deactivated successfully. Jul 12 00:23:43.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.156:22-147.75.109.163:51454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.825793 kernel: audit: type=1131 audit(1752279823.805:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.156:22-147.75.109.163:51454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.826926 systemd-logind[1808]: Session 6 logged out. Waiting for processes to exit. Jul 12 00:23:43.834475 systemd[1]: Started sshd@6-172.31.27.156:22-147.75.109.163:51458.service. Jul 12 00:23:43.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.156:22-147.75.109.163:51458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:43.836789 systemd-logind[1808]: Removed session 6. Jul 12 00:23:44.005000 audit[2091]: USER_ACCT pid=2091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:44.007086 sshd[2091]: Accepted publickey for core from 147.75.109.163 port 51458 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:44.007000 audit[2091]: CRED_ACQ pid=2091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:44.007000 audit[2091]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6eea150 a2=3 a3=1 items=0 ppid=1 pid=2091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.007000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:23:44.010306 sshd[2091]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:44.018863 systemd[1]: Started session-7.scope. Jul 12 00:23:44.019653 systemd-logind[1808]: New session 7 of user core. Jul 12 00:23:44.028000 audit[2091]: USER_START pid=2091 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:44.030000 audit[2093]: CRED_ACQ pid=2093 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:44.125000 audit[2094]: USER_ACCT pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:44.128547 sudo[2094]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 12 00:23:44.128000 audit[2094]: CRED_REFR pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:44.129655 sudo[2094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:44.132000 audit[2094]: USER_START pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:44.209823 systemd[1]: Starting docker.service... Jul 12 00:23:44.323239 env[2104]: time="2025-07-12T00:23:44.323136124Z" level=info msg="Starting up" Jul 12 00:23:44.327347 env[2104]: time="2025-07-12T00:23:44.327283578Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:23:44.327347 env[2104]: time="2025-07-12T00:23:44.327333377Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:23:44.327585 env[2104]: time="2025-07-12T00:23:44.327378599Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:23:44.327585 env[2104]: time="2025-07-12T00:23:44.327403208Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:23:44.331883 env[2104]: time="2025-07-12T00:23:44.331833969Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:23:44.331883 env[2104]: time="2025-07-12T00:23:44.331874565Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:23:44.332123 env[2104]: time="2025-07-12T00:23:44.331908826Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:23:44.332123 env[2104]: time="2025-07-12T00:23:44.331934077Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:23:44.370806 env[2104]: time="2025-07-12T00:23:44.370743650Z" level=info msg="Loading containers: start." Jul 12 00:23:44.462000 audit[2135]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.462000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffdbaa7ee0 a2=0 a3=1 items=0 ppid=2104 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 12 00:23:44.467000 audit[2137]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.467000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe0e96da0 a2=0 a3=1 items=0 ppid=2104 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.467000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 12 00:23:44.471000 audit[2139]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.471000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdfd1a070 a2=0 a3=1 items=0 ppid=2104 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.471000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:23:44.475000 audit[2141]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.475000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd9bedb90 a2=0 a3=1 items=0 ppid=2104 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.475000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:23:44.481000 audit[2143]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.481000 audit[2143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeab24e00 a2=0 a3=1 items=0 ppid=2104 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.481000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 12 00:23:44.510000 audit[2148]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.510000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff9ba6290 a2=0 a3=1 items=0 ppid=2104 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.510000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 12 00:23:44.521000 audit[2150]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.521000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd2268070 a2=0 a3=1 items=0 ppid=2104 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.521000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 12 00:23:44.526000 audit[2152]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.526000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd25256b0 a2=0 a3=1 items=0 ppid=2104 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.526000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 12 00:23:44.530000 audit[2154]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.530000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd881e020 a2=0 a3=1 items=0 ppid=2104 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.530000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:44.542000 audit[2158]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.542000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc8d90690 a2=0 a3=1 items=0 ppid=2104 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.542000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:44.550000 audit[2159]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.550000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffffb347af0 a2=0 a3=1 items=0 ppid=2104 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.550000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:44.569242 kernel: Initializing XFRM netlink socket Jul 12 00:23:44.614171 env[2104]: time="2025-07-12T00:23:44.614102971Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 12 00:23:44.618187 (udev-worker)[2115]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:23:44.647000 audit[2167]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.647000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffe9baf5f0 a2=0 a3=1 items=0 ppid=2104 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.647000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 12 00:23:44.661000 audit[2170]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.661000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffda475c80 a2=0 a3=1 items=0 ppid=2104 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.661000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 12 00:23:44.667000 audit[2173]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.667000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffee5d9ca0 a2=0 a3=1 items=0 ppid=2104 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 12 00:23:44.671000 audit[2175]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.671000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffef159970 a2=0 a3=1 items=0 ppid=2104 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 12 00:23:44.676000 audit[2177]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.676000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd45e9b60 a2=0 a3=1 items=0 ppid=2104 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.676000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 12 00:23:44.681000 audit[2179]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.681000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd99df080 a2=0 a3=1 items=0 ppid=2104 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.681000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 12 00:23:44.685000 audit[2181]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.685000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc20fb100 a2=0 a3=1 items=0 ppid=2104 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 12 00:23:44.702000 audit[2184]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.702000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffea045ed0 a2=0 a3=1 items=0 ppid=2104 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.702000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 12 00:23:44.707000 audit[2186]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.707000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffccf542e0 a2=0 a3=1 items=0 ppid=2104 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.707000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:23:44.712000 audit[2188]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.712000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff901e3e0 a2=0 a3=1 items=0 ppid=2104 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:23:44.717000 audit[2190]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.719106 systemd-networkd[1535]: docker0: Link UP Jul 12 00:23:44.717000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc7cc2440 a2=0 a3=1 items=0 ppid=2104 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.717000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 12 00:23:44.732000 audit[2194]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.732000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcd84da10 a2=0 a3=1 items=0 ppid=2104 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.732000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:44.740000 audit[2195]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:44.740000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd9211b70 a2=0 a3=1 items=0 ppid=2104 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:44.740000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:44.742007 env[2104]: time="2025-07-12T00:23:44.741943965Z" level=info msg="Loading containers: done." Jul 12 00:23:44.776387 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2575272994-merged.mount: Deactivated successfully. Jul 12 00:23:44.784352 env[2104]: time="2025-07-12T00:23:44.784290062Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 12 00:23:44.784641 env[2104]: time="2025-07-12T00:23:44.784596538Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 12 00:23:44.784827 env[2104]: time="2025-07-12T00:23:44.784782269Z" level=info msg="Daemon has completed initialization" Jul 12 00:23:44.807400 systemd[1]: Started docker.service. Jul 12 00:23:44.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:44.823607 env[2104]: time="2025-07-12T00:23:44.823339780Z" level=info msg="API listen on /run/docker.sock" Jul 12 00:23:45.978726 env[1813]: time="2025-07-12T00:23:45.978663424Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 12 00:23:46.551129 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2738398603.mount: Deactivated successfully. Jul 12 00:23:46.740965 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 12 00:23:46.741335 systemd[1]: Stopped kubelet.service. Jul 12 00:23:46.741426 systemd[1]: kubelet.service: Consumed 1.552s CPU time. Jul 12 00:23:46.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:46.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:46.744081 systemd[1]: Starting kubelet.service... Jul 12 00:23:47.186468 systemd[1]: Started kubelet.service. Jul 12 00:23:47.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:47.285815 kubelet[2232]: E0712 00:23:47.285756 2232 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:23:47.293434 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:23:47.293759 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:23:47.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:48.416019 env[1813]: time="2025-07-12T00:23:48.415958935Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.418462 env[1813]: time="2025-07-12T00:23:48.418412451Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.421883 env[1813]: time="2025-07-12T00:23:48.421817011Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.425325 env[1813]: time="2025-07-12T00:23:48.425263895Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.429891 env[1813]: time="2025-07-12T00:23:48.429795696Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a\"" Jul 12 00:23:48.433191 env[1813]: time="2025-07-12T00:23:48.433110287Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 12 00:23:50.194511 env[1813]: time="2025-07-12T00:23:50.194443857Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:50.197359 env[1813]: time="2025-07-12T00:23:50.197290388Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:50.200874 env[1813]: time="2025-07-12T00:23:50.200820874Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:50.204235 env[1813]: time="2025-07-12T00:23:50.204142538Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:50.205843 env[1813]: time="2025-07-12T00:23:50.205765672Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038\"" Jul 12 00:23:50.208250 env[1813]: time="2025-07-12T00:23:50.208167351Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 12 00:23:51.676495 env[1813]: time="2025-07-12T00:23:51.676435863Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:51.678838 env[1813]: time="2025-07-12T00:23:51.678788250Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:51.683259 env[1813]: time="2025-07-12T00:23:51.682522461Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:51.686785 env[1813]: time="2025-07-12T00:23:51.686713856Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:51.691320 env[1813]: time="2025-07-12T00:23:51.691252658Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f\"" Jul 12 00:23:51.692074 env[1813]: time="2025-07-12T00:23:51.692005811Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 12 00:23:52.997687 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount374154575.mount: Deactivated successfully. Jul 12 00:23:53.892501 env[1813]: time="2025-07-12T00:23:53.892429054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:53.894838 env[1813]: time="2025-07-12T00:23:53.894773672Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:53.897314 env[1813]: time="2025-07-12T00:23:53.897265170Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:53.900994 env[1813]: time="2025-07-12T00:23:53.900931600Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9\"" Jul 12 00:23:53.902802 env[1813]: time="2025-07-12T00:23:53.902654157Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:53.903719 env[1813]: time="2025-07-12T00:23:53.902679198Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 12 00:23:54.422736 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3492573912.mount: Deactivated successfully. Jul 12 00:23:55.754262 env[1813]: time="2025-07-12T00:23:55.754173237Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:55.758268 env[1813]: time="2025-07-12T00:23:55.758155880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:55.767516 env[1813]: time="2025-07-12T00:23:55.767461396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:55.769541 env[1813]: time="2025-07-12T00:23:55.769479456Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:55.771455 env[1813]: time="2025-07-12T00:23:55.771391079Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 12 00:23:55.772182 env[1813]: time="2025-07-12T00:23:55.772130611Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 12 00:23:56.216375 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1728748130.mount: Deactivated successfully. Jul 12 00:23:56.223819 env[1813]: time="2025-07-12T00:23:56.223755031Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:56.225766 env[1813]: time="2025-07-12T00:23:56.225702851Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:56.228301 env[1813]: time="2025-07-12T00:23:56.228253794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:56.230627 env[1813]: time="2025-07-12T00:23:56.230566708Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:56.231987 env[1813]: time="2025-07-12T00:23:56.231925470Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 12 00:23:56.232769 env[1813]: time="2025-07-12T00:23:56.232723908Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 12 00:23:56.710555 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount991843484.mount: Deactivated successfully. Jul 12 00:23:57.490945 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 12 00:23:57.491309 systemd[1]: Stopped kubelet.service. Jul 12 00:23:57.502998 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 12 00:23:57.503143 kernel: audit: type=1130 audit(1752279837.490:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:57.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:57.493894 systemd[1]: Starting kubelet.service... Jul 12 00:23:57.511791 kernel: audit: type=1131 audit(1752279837.490:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:57.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:58.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:58.297145 systemd[1]: Started kubelet.service. Jul 12 00:23:58.308237 kernel: audit: type=1130 audit(1752279838.297:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:58.391606 kubelet[2242]: E0712 00:23:58.391526 2242 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:23:58.394872 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:23:58.395251 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:23:58.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:58.405440 kernel: audit: type=1131 audit(1752279838.394:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:59.771502 env[1813]: time="2025-07-12T00:23:59.771416375Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:59.776909 env[1813]: time="2025-07-12T00:23:59.776853741Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:59.780700 env[1813]: time="2025-07-12T00:23:59.780651979Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:59.784649 env[1813]: time="2025-07-12T00:23:59.784584833Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:59.786577 env[1813]: time="2025-07-12T00:23:59.786522256Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Jul 12 00:24:03.237004 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jul 12 00:24:03.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:03.264258 kernel: audit: type=1131 audit(1752279843.236:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:03.273000 audit: BPF prog-id=46 op=UNLOAD Jul 12 00:24:03.273000 audit: BPF prog-id=45 op=UNLOAD Jul 12 00:24:03.279619 kernel: audit: type=1334 audit(1752279843.273:259): prog-id=46 op=UNLOAD Jul 12 00:24:03.279695 kernel: audit: type=1334 audit(1752279843.273:260): prog-id=45 op=UNLOAD Jul 12 00:24:03.279750 kernel: audit: type=1334 audit(1752279843.273:261): prog-id=44 op=UNLOAD Jul 12 00:24:03.273000 audit: BPF prog-id=44 op=UNLOAD Jul 12 00:24:08.490927 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 12 00:24:08.491284 systemd[1]: Stopped kubelet.service. Jul 12 00:24:08.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:08.505872 systemd[1]: Starting kubelet.service... Jul 12 00:24:08.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:08.516608 kernel: audit: type=1130 audit(1752279848.490:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:08.516738 kernel: audit: type=1131 audit(1752279848.490:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:09.679931 systemd[1]: Started kubelet.service. Jul 12 00:24:09.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:09.696252 kernel: audit: type=1130 audit(1752279849.680:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:09.768936 kubelet[2271]: E0712 00:24:09.768848 2271 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:24:09.772212 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:24:09.772525 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:24:09.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:24:09.782230 kernel: audit: type=1131 audit(1752279849.772:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:24:10.561750 systemd[1]: Stopped kubelet.service. Jul 12 00:24:10.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:10.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:10.569726 systemd[1]: Starting kubelet.service... Jul 12 00:24:10.577868 kernel: audit: type=1130 audit(1752279850.560:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:10.577994 kernel: audit: type=1131 audit(1752279850.561:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:10.629085 systemd[1]: Reloading. Jul 12 00:24:10.801155 /usr/lib/systemd/system-generators/torcx-generator[2304]: time="2025-07-12T00:24:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:24:10.811365 /usr/lib/systemd/system-generators/torcx-generator[2304]: time="2025-07-12T00:24:10Z" level=info msg="torcx already run" Jul 12 00:24:11.000871 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:24:11.000910 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:24:11.039380 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:24:11.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220025 kernel: audit: type=1400 audit(1752279851.204:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220132 kernel: audit: type=1400 audit(1752279851.211:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228076 kernel: audit: type=1400 audit(1752279851.211:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.236273 kernel: audit: type=1400 audit(1752279851.211:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit: BPF prog-id=49 op=LOAD Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.219000 audit: BPF prog-id=50 op=LOAD Jul 12 00:24:11.219000 audit: BPF prog-id=30 op=UNLOAD Jul 12 00:24:11.219000 audit: BPF prog-id=31 op=UNLOAD Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.227000 audit: BPF prog-id=51 op=LOAD Jul 12 00:24:11.227000 audit: BPF prog-id=32 op=UNLOAD Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.235000 audit: BPF prog-id=52 op=LOAD Jul 12 00:24:11.235000 audit: BPF prog-id=47 op=UNLOAD Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.239000 audit: BPF prog-id=53 op=LOAD Jul 12 00:24:11.239000 audit: BPF prog-id=40 op=UNLOAD Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.242000 audit: BPF prog-id=54 op=LOAD Jul 12 00:24:11.242000 audit: BPF prog-id=41 op=UNLOAD Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit: BPF prog-id=55 op=LOAD Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.243000 audit: BPF prog-id=56 op=LOAD Jul 12 00:24:11.243000 audit: BPF prog-id=42 op=UNLOAD Jul 12 00:24:11.243000 audit: BPF prog-id=43 op=UNLOAD Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.244000 audit: BPF prog-id=57 op=LOAD Jul 12 00:24:11.244000 audit: BPF prog-id=39 op=UNLOAD Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit: BPF prog-id=58 op=LOAD Jul 12 00:24:11.246000 audit: BPF prog-id=33 op=UNLOAD Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit: BPF prog-id=59 op=LOAD Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.246000 audit: BPF prog-id=60 op=LOAD Jul 12 00:24:11.246000 audit: BPF prog-id=34 op=UNLOAD Jul 12 00:24:11.246000 audit: BPF prog-id=35 op=UNLOAD Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.247000 audit: BPF prog-id=61 op=LOAD Jul 12 00:24:11.248000 audit: BPF prog-id=36 op=UNLOAD Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit: BPF prog-id=62 op=LOAD Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:11.248000 audit: BPF prog-id=63 op=LOAD Jul 12 00:24:11.248000 audit: BPF prog-id=37 op=UNLOAD Jul 12 00:24:11.248000 audit: BPF prog-id=38 op=UNLOAD Jul 12 00:24:11.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:11.279537 systemd[1]: Started kubelet.service. Jul 12 00:24:11.289085 systemd[1]: Stopping kubelet.service... Jul 12 00:24:11.290965 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:24:11.291388 systemd[1]: Stopped kubelet.service. Jul 12 00:24:11.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:11.294648 systemd[1]: Starting kubelet.service... Jul 12 00:24:11.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:11.608878 systemd[1]: Started kubelet.service. Jul 12 00:24:11.703931 kubelet[2371]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:24:11.703931 kubelet[2371]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 12 00:24:11.703931 kubelet[2371]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:24:11.704623 kubelet[2371]: I0712 00:24:11.704140 2371 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:24:12.828544 kubelet[2371]: I0712 00:24:12.828474 2371 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 12 00:24:12.828544 kubelet[2371]: I0712 00:24:12.828527 2371 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:24:12.829165 kubelet[2371]: I0712 00:24:12.829000 2371 server.go:954] "Client rotation is on, will bootstrap in background" Jul 12 00:24:12.908104 kubelet[2371]: E0712 00:24:12.908053 2371 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.27.156:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:12.910124 kubelet[2371]: I0712 00:24:12.910062 2371 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:24:12.928400 kubelet[2371]: E0712 00:24:12.928354 2371 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:24:12.928630 kubelet[2371]: I0712 00:24:12.928605 2371 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:24:12.934231 kubelet[2371]: I0712 00:24:12.934157 2371 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:24:12.934776 kubelet[2371]: I0712 00:24:12.934722 2371 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:24:12.935132 kubelet[2371]: I0712 00:24:12.934778 2371 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-156","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:24:12.935374 kubelet[2371]: I0712 00:24:12.935327 2371 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:24:12.935374 kubelet[2371]: I0712 00:24:12.935353 2371 container_manager_linux.go:304] "Creating device plugin manager" Jul 12 00:24:12.935912 kubelet[2371]: I0712 00:24:12.935861 2371 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:24:12.942338 kubelet[2371]: I0712 00:24:12.942292 2371 kubelet.go:446] "Attempting to sync node with API server" Jul 12 00:24:12.942338 kubelet[2371]: I0712 00:24:12.942340 2371 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:24:12.942555 kubelet[2371]: I0712 00:24:12.942377 2371 kubelet.go:352] "Adding apiserver pod source" Jul 12 00:24:12.942555 kubelet[2371]: I0712 00:24:12.942399 2371 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:24:12.962415 kubelet[2371]: W0712 00:24:12.962337 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.27.156:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-156&limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:12.962699 kubelet[2371]: E0712 00:24:12.962660 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.27.156:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-156&limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:12.962952 kubelet[2371]: I0712 00:24:12.962925 2371 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:24:12.964116 kubelet[2371]: I0712 00:24:12.964085 2371 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 12 00:24:12.964535 kubelet[2371]: W0712 00:24:12.964513 2371 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 12 00:24:12.968331 kubelet[2371]: I0712 00:24:12.968290 2371 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 12 00:24:12.968570 kubelet[2371]: I0712 00:24:12.968549 2371 server.go:1287] "Started kubelet" Jul 12 00:24:12.977173 kubelet[2371]: W0712 00:24:12.977074 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.27.156:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:12.977340 kubelet[2371]: E0712 00:24:12.977174 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.27.156:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:12.977405 kubelet[2371]: I0712 00:24:12.977308 2371 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:24:12.982928 kubelet[2371]: I0712 00:24:12.982832 2371 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:24:12.983661 kubelet[2371]: I0712 00:24:12.983628 2371 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:24:12.984581 kubelet[2371]: E0712 00:24:12.984099 2371 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.27.156:6443/api/v1/namespaces/default/events\": dial tcp 172.31.27.156:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-27-156.1851593e0742bfb9 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-27-156,UID:ip-172-31-27-156,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-27-156,},FirstTimestamp:2025-07-12 00:24:12.968492985 +0000 UTC m=+1.349173480,LastTimestamp:2025-07-12 00:24:12.968492985 +0000 UTC m=+1.349173480,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-27-156,}" Jul 12 00:24:12.985639 kubelet[2371]: I0712 00:24:12.985605 2371 server.go:479] "Adding debug handlers to kubelet server" Jul 12 00:24:12.986000 audit[2371]: AVC avc: denied { mac_admin } for pid=2371 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.986000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:12.986000 audit[2371]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000889da0 a1=4000910330 a2=4000889d70 a3=25 items=0 ppid=1 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:12.986000 audit[2371]: AVC avc: denied { mac_admin } for pid=2371 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.986000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:12.986000 audit[2371]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008b7f80 a1=4000910348 a2=4000889e30 a3=25 items=0 ppid=1 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:12.987463 kubelet[2371]: I0712 00:24:12.986775 2371 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:24:12.987463 kubelet[2371]: I0712 00:24:12.986892 2371 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 12 00:24:12.987463 kubelet[2371]: I0712 00:24:12.987054 2371 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:24:12.991448 kubelet[2371]: I0712 00:24:12.991408 2371 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:24:12.993477 kubelet[2371]: E0712 00:24:12.993441 2371 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:24:12.994404 kubelet[2371]: I0712 00:24:12.994374 2371 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 12 00:24:12.994786 kubelet[2371]: I0712 00:24:12.994759 2371 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 12 00:24:12.995049 kubelet[2371]: I0712 00:24:12.995019 2371 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:24:12.995888 kubelet[2371]: W0712 00:24:12.995823 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.27.156:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:12.996334 kubelet[2371]: E0712 00:24:12.996300 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.27.156:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:12.996622 kubelet[2371]: E0712 00:24:12.996574 2371 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-156\" not found" Jul 12 00:24:12.996957 kubelet[2371]: I0712 00:24:12.996925 2371 factory.go:221] Registration of the systemd container factory successfully Jul 12 00:24:12.997315 kubelet[2371]: I0712 00:24:12.997265 2371 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:24:12.998449 kubelet[2371]: E0712 00:24:12.998379 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.156:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-156?timeout=10s\": dial tcp 172.31.27.156:6443: connect: connection refused" interval="200ms" Jul 12 00:24:13.000647 kubelet[2371]: I0712 00:24:13.000596 2371 factory.go:221] Registration of the containerd container factory successfully Jul 12 00:24:13.005000 audit[2382]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.005000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcd277e20 a2=0 a3=1 items=0 ppid=2371 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:24:13.016000 audit[2385]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.016000 audit[2385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd906ae50 a2=0 a3=1 items=0 ppid=2371 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.016000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:24:13.029000 audit[2388]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.029000 audit[2388]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcae8fb70 a2=0 a3=1 items=0 ppid=2371 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:24:13.036722 kubelet[2371]: I0712 00:24:13.036685 2371 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 12 00:24:13.036906 kubelet[2371]: I0712 00:24:13.036882 2371 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 12 00:24:13.037061 kubelet[2371]: I0712 00:24:13.037039 2371 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:24:13.038000 audit[2390]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.038000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff30a55e0 a2=0 a3=1 items=0 ppid=2371 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.038000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:24:13.039858 kubelet[2371]: I0712 00:24:13.039825 2371 policy_none.go:49] "None policy: Start" Jul 12 00:24:13.040025 kubelet[2371]: I0712 00:24:13.040003 2371 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 12 00:24:13.040165 kubelet[2371]: I0712 00:24:13.040145 2371 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:24:13.048785 systemd[1]: Created slice kubepods.slice. Jul 12 00:24:13.061478 systemd[1]: Created slice kubepods-burstable.slice. Jul 12 00:24:13.067767 systemd[1]: Created slice kubepods-besteffort.slice. Jul 12 00:24:13.074851 kubelet[2371]: I0712 00:24:13.074805 2371 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 12 00:24:13.074000 audit[2371]: AVC avc: denied { mac_admin } for pid=2371 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.074000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:13.074000 audit[2371]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a380f0 a1=400088b0e0 a2=4000a380c0 a3=25 items=0 ppid=1 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.074000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:13.075918 kubelet[2371]: I0712 00:24:13.075714 2371 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 12 00:24:13.076084 kubelet[2371]: I0712 00:24:13.076042 2371 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:24:13.076160 kubelet[2371]: I0712 00:24:13.076080 2371 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:24:13.076725 kubelet[2371]: I0712 00:24:13.076679 2371 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:24:13.082000 audit[2393]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.082000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffee02e160 a2=0 a3=1 items=0 ppid=2371 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.082000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 12 00:24:13.087000 audit[2397]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.087000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd5269e80 a2=0 a3=1 items=0 ppid=2371 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.087000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:24:13.087827 kubelet[2371]: E0712 00:24:13.080564 2371 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 12 00:24:13.087827 kubelet[2371]: E0712 00:24:13.080638 2371 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-156\" not found" Jul 12 00:24:13.087827 kubelet[2371]: I0712 00:24:13.084629 2371 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 12 00:24:13.088775 kubelet[2371]: I0712 00:24:13.088726 2371 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 12 00:24:13.088775 kubelet[2371]: I0712 00:24:13.088773 2371 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 12 00:24:13.089025 kubelet[2371]: I0712 00:24:13.088803 2371 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 12 00:24:13.089025 kubelet[2371]: I0712 00:24:13.088818 2371 kubelet.go:2382] "Starting kubelet main sync loop" Jul 12 00:24:13.089025 kubelet[2371]: E0712 00:24:13.088890 2371 kubelet.go:2406] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Jul 12 00:24:13.090305 kubelet[2371]: W0712 00:24:13.090214 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.27.156:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:13.090459 kubelet[2371]: E0712 00:24:13.090314 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.27.156:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:13.092000 audit[2398]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.092000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9d4f820 a2=0 a3=1 items=0 ppid=2371 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:24:13.093000 audit[2399]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.093000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffe489610 a2=0 a3=1 items=0 ppid=2371 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.093000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:24:13.095000 audit[2400]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.095000 audit[2400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda3c10f0 a2=0 a3=1 items=0 ppid=2371 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.095000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:24:13.097000 audit[2401]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2401 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.097000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffce821240 a2=0 a3=1 items=0 ppid=2371 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:24:13.097000 audit[2402]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.097000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff25d4d00 a2=0 a3=1 items=0 ppid=2371 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:24:13.100000 audit[2403]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2403 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.100000 audit[2403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe602bfa0 a2=0 a3=1 items=0 ppid=2371 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:24:13.116006 kubelet[2371]: E0712 00:24:13.115859 2371 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.27.156:6443/api/v1/namespaces/default/events\": dial tcp 172.31.27.156:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-27-156.1851593e0742bfb9 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-27-156,UID:ip-172-31-27-156,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-27-156,},FirstTimestamp:2025-07-12 00:24:12.968492985 +0000 UTC m=+1.349173480,LastTimestamp:2025-07-12 00:24:12.968492985 +0000 UTC m=+1.349173480,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-27-156,}" Jul 12 00:24:13.178725 kubelet[2371]: I0712 00:24:13.178677 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-156" Jul 12 00:24:13.179666 kubelet[2371]: E0712 00:24:13.179610 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.156:6443/api/v1/nodes\": dial tcp 172.31.27.156:6443: connect: connection refused" node="ip-172-31-27-156" Jul 12 00:24:13.196582 kubelet[2371]: I0712 00:24:13.196528 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:13.196752 kubelet[2371]: I0712 00:24:13.196596 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:13.196752 kubelet[2371]: I0712 00:24:13.196636 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:13.196752 kubelet[2371]: I0712 00:24:13.196676 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:13.196752 kubelet[2371]: I0712 00:24:13.196719 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:13.196993 kubelet[2371]: I0712 00:24:13.196756 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f2c9d525a16920d77ad71811371d5eb8-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-156\" (UID: \"f2c9d525a16920d77ad71811371d5eb8\") " pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:13.196993 kubelet[2371]: I0712 00:24:13.196791 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3b29aec70154796c5462c1aeac32efe4-ca-certs\") pod \"kube-apiserver-ip-172-31-27-156\" (UID: \"3b29aec70154796c5462c1aeac32efe4\") " pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:13.196993 kubelet[2371]: I0712 00:24:13.196825 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3b29aec70154796c5462c1aeac32efe4-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-156\" (UID: \"3b29aec70154796c5462c1aeac32efe4\") " pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:13.196993 kubelet[2371]: I0712 00:24:13.196865 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3b29aec70154796c5462c1aeac32efe4-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-156\" (UID: \"3b29aec70154796c5462c1aeac32efe4\") " pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:13.199461 kubelet[2371]: E0712 00:24:13.199413 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.156:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-156?timeout=10s\": dial tcp 172.31.27.156:6443: connect: connection refused" interval="400ms" Jul 12 00:24:13.205633 systemd[1]: Created slice kubepods-burstable-pod3b29aec70154796c5462c1aeac32efe4.slice. Jul 12 00:24:13.221787 kubelet[2371]: E0712 00:24:13.220972 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:13.224923 systemd[1]: Created slice kubepods-burstable-podd439e0048f1fbd3e8a527102e8db5292.slice. Jul 12 00:24:13.230885 kubelet[2371]: E0712 00:24:13.230849 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:13.234071 systemd[1]: Created slice kubepods-burstable-podf2c9d525a16920d77ad71811371d5eb8.slice. Jul 12 00:24:13.238107 kubelet[2371]: E0712 00:24:13.238069 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:13.382568 kubelet[2371]: I0712 00:24:13.382453 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-156" Jul 12 00:24:13.383428 kubelet[2371]: E0712 00:24:13.383362 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.156:6443/api/v1/nodes\": dial tcp 172.31.27.156:6443: connect: connection refused" node="ip-172-31-27-156" Jul 12 00:24:13.523884 env[1813]: time="2025-07-12T00:24:13.523383748Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-156,Uid:3b29aec70154796c5462c1aeac32efe4,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:13.533118 env[1813]: time="2025-07-12T00:24:13.532727210Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-156,Uid:d439e0048f1fbd3e8a527102e8db5292,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:13.540523 env[1813]: time="2025-07-12T00:24:13.540424009Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-156,Uid:f2c9d525a16920d77ad71811371d5eb8,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:13.601167 kubelet[2371]: E0712 00:24:13.601078 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.156:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-156?timeout=10s\": dial tcp 172.31.27.156:6443: connect: connection refused" interval="800ms" Jul 12 00:24:13.670580 amazon-ssm-agent[1795]: 2025-07-12 00:24:13 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Jul 12 00:24:13.785885 kubelet[2371]: I0712 00:24:13.785826 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-156" Jul 12 00:24:13.786417 kubelet[2371]: E0712 00:24:13.786356 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.156:6443/api/v1/nodes\": dial tcp 172.31.27.156:6443: connect: connection refused" node="ip-172-31-27-156" Jul 12 00:24:13.897289 kubelet[2371]: W0712 00:24:13.897135 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.27.156:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:13.897289 kubelet[2371]: E0712 00:24:13.897245 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.27.156:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:14.020871 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1435839745.mount: Deactivated successfully. Jul 12 00:24:14.039228 env[1813]: time="2025-07-12T00:24:14.039135446Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.041610 env[1813]: time="2025-07-12T00:24:14.041526667Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.047977 env[1813]: time="2025-07-12T00:24:14.047917561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.050962 env[1813]: time="2025-07-12T00:24:14.050880486Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.052932 env[1813]: time="2025-07-12T00:24:14.052856706Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.058052 env[1813]: time="2025-07-12T00:24:14.057992595Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.060348 env[1813]: time="2025-07-12T00:24:14.060289533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.062043 env[1813]: time="2025-07-12T00:24:14.061985640Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.063861 env[1813]: time="2025-07-12T00:24:14.063786896Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.070771 env[1813]: time="2025-07-12T00:24:14.070706716Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.075024 env[1813]: time="2025-07-12T00:24:14.074964650Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.077731 env[1813]: time="2025-07-12T00:24:14.077678366Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:14.146240 env[1813]: time="2025-07-12T00:24:14.142614165Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:14.146240 env[1813]: time="2025-07-12T00:24:14.142679826Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:14.146240 env[1813]: time="2025-07-12T00:24:14.142705916Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:14.146240 env[1813]: time="2025-07-12T00:24:14.143078535Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47 pid=2412 runtime=io.containerd.runc.v2 Jul 12 00:24:14.162062 env[1813]: time="2025-07-12T00:24:14.153161098Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:14.162062 env[1813]: time="2025-07-12T00:24:14.153285480Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:14.162062 env[1813]: time="2025-07-12T00:24:14.153312470Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:14.162062 env[1813]: time="2025-07-12T00:24:14.153530104Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a pid=2428 runtime=io.containerd.runc.v2 Jul 12 00:24:14.186853 env[1813]: time="2025-07-12T00:24:14.186686929Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:14.187055 env[1813]: time="2025-07-12T00:24:14.186879326Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:14.187055 env[1813]: time="2025-07-12T00:24:14.186953439Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:14.187390 env[1813]: time="2025-07-12T00:24:14.187303896Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0daade5dc6e3857569cf8c6c28b93c07054248116c1b09dc9088d59a82ed6ca pid=2454 runtime=io.containerd.runc.v2 Jul 12 00:24:14.197373 systemd[1]: Started cri-containerd-75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a.scope. Jul 12 00:24:14.211253 systemd[1]: Started cri-containerd-abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47.scope. Jul 12 00:24:14.240973 systemd[1]: Started cri-containerd-a0daade5dc6e3857569cf8c6c28b93c07054248116c1b09dc9088d59a82ed6ca.scope. Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313882 kernel: kauditd_printk_skb: 219 callbacks suppressed Jul 12 00:24:14.314056 kernel: audit: type=1400 audit(1752279854.309:458): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.326241 kernel: audit: type=1400 audit(1752279854.309:459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338988 kernel: audit: type=1400 audit(1752279854.309:460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.353295 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:24:14.353439 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 12 00:24:14.353491 kernel: audit: type=1400 audit(1752279854.309:461): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.353543 kernel: audit: backlog limit exceeded Jul 12 00:24:14.354106 kubelet[2371]: W0712 00:24:14.353967 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.27.156:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-156&limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:14.354106 kubelet[2371]: E0712 00:24:14.354061 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.27.156:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-156&limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.362283 kernel: audit: type=1400 audit(1752279854.309:462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.362426 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.373181 kernel: audit: type=1400 audit(1752279854.309:463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.309000 audit: BPF prog-id=64 op=LOAD Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2412 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162643663313331376662353064653130393866646664613134336134 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2412 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162643663313331376662353064653130393866646664613134336134 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.313000 audit: BPF prog-id=65 op=LOAD Jul 12 00:24:14.313000 audit[2440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2412 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162643663313331376662353064653130393866646664613134336134 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit: BPF prog-id=66 op=LOAD Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit: BPF prog-id=67 op=LOAD Jul 12 00:24:14.338000 audit[2440]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2412 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162643663313331376662353064653130393866646664613134336134 Jul 12 00:24:14.338000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2454 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646161646535646336653338353735363963663863366332386239 Jul 12 00:24:14.338000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2454 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646161646535646336653338353735363963663863366332386239 Jul 12 00:24:14.338000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.338000 audit: BPF prog-id=67 op=UNLOAD Jul 12 00:24:14.353000 audit: BPF prog-id=65 op=UNLOAD Jul 12 00:24:14.338000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.376000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.376000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2428 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735303934623438346362393732613966643339613862633535663766 Jul 12 00:24:14.376000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.376000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2428 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735303934623438346362393732613966643339613862633535663766 Jul 12 00:24:14.376000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.376000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.376000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.376000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2428 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735303934623438346362393732613966643339613862633535663766 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit: BPF prog-id=72 op=LOAD Jul 12 00:24:14.385000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2428 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735303934623438346362393732613966643339613862633535663766 Jul 12 00:24:14.385000 audit: BPF prog-id=72 op=UNLOAD Jul 12 00:24:14.385000 audit: BPF prog-id=71 op=UNLOAD Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.385000 audit: BPF prog-id=73 op=LOAD Jul 12 00:24:14.385000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2428 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735303934623438346362393732613966643339613862633535663766 Jul 12 00:24:14.338000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2454 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646161646535646336653338353735363963663863366332386239 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit: BPF prog-id=74 op=LOAD Jul 12 00:24:14.388000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2454 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646161646535646336653338353735363963663863366332386239 Jul 12 00:24:14.388000 audit: BPF prog-id=74 op=UNLOAD Jul 12 00:24:14.388000 audit: BPF prog-id=69 op=UNLOAD Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { perfmon } for pid=2479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit[2479]: AVC avc: denied { bpf } for pid=2479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.388000 audit: BPF prog-id=75 op=LOAD Jul 12 00:24:14.388000 audit[2479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2454 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130646161646535646336653338353735363963663863366332386239 Jul 12 00:24:14.402844 kubelet[2371]: E0712 00:24:14.402749 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.156:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-156?timeout=10s\": dial tcp 172.31.27.156:6443: connect: connection refused" interval="1.6s" Jul 12 00:24:14.431256 kubelet[2371]: W0712 00:24:14.430824 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.27.156:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:14.431256 kubelet[2371]: E0712 00:24:14.430920 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.27.156:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:14.464608 env[1813]: time="2025-07-12T00:24:14.464546742Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-156,Uid:f2c9d525a16920d77ad71811371d5eb8,Namespace:kube-system,Attempt:0,} returns sandbox id \"75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a\"" Jul 12 00:24:14.470636 env[1813]: time="2025-07-12T00:24:14.470567021Z" level=info msg="CreateContainer within sandbox \"75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 12 00:24:14.474228 env[1813]: time="2025-07-12T00:24:14.474112084Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-156,Uid:d439e0048f1fbd3e8a527102e8db5292,Namespace:kube-system,Attempt:0,} returns sandbox id \"abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47\"" Jul 12 00:24:14.480296 env[1813]: time="2025-07-12T00:24:14.480153061Z" level=info msg="CreateContainer within sandbox \"abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 12 00:24:14.493009 env[1813]: time="2025-07-12T00:24:14.492930057Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-156,Uid:3b29aec70154796c5462c1aeac32efe4,Namespace:kube-system,Attempt:0,} returns sandbox id \"a0daade5dc6e3857569cf8c6c28b93c07054248116c1b09dc9088d59a82ed6ca\"" Jul 12 00:24:14.500142 env[1813]: time="2025-07-12T00:24:14.500064353Z" level=info msg="CreateContainer within sandbox \"a0daade5dc6e3857569cf8c6c28b93c07054248116c1b09dc9088d59a82ed6ca\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 12 00:24:14.534562 env[1813]: time="2025-07-12T00:24:14.534481562Z" level=info msg="CreateContainer within sandbox \"abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c\"" Jul 12 00:24:14.535884 env[1813]: time="2025-07-12T00:24:14.535822698Z" level=info msg="CreateContainer within sandbox \"75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6\"" Jul 12 00:24:14.536179 env[1813]: time="2025-07-12T00:24:14.536016415Z" level=info msg="StartContainer for \"146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c\"" Jul 12 00:24:14.537018 env[1813]: time="2025-07-12T00:24:14.536967271Z" level=info msg="StartContainer for \"8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6\"" Jul 12 00:24:14.572550 env[1813]: time="2025-07-12T00:24:14.565028127Z" level=info msg="CreateContainer within sandbox \"a0daade5dc6e3857569cf8c6c28b93c07054248116c1b09dc9088d59a82ed6ca\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6071f1acc28d631cb2bd144419ddf98116e24fc882f0f2795fbf7073d5c1ed88\"" Jul 12 00:24:14.575998 env[1813]: time="2025-07-12T00:24:14.575919669Z" level=info msg="StartContainer for \"6071f1acc28d631cb2bd144419ddf98116e24fc882f0f2795fbf7073d5c1ed88\"" Jul 12 00:24:14.581521 systemd[1]: Started cri-containerd-146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c.scope. Jul 12 00:24:14.584566 kubelet[2371]: W0712 00:24:14.584401 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.27.156:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.156:6443: connect: connection refused Jul 12 00:24:14.584566 kubelet[2371]: E0712 00:24:14.584503 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.27.156:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:14.592530 kubelet[2371]: I0712 00:24:14.592396 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-156" Jul 12 00:24:14.593066 kubelet[2371]: E0712 00:24:14.592994 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.156:6443/api/v1/nodes\": dial tcp 172.31.27.156:6443: connect: connection refused" node="ip-172-31-27-156" Jul 12 00:24:14.612645 systemd[1]: Started cri-containerd-8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6.scope. Jul 12 00:24:14.635040 systemd[1]: Started cri-containerd-6071f1acc28d631cb2bd144419ddf98116e24fc882f0f2795fbf7073d5c1ed88.scope. Jul 12 00:24:14.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.652000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.654000 audit: BPF prog-id=76 op=LOAD Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2412 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134363633326631636130656330653133393132316134386266626662 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2412 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134363633326631636130656330653133393132316134386266626662 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit: BPF prog-id=77 op=LOAD Jul 12 00:24:14.655000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2412 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134363633326631636130656330653133393132316134386266626662 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit: BPF prog-id=78 op=LOAD Jul 12 00:24:14.655000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2412 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134363633326631636130656330653133393132316134386266626662 Jul 12 00:24:14.655000 audit: BPF prog-id=78 op=UNLOAD Jul 12 00:24:14.655000 audit: BPF prog-id=77 op=UNLOAD Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.655000 audit: BPF prog-id=79 op=LOAD Jul 12 00:24:14.655000 audit[2548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2412 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134363633326631636130656330653133393132316134386266626662 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.696000 audit: BPF prog-id=80 op=LOAD Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2454 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373166316163633238643633316362326264313434343139646466 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2454 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373166316163633238643633316362326264313434343139646466 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit: BPF prog-id=81 op=LOAD Jul 12 00:24:14.697000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2454 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373166316163633238643633316362326264313434343139646466 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.697000 audit: BPF prog-id=82 op=LOAD Jul 12 00:24:14.697000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2454 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.697000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373166316163633238643633316362326264313434343139646466 Jul 12 00:24:14.697000 audit: BPF prog-id=82 op=UNLOAD Jul 12 00:24:14.697000 audit: BPF prog-id=81 op=UNLOAD Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.698000 audit: BPF prog-id=83 op=LOAD Jul 12 00:24:14.698000 audit[2583]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2454 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630373166316163633238643633316362326264313434343139646466 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.726000 audit: BPF prog-id=84 op=LOAD Jul 12 00:24:14.727000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.727000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2428 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863663532643265646236313033346562376432666634656661336363 Jul 12 00:24:14.727000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.727000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2428 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863663532643265646236313033346562376432666634656661336363 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit: BPF prog-id=85 op=LOAD Jul 12 00:24:14.728000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2428 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863663532643265646236313033346562376432666634656661336363 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit: BPF prog-id=86 op=LOAD Jul 12 00:24:14.728000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2428 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863663532643265646236313033346562376432666634656661336363 Jul 12 00:24:14.728000 audit: BPF prog-id=86 op=UNLOAD Jul 12 00:24:14.728000 audit: BPF prog-id=85 op=UNLOAD Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:14.728000 audit: BPF prog-id=87 op=LOAD Jul 12 00:24:14.728000 audit[2549]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2428 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863663532643265646236313033346562376432666634656661336363 Jul 12 00:24:14.756808 env[1813]: time="2025-07-12T00:24:14.756720507Z" level=info msg="StartContainer for \"146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c\" returns successfully" Jul 12 00:24:14.773138 env[1813]: time="2025-07-12T00:24:14.773059027Z" level=info msg="StartContainer for \"6071f1acc28d631cb2bd144419ddf98116e24fc882f0f2795fbf7073d5c1ed88\" returns successfully" Jul 12 00:24:14.808047 env[1813]: time="2025-07-12T00:24:14.807947953Z" level=info msg="StartContainer for \"8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6\" returns successfully" Jul 12 00:24:14.955245 kubelet[2371]: E0712 00:24:14.955074 2371 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.27.156:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.156:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:24:15.101369 kubelet[2371]: E0712 00:24:15.101317 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:15.107661 kubelet[2371]: E0712 00:24:15.107607 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:15.113989 kubelet[2371]: E0712 00:24:15.113937 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:16.114895 kubelet[2371]: E0712 00:24:16.114837 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:16.118925 kubelet[2371]: E0712 00:24:16.118879 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:16.197502 kubelet[2371]: I0712 00:24:16.197409 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-156" Jul 12 00:24:17.117228 kubelet[2371]: E0712 00:24:17.117147 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:17.120135 kubelet[2371]: E0712 00:24:17.120075 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:18.219000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:18.219000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006eec780 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:24:18.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:24:18.224000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7346 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:18.224000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400342e9f0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:24:18.224000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:24:18.225000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:18.225000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4006eec900 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:24:18.225000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:24:18.237000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:18.237000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=400642da80 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:24:18.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:24:18.391000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:18.392502 update_engine[1809]: I0712 00:24:18.392275 1809 update_attempter.cc:509] Updating boot flags... Jul 12 00:24:18.391000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40052c4820 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:24:18.391000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:24:18.392000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:18.392000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40047ab6b0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:24:18.392000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:24:18.458937 kubelet[2371]: E0712 00:24:18.458855 2371 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-27-156\" not found" node="ip-172-31-27-156" Jul 12 00:24:18.675660 kubelet[2371]: I0712 00:24:18.675574 2371 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-156" Jul 12 00:24:18.697880 kubelet[2371]: I0712 00:24:18.697802 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:18.845315 kubelet[2371]: E0712 00:24:18.845243 2371 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-27-156\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:18.845315 kubelet[2371]: I0712 00:24:18.845320 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:18.862238 kubelet[2371]: E0712 00:24:18.859956 2371 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-156\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:18.862238 kubelet[2371]: I0712 00:24:18.860006 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:18.892703 kubelet[2371]: E0712 00:24:18.892597 2371 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-27-156\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:18.981969 kubelet[2371]: I0712 00:24:18.979856 2371 apiserver.go:52] "Watching apiserver" Jul 12 00:24:19.106388 kubelet[2371]: I0712 00:24:19.100337 2371 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 12 00:24:19.323249 kernel: kauditd_printk_skb: 422 callbacks suppressed Jul 12 00:24:19.323371 kernel: audit: type=1400 audit(1752279859.319:560): avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:19.319000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:19.321000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:19.345606 kernel: audit: type=1400 audit(1752279859.321:561): avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:19.321000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40001adac0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:19.364524 kernel: audit: type=1300 audit(1752279859.321:561): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40001adac0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:19.321000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:19.380554 kernel: audit: type=1327 audit(1752279859.321:561): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:19.319000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000e9d470 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:19.396778 kernel: audit: type=1300 audit(1752279859.319:560): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000e9d470 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:19.319000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:19.407393 kernel: audit: type=1327 audit(1752279859.319:560): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:21.123695 systemd[1]: Reloading. Jul 12 00:24:21.248788 kubelet[2371]: I0712 00:24:21.248731 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:21.361531 /usr/lib/systemd/system-generators/torcx-generator[2848]: time="2025-07-12T00:24:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:24:21.362165 /usr/lib/systemd/system-generators/torcx-generator[2848]: time="2025-07-12T00:24:21Z" level=info msg="torcx already run" Jul 12 00:24:21.566520 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:24:21.566776 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:24:21.607992 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:24:21.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.823410 kernel: audit: type=1400 audit(1752279861.806:562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.823547 kernel: audit: type=1400 audit(1752279861.806:563): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.823604 kernel: audit: type=1400 audit(1752279861.807:564): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.838944 kernel: audit: type=1400 audit(1752279861.807:565): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.814000 audit: BPF prog-id=88 op=LOAD Jul 12 00:24:21.814000 audit: BPF prog-id=64 op=UNLOAD Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.822000 audit: BPF prog-id=89 op=LOAD Jul 12 00:24:21.822000 audit: BPF prog-id=76 op=UNLOAD Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.829000 audit: BPF prog-id=90 op=LOAD Jul 12 00:24:21.829000 audit: BPF prog-id=70 op=UNLOAD Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.839000 audit: BPF prog-id=91 op=LOAD Jul 12 00:24:21.839000 audit: BPF prog-id=80 op=UNLOAD Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit: BPF prog-id=92 op=LOAD Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.841000 audit: BPF prog-id=93 op=LOAD Jul 12 00:24:21.841000 audit: BPF prog-id=49 op=UNLOAD Jul 12 00:24:21.841000 audit: BPF prog-id=50 op=UNLOAD Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.845000 audit: BPF prog-id=94 op=LOAD Jul 12 00:24:21.845000 audit: BPF prog-id=66 op=UNLOAD Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit: BPF prog-id=95 op=LOAD Jul 12 00:24:21.847000 audit: BPF prog-id=51 op=UNLOAD Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.848000 audit: BPF prog-id=96 op=LOAD Jul 12 00:24:21.848000 audit: BPF prog-id=52 op=UNLOAD Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.851000 audit: BPF prog-id=97 op=LOAD Jul 12 00:24:21.851000 audit: BPF prog-id=53 op=UNLOAD Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit: BPF prog-id=98 op=LOAD Jul 12 00:24:21.855000 audit: BPF prog-id=54 op=UNLOAD Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit: BPF prog-id=99 op=LOAD Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.855000 audit: BPF prog-id=100 op=LOAD Jul 12 00:24:21.856000 audit: BPF prog-id=55 op=UNLOAD Jul 12 00:24:21.856000 audit: BPF prog-id=56 op=UNLOAD Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.856000 audit: BPF prog-id=101 op=LOAD Jul 12 00:24:21.857000 audit: BPF prog-id=84 op=UNLOAD Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.858000 audit: BPF prog-id=102 op=LOAD Jul 12 00:24:21.858000 audit: BPF prog-id=57 op=UNLOAD Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit: BPF prog-id=103 op=LOAD Jul 12 00:24:21.860000 audit: BPF prog-id=58 op=UNLOAD Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit: BPF prog-id=104 op=LOAD Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.860000 audit: BPF prog-id=105 op=LOAD Jul 12 00:24:21.860000 audit: BPF prog-id=59 op=UNLOAD Jul 12 00:24:21.860000 audit: BPF prog-id=60 op=UNLOAD Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit: BPF prog-id=106 op=LOAD Jul 12 00:24:21.862000 audit: BPF prog-id=61 op=UNLOAD Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit: BPF prog-id=107 op=LOAD Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:21.862000 audit: BPF prog-id=108 op=LOAD Jul 12 00:24:21.862000 audit: BPF prog-id=62 op=UNLOAD Jul 12 00:24:21.862000 audit: BPF prog-id=63 op=UNLOAD Jul 12 00:24:21.905519 kubelet[2371]: I0712 00:24:21.903418 2371 dynamic_cafile_content.go:175] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:24:21.904457 systemd[1]: Stopping kubelet.service... Jul 12 00:24:21.930108 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:24:21.930714 systemd[1]: Stopped kubelet.service. Jul 12 00:24:21.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:21.931096 systemd[1]: kubelet.service: Consumed 2.114s CPU time. Jul 12 00:24:21.935582 systemd[1]: Starting kubelet.service... Jul 12 00:24:22.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:22.271505 systemd[1]: Started kubelet.service. Jul 12 00:24:22.400501 kubelet[2909]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:24:22.401083 kubelet[2909]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 12 00:24:22.401348 kubelet[2909]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:24:22.401766 kubelet[2909]: I0712 00:24:22.401691 2909 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:24:22.414998 kubelet[2909]: I0712 00:24:22.414936 2909 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 12 00:24:22.415236 kubelet[2909]: I0712 00:24:22.415169 2909 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:24:22.415899 kubelet[2909]: I0712 00:24:22.415868 2909 server.go:954] "Client rotation is on, will bootstrap in background" Jul 12 00:24:22.418496 kubelet[2909]: I0712 00:24:22.418457 2909 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 12 00:24:22.423030 kubelet[2909]: I0712 00:24:22.422988 2909 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:24:22.429922 kubelet[2909]: E0712 00:24:22.429874 2909 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:24:22.430123 kubelet[2909]: I0712 00:24:22.430099 2909 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:24:22.436502 kubelet[2909]: I0712 00:24:22.436451 2909 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:24:22.437174 kubelet[2909]: I0712 00:24:22.437124 2909 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:24:22.437821 kubelet[2909]: I0712 00:24:22.437357 2909 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-156","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:24:22.438128 kubelet[2909]: I0712 00:24:22.438096 2909 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:24:22.438327 kubelet[2909]: I0712 00:24:22.438306 2909 container_manager_linux.go:304] "Creating device plugin manager" Jul 12 00:24:22.438554 kubelet[2909]: I0712 00:24:22.438532 2909 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:24:22.438933 kubelet[2909]: I0712 00:24:22.438909 2909 kubelet.go:446] "Attempting to sync node with API server" Jul 12 00:24:22.439100 kubelet[2909]: I0712 00:24:22.439077 2909 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:24:22.439281 kubelet[2909]: I0712 00:24:22.439260 2909 kubelet.go:352] "Adding apiserver pod source" Jul 12 00:24:22.439435 kubelet[2909]: I0712 00:24:22.439413 2909 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:24:22.451670 kubelet[2909]: I0712 00:24:22.451630 2909 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:24:22.452667 kubelet[2909]: I0712 00:24:22.452636 2909 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 12 00:24:22.453598 kubelet[2909]: I0712 00:24:22.453569 2909 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 12 00:24:22.453815 kubelet[2909]: I0712 00:24:22.453794 2909 server.go:1287] "Started kubelet" Jul 12 00:24:22.458000 audit[2909]: AVC avc: denied { mac_admin } for pid=2909 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:22.458000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:22.458000 audit[2909]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008b0600 a1=40007ace10 a2=40008b05d0 a3=25 items=0 ppid=1 pid=2909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:22.458000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:22.461357 kubelet[2909]: I0712 00:24:22.461286 2909 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:24:22.462000 audit[2909]: AVC avc: denied { mac_admin } for pid=2909 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:22.462000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:22.467435 kubelet[2909]: I0712 00:24:22.461677 2909 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:24:22.469870 kubelet[2909]: I0712 00:24:22.469835 2909 server.go:479] "Adding debug handlers to kubelet server" Jul 12 00:24:22.475614 kubelet[2909]: I0712 00:24:22.461777 2909 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:24:22.476300 kubelet[2909]: I0712 00:24:22.476257 2909 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:24:22.462000 audit[2909]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007532e0 a1=40007ace40 a2=40008b0720 a3=25 items=0 ppid=1 pid=2909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:22.462000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:22.478172 kubelet[2909]: I0712 00:24:22.478116 2909 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 12 00:24:22.478486 kubelet[2909]: I0712 00:24:22.478442 2909 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:24:22.485544 kubelet[2909]: I0712 00:24:22.485469 2909 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 12 00:24:22.515144 kubelet[2909]: I0712 00:24:22.485770 2909 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 12 00:24:22.516775 kubelet[2909]: E0712 00:24:22.485843 2909 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-156\" not found" Jul 12 00:24:22.516942 kubelet[2909]: I0712 00:24:22.505115 2909 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:24:22.517448 kubelet[2909]: I0712 00:24:22.517424 2909 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:24:22.517591 kubelet[2909]: I0712 00:24:22.514207 2909 factory.go:221] Registration of the systemd container factory successfully Jul 12 00:24:22.517850 kubelet[2909]: I0712 00:24:22.517815 2909 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:24:22.556664 kubelet[2909]: E0712 00:24:22.553448 2909 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:24:22.563351 kubelet[2909]: I0712 00:24:22.563281 2909 factory.go:221] Registration of the containerd container factory successfully Jul 12 00:24:22.584592 kubelet[2909]: I0712 00:24:22.584526 2909 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 12 00:24:22.592784 kubelet[2909]: I0712 00:24:22.592742 2909 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 12 00:24:22.593058 kubelet[2909]: I0712 00:24:22.593037 2909 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 12 00:24:22.593185 kubelet[2909]: I0712 00:24:22.593163 2909 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 12 00:24:22.593354 kubelet[2909]: I0712 00:24:22.593334 2909 kubelet.go:2382] "Starting kubelet main sync loop" Jul 12 00:24:22.593532 kubelet[2909]: E0712 00:24:22.593494 2909 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 12 00:24:22.693961 kubelet[2909]: E0712 00:24:22.693921 2909 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 12 00:24:22.694896 kubelet[2909]: I0712 00:24:22.694869 2909 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 12 00:24:22.695073 kubelet[2909]: I0712 00:24:22.695030 2909 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 12 00:24:22.695238 kubelet[2909]: I0712 00:24:22.695175 2909 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:24:22.695690 kubelet[2909]: I0712 00:24:22.695662 2909 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 12 00:24:22.695905 kubelet[2909]: I0712 00:24:22.695860 2909 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 12 00:24:22.696015 kubelet[2909]: I0712 00:24:22.695995 2909 policy_none.go:49] "None policy: Start" Jul 12 00:24:22.696124 kubelet[2909]: I0712 00:24:22.696104 2909 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 12 00:24:22.696309 kubelet[2909]: I0712 00:24:22.696290 2909 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:24:22.696649 kubelet[2909]: I0712 00:24:22.696628 2909 state_mem.go:75] "Updated machine memory state" Jul 12 00:24:22.704910 kubelet[2909]: I0712 00:24:22.704876 2909 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 12 00:24:22.703000 audit[2909]: AVC avc: denied { mac_admin } for pid=2909 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:22.703000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:22.703000 audit[2909]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000565980 a1=4000dcf680 a2=4000565950 a3=25 items=0 ppid=1 pid=2909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:22.703000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:22.705690 kubelet[2909]: I0712 00:24:22.705653 2909 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 12 00:24:22.706134 kubelet[2909]: I0712 00:24:22.706107 2909 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:24:22.706496 kubelet[2909]: I0712 00:24:22.706415 2909 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:24:22.713225 kubelet[2909]: I0712 00:24:22.713143 2909 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:24:22.714069 kubelet[2909]: E0712 00:24:22.714032 2909 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 12 00:24:22.838000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:22.838000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bdd120 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:22.838000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:22.840000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:22.840000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bdd2e0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:22.840000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:22.842000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:22.842000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bdd4a0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:22.842000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:22.844000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:22.844000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b41b00 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:22.844000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:22.851634 kubelet[2909]: I0712 00:24:22.851597 2909 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-156" Jul 12 00:24:22.875259 kubelet[2909]: I0712 00:24:22.875176 2909 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-27-156" Jul 12 00:24:22.875698 kubelet[2909]: I0712 00:24:22.875675 2909 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-156" Jul 12 00:24:22.895150 kubelet[2909]: I0712 00:24:22.895080 2909 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:22.895400 kubelet[2909]: I0712 00:24:22.895364 2909 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:22.895648 kubelet[2909]: I0712 00:24:22.895126 2909 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:22.919906 kubelet[2909]: I0712 00:24:22.919833 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f2c9d525a16920d77ad71811371d5eb8-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-156\" (UID: \"f2c9d525a16920d77ad71811371d5eb8\") " pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:22.919906 kubelet[2909]: I0712 00:24:22.919905 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:22.920121 kubelet[2909]: I0712 00:24:22.919946 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:22.920121 kubelet[2909]: I0712 00:24:22.919985 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:22.920121 kubelet[2909]: I0712 00:24:22.920046 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:22.920121 kubelet[2909]: I0712 00:24:22.920085 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d439e0048f1fbd3e8a527102e8db5292-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-156\" (UID: \"d439e0048f1fbd3e8a527102e8db5292\") " pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:22.920420 kubelet[2909]: I0712 00:24:22.920121 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3b29aec70154796c5462c1aeac32efe4-ca-certs\") pod \"kube-apiserver-ip-172-31-27-156\" (UID: \"3b29aec70154796c5462c1aeac32efe4\") " pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:22.920420 kubelet[2909]: I0712 00:24:22.920157 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3b29aec70154796c5462c1aeac32efe4-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-156\" (UID: \"3b29aec70154796c5462c1aeac32efe4\") " pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:22.920420 kubelet[2909]: I0712 00:24:22.920216 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3b29aec70154796c5462c1aeac32efe4-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-156\" (UID: \"3b29aec70154796c5462c1aeac32efe4\") " pod="kube-system/kube-apiserver-ip-172-31-27-156" Jul 12 00:24:22.929640 kubelet[2909]: E0712 00:24:22.929593 2909 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-27-156\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-27-156" Jul 12 00:24:23.441428 kubelet[2909]: I0712 00:24:23.441372 2909 apiserver.go:52] "Watching apiserver" Jul 12 00:24:23.517876 kubelet[2909]: I0712 00:24:23.517803 2909 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 12 00:24:23.625353 kubelet[2909]: I0712 00:24:23.623827 2909 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:23.639489 kubelet[2909]: E0712 00:24:23.639421 2909 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-156\" already exists" pod="kube-system/kube-scheduler-ip-172-31-27-156" Jul 12 00:24:23.693981 kubelet[2909]: I0712 00:24:23.693699 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-27-156" podStartSLOduration=2.693647837 podStartE2EDuration="2.693647837s" podCreationTimestamp="2025-07-12 00:24:21 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:23.680625184 +0000 UTC m=+1.394734575" watchObservedRunningTime="2025-07-12 00:24:23.693647837 +0000 UTC m=+1.407757192" Jul 12 00:24:23.693981 kubelet[2909]: I0712 00:24:23.693916 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-27-156" podStartSLOduration=1.6939057640000001 podStartE2EDuration="1.693905764s" podCreationTimestamp="2025-07-12 00:24:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:23.665614797 +0000 UTC m=+1.379724128" watchObservedRunningTime="2025-07-12 00:24:23.693905764 +0000 UTC m=+1.408015107" Jul 12 00:24:23.710873 kubelet[2909]: I0712 00:24:23.710799 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-27-156" podStartSLOduration=1.710749706 podStartE2EDuration="1.710749706s" podCreationTimestamp="2025-07-12 00:24:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:23.709954785 +0000 UTC m=+1.424064104" watchObservedRunningTime="2025-07-12 00:24:23.710749706 +0000 UTC m=+1.424859049" Jul 12 00:24:23.834000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 12 00:24:23.834000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40007e9dc0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:24:23.834000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:27.382609 kubelet[2909]: I0712 00:24:27.382568 2909 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 12 00:24:27.384271 env[1813]: time="2025-07-12T00:24:27.384171316Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 12 00:24:27.385139 kubelet[2909]: I0712 00:24:27.385106 2909 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 12 00:24:28.188446 systemd[1]: Created slice kubepods-besteffort-pod9e3ea818_4bd3_42c8_b96b_f5c23b3b45e1.slice. Jul 12 00:24:28.192937 kubelet[2909]: I0712 00:24:28.192856 2909 status_manager.go:890] "Failed to get status for pod" podUID="9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1" pod="kube-system/kube-proxy-gb5vz" err="pods \"kube-proxy-gb5vz\" is forbidden: User \"system:node:ip-172-31-27-156\" cannot get resource \"pods\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-27-156' and this object" Jul 12 00:24:28.193527 kubelet[2909]: W0712 00:24:28.193464 2909 reflector.go:569] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-27-156" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-156' and this object Jul 12 00:24:28.193792 kubelet[2909]: E0712 00:24:28.193734 2909 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-proxy\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-proxy\" is forbidden: User \"system:node:ip-172-31-27-156\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-27-156' and this object" logger="UnhandledError" Jul 12 00:24:28.194761 kubelet[2909]: W0712 00:24:28.194721 2909 reflector.go:569] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-27-156" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-156' and this object Jul 12 00:24:28.195018 kubelet[2909]: E0712 00:24:28.194971 2909 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-27-156\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-27-156' and this object" logger="UnhandledError" Jul 12 00:24:28.254418 kubelet[2909]: I0712 00:24:28.254336 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1-kube-proxy\") pod \"kube-proxy-gb5vz\" (UID: \"9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1\") " pod="kube-system/kube-proxy-gb5vz" Jul 12 00:24:28.254812 kubelet[2909]: I0712 00:24:28.254779 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1-xtables-lock\") pod \"kube-proxy-gb5vz\" (UID: \"9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1\") " pod="kube-system/kube-proxy-gb5vz" Jul 12 00:24:28.255079 kubelet[2909]: I0712 00:24:28.254987 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dnfcs\" (UniqueName: \"kubernetes.io/projected/9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1-kube-api-access-dnfcs\") pod \"kube-proxy-gb5vz\" (UID: \"9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1\") " pod="kube-system/kube-proxy-gb5vz" Jul 12 00:24:28.255377 kubelet[2909]: I0712 00:24:28.255304 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1-lib-modules\") pod \"kube-proxy-gb5vz\" (UID: \"9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1\") " pod="kube-system/kube-proxy-gb5vz" Jul 12 00:24:28.519083 systemd[1]: Created slice kubepods-besteffort-pod13086ddd_bef0_4b6c_bc96_091c9fb1a562.slice. Jul 12 00:24:28.557106 kubelet[2909]: I0712 00:24:28.556985 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g9bkx\" (UniqueName: \"kubernetes.io/projected/13086ddd-bef0-4b6c-bc96-091c9fb1a562-kube-api-access-g9bkx\") pod \"tigera-operator-747864d56d-6fp8k\" (UID: \"13086ddd-bef0-4b6c-bc96-091c9fb1a562\") " pod="tigera-operator/tigera-operator-747864d56d-6fp8k" Jul 12 00:24:28.557730 kubelet[2909]: I0712 00:24:28.557138 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/13086ddd-bef0-4b6c-bc96-091c9fb1a562-var-lib-calico\") pod \"tigera-operator-747864d56d-6fp8k\" (UID: \"13086ddd-bef0-4b6c-bc96-091c9fb1a562\") " pod="tigera-operator/tigera-operator-747864d56d-6fp8k" Jul 12 00:24:28.668488 kubelet[2909]: I0712 00:24:28.668441 2909 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 12 00:24:28.832760 env[1813]: time="2025-07-12T00:24:28.832603451Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-6fp8k,Uid:13086ddd-bef0-4b6c-bc96-091c9fb1a562,Namespace:tigera-operator,Attempt:0,}" Jul 12 00:24:28.867038 env[1813]: time="2025-07-12T00:24:28.866868679Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:28.867274 env[1813]: time="2025-07-12T00:24:28.867050898Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:28.867274 env[1813]: time="2025-07-12T00:24:28.867134572Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:28.867744 env[1813]: time="2025-07-12T00:24:28.867658424Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880 pid=2959 runtime=io.containerd.runc.v2 Jul 12 00:24:28.900439 systemd[1]: Started cri-containerd-9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880.scope. Jul 12 00:24:28.916721 systemd[1]: run-containerd-runc-k8s.io-9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880-runc.RHKGUA.mount: Deactivated successfully. Jul 12 00:24:28.956243 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 12 00:24:28.956389 kernel: audit: type=1400 audit(1752279868.952:816): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970124 kernel: audit: type=1400 audit(1752279868.952:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970296 kernel: audit: type=1400 audit(1752279868.952:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.985248 kernel: audit: type=1400 audit(1752279868.952:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.993042 kernel: audit: type=1400 audit(1752279868.952:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.993638 kernel: audit: type=1400 audit(1752279868.952:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:29.001082 kernel: audit: type=1400 audit(1752279868.952:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:29.009349 kernel: audit: type=1400 audit(1752279868.952:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:29.024579 kernel: audit: type=1400 audit(1752279868.952:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:29.032298 kernel: audit: type=1400 audit(1752279868.954:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.954000 audit: BPF prog-id=109 op=LOAD Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:28.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961646665326366626533666537323064633135646139363261633465 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:28.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961646665326366626533666537323064633135646139363261633465 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.966000 audit: BPF prog-id=110 op=LOAD Jul 12 00:24:28.966000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:28.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961646665326366626533666537323064633135646139363261633465 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.970000 audit: BPF prog-id=111 op=LOAD Jul 12 00:24:28.970000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:28.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961646665326366626533666537323064633135646139363261633465 Jul 12 00:24:28.977000 audit: BPF prog-id=111 op=UNLOAD Jul 12 00:24:28.977000 audit: BPF prog-id=110 op=UNLOAD Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:28.977000 audit: BPF prog-id=112 op=LOAD Jul 12 00:24:28.977000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:28.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961646665326366626533666537323064633135646139363261633465 Jul 12 00:24:29.065651 env[1813]: time="2025-07-12T00:24:29.065583876Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-6fp8k,Uid:13086ddd-bef0-4b6c-bc96-091c9fb1a562,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880\"" Jul 12 00:24:29.070928 env[1813]: time="2025-07-12T00:24:29.070875116Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 12 00:24:29.357134 kubelet[2909]: E0712 00:24:29.357070 2909 configmap.go:193] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:29.357318 kubelet[2909]: E0712 00:24:29.357203 2909 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1-kube-proxy podName:9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1 nodeName:}" failed. No retries permitted until 2025-07-12 00:24:29.857157568 +0000 UTC m=+7.571266899 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1-kube-proxy") pod "kube-proxy-gb5vz" (UID: "9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1") : failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:29.999703 env[1813]: time="2025-07-12T00:24:29.999638870Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-gb5vz,Uid:9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:30.031592 env[1813]: time="2025-07-12T00:24:30.030751119Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:30.031592 env[1813]: time="2025-07-12T00:24:30.030829258Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:30.031592 env[1813]: time="2025-07-12T00:24:30.030856420Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:30.031592 env[1813]: time="2025-07-12T00:24:30.031090476Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/11647f807fe6b4c9045d141089428c122d58740517c4769daf810afb027da509 pid=3003 runtime=io.containerd.runc.v2 Jul 12 00:24:30.068325 systemd[1]: run-containerd-runc-k8s.io-11647f807fe6b4c9045d141089428c122d58740517c4769daf810afb027da509-runc.nLzvE7.mount: Deactivated successfully. Jul 12 00:24:30.075394 systemd[1]: Started cri-containerd-11647f807fe6b4c9045d141089428c122d58740517c4769daf810afb027da509.scope. Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.116000 audit: BPF prog-id=113 op=LOAD Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3003 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131363437663830376665366234633930343564313431303839343238 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3003 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131363437663830376665366234633930343564313431303839343238 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.117000 audit: BPF prog-id=114 op=LOAD Jul 12 00:24:30.117000 audit[3013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3003 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131363437663830376665366234633930343564313431303839343238 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit: BPF prog-id=115 op=LOAD Jul 12 00:24:30.118000 audit[3013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3003 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131363437663830376665366234633930343564313431303839343238 Jul 12 00:24:30.118000 audit: BPF prog-id=115 op=UNLOAD Jul 12 00:24:30.118000 audit: BPF prog-id=114 op=UNLOAD Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { perfmon } for pid=3013 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit[3013]: AVC avc: denied { bpf } for pid=3013 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.118000 audit: BPF prog-id=116 op=LOAD Jul 12 00:24:30.118000 audit[3013]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3003 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131363437663830376665366234633930343564313431303839343238 Jul 12 00:24:30.146881 env[1813]: time="2025-07-12T00:24:30.146823749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-gb5vz,Uid:9e3ea818-4bd3-42c8-b96b-f5c23b3b45e1,Namespace:kube-system,Attempt:0,} returns sandbox id \"11647f807fe6b4c9045d141089428c122d58740517c4769daf810afb027da509\"" Jul 12 00:24:30.156491 env[1813]: time="2025-07-12T00:24:30.156415167Z" level=info msg="CreateContainer within sandbox \"11647f807fe6b4c9045d141089428c122d58740517c4769daf810afb027da509\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 12 00:24:30.177140 env[1813]: time="2025-07-12T00:24:30.177060506Z" level=info msg="CreateContainer within sandbox \"11647f807fe6b4c9045d141089428c122d58740517c4769daf810afb027da509\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e8268b4da51d695e35da0aa5eded928847cb22d088a6e1adc72cff65940deffa\"" Jul 12 00:24:30.180246 env[1813]: time="2025-07-12T00:24:30.180106581Z" level=info msg="StartContainer for \"e8268b4da51d695e35da0aa5eded928847cb22d088a6e1adc72cff65940deffa\"" Jul 12 00:24:30.214461 systemd[1]: Started cri-containerd-e8268b4da51d695e35da0aa5eded928847cb22d088a6e1adc72cff65940deffa.scope. Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3003 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323638623464613531643639356533356461306161356564656439 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit: BPF prog-id=117 op=LOAD Jul 12 00:24:30.261000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3003 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323638623464613531643639356533356461306161356564656439 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit: BPF prog-id=118 op=LOAD Jul 12 00:24:30.261000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3003 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323638623464613531643639356533356461306161356564656439 Jul 12 00:24:30.261000 audit: BPF prog-id=118 op=UNLOAD Jul 12 00:24:30.261000 audit: BPF prog-id=117 op=UNLOAD Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:30.261000 audit: BPF prog-id=119 op=LOAD Jul 12 00:24:30.261000 audit[3045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3003 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538323638623464613531643639356533356461306161356564656439 Jul 12 00:24:30.293103 env[1813]: time="2025-07-12T00:24:30.293034316Z" level=info msg="StartContainer for \"e8268b4da51d695e35da0aa5eded928847cb22d088a6e1adc72cff65940deffa\" returns successfully" Jul 12 00:24:30.552000 audit[3103]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.552000 audit[3103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe98ca490 a2=0 a3=1 items=0 ppid=3055 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:24:30.559000 audit[3104]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.559000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6fce940 a2=0 a3=1 items=0 ppid=3055 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:24:30.566000 audit[3105]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.566000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff388eee0 a2=0 a3=1 items=0 ppid=3055 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:24:30.569000 audit[3106]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.569000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe2cfdbf0 a2=0 a3=1 items=0 ppid=3055 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:24:30.571000 audit[3107]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.571000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf22da00 a2=0 a3=1 items=0 ppid=3055 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.571000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:24:30.573000 audit[3108]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.573000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffceb31920 a2=0 a3=1 items=0 ppid=3055 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.573000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:24:30.654000 audit[3109]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.654000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe326c540 a2=0 a3=1 items=0 ppid=3055 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:24:30.660000 audit[3111]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.660000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc4317430 a2=0 a3=1 items=0 ppid=3055 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.660000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 12 00:24:30.664906 kubelet[2909]: I0712 00:24:30.664808 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-gb5vz" podStartSLOduration=2.664759098 podStartE2EDuration="2.664759098s" podCreationTimestamp="2025-07-12 00:24:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:30.663119038 +0000 UTC m=+8.377228369" watchObservedRunningTime="2025-07-12 00:24:30.664759098 +0000 UTC m=+8.378868453" Jul 12 00:24:30.685000 audit[3114]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.685000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdde18420 a2=0 a3=1 items=0 ppid=3055 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.685000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 12 00:24:30.689000 audit[3115]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.689000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2d345e0 a2=0 a3=1 items=0 ppid=3055 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.689000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:24:30.693000 audit[3117]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.693000 audit[3117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc181c470 a2=0 a3=1 items=0 ppid=3055 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:24:30.696000 audit[3118]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.696000 audit[3118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf8f4e50 a2=0 a3=1 items=0 ppid=3055 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.696000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:24:30.701000 audit[3120]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.701000 audit[3120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffcce9ce40 a2=0 a3=1 items=0 ppid=3055 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.701000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:24:30.710000 audit[3123]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.710000 audit[3123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdddd2a00 a2=0 a3=1 items=0 ppid=3055 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.710000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 12 00:24:30.713000 audit[3124]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.713000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc02be350 a2=0 a3=1 items=0 ppid=3055 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.713000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:24:30.718000 audit[3126]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.718000 audit[3126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff8eb6150 a2=0 a3=1 items=0 ppid=3055 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.718000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:24:30.723000 audit[3127]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.723000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5d11930 a2=0 a3=1 items=0 ppid=3055 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.723000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:24:30.728000 audit[3129]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.728000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffcde8ca0 a2=0 a3=1 items=0 ppid=3055 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.728000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:24:30.736000 audit[3132]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.736000 audit[3132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffccc63740 a2=0 a3=1 items=0 ppid=3055 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:24:30.745000 audit[3135]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.745000 audit[3135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffa6adcf0 a2=0 a3=1 items=0 ppid=3055 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.745000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:24:30.747000 audit[3136]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.747000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe8747c20 a2=0 a3=1 items=0 ppid=3055 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.747000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:24:30.753000 audit[3138]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.753000 audit[3138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffeb75a870 a2=0 a3=1 items=0 ppid=3055 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.753000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:30.762000 audit[3141]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.762000 audit[3141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe6891290 a2=0 a3=1 items=0 ppid=3055 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.762000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:30.766000 audit[3142]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.766000 audit[3142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7a49c80 a2=0 a3=1 items=0 ppid=3055 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:24:30.777000 audit[3144]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:30.777000 audit[3144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffffee8dc10 a2=0 a3=1 items=0 ppid=3055 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.777000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:24:30.823000 audit[3150]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:30.823000 audit[3150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff91b7a20 a2=0 a3=1 items=0 ppid=3055 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.823000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:30.836000 audit[3150]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:30.836000 audit[3150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff91b7a20 a2=0 a3=1 items=0 ppid=3055 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.836000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:30.840000 audit[3155]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.840000 audit[3155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd168f9e0 a2=0 a3=1 items=0 ppid=3055 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:24:30.847000 audit[3157]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.847000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcdaaead0 a2=0 a3=1 items=0 ppid=3055 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 12 00:24:30.854000 audit[3160]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.854000 audit[3160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd615f170 a2=0 a3=1 items=0 ppid=3055 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 12 00:24:30.857000 audit[3161]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.857000 audit[3161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff10da990 a2=0 a3=1 items=0 ppid=3055 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:24:30.862000 audit[3163]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.862000 audit[3163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe907dd60 a2=0 a3=1 items=0 ppid=3055 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.862000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:24:30.864000 audit[3164]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.864000 audit[3164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd53efae0 a2=0 a3=1 items=0 ppid=3055 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:24:30.872000 audit[3166]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.872000 audit[3166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc6288fe0 a2=0 a3=1 items=0 ppid=3055 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 12 00:24:30.881000 audit[3169]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.881000 audit[3169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd2013fb0 a2=0 a3=1 items=0 ppid=3055 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.881000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:24:30.884000 audit[3170]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.884000 audit[3170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb05ef30 a2=0 a3=1 items=0 ppid=3055 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:24:30.888000 audit[3172]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.888000 audit[3172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffda6158e0 a2=0 a3=1 items=0 ppid=3055 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.888000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:24:30.891000 audit[3173]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3173 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.891000 audit[3173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe67605e0 a2=0 a3=1 items=0 ppid=3055 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.891000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:24:30.899000 audit[3175]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.899000 audit[3175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcbae7880 a2=0 a3=1 items=0 ppid=3055 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.899000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:24:30.910000 audit[3178]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.910000 audit[3178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffa5699c0 a2=0 a3=1 items=0 ppid=3055 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.910000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:24:30.917000 audit[3181]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3181 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.917000 audit[3181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9852520 a2=0 a3=1 items=0 ppid=3055 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 12 00:24:30.920000 audit[3182]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3182 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.920000 audit[3182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffde355af0 a2=0 a3=1 items=0 ppid=3055 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:24:30.925000 audit[3184]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3184 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.925000 audit[3184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff8680390 a2=0 a3=1 items=0 ppid=3055 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.925000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:30.936000 audit[3187]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3187 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.936000 audit[3187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd0541810 a2=0 a3=1 items=0 ppid=3055 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.936000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:30.939000 audit[3188]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.939000 audit[3188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1f7b140 a2=0 a3=1 items=0 ppid=3055 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.939000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:24:30.944000 audit[3190]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3190 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.944000 audit[3190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc1979e40 a2=0 a3=1 items=0 ppid=3055 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:24:30.947000 audit[3191]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.947000 audit[3191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc647f590 a2=0 a3=1 items=0 ppid=3055 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:24:30.952000 audit[3193]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3193 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.952000 audit[3193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc939d620 a2=0 a3=1 items=0 ppid=3055 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.952000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:24:30.959000 audit[3196]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:30.959000 audit[3196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc4299910 a2=0 a3=1 items=0 ppid=3055 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:24:30.966000 audit[3198]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:24:30.966000 audit[3198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffeb8dc9b0 a2=0 a3=1 items=0 ppid=3055 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.966000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:30.968000 audit[3198]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:24:30.968000 audit[3198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffeb8dc9b0 a2=0 a3=1 items=0 ppid=3055 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:30.968000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:31.477615 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4290582650.mount: Deactivated successfully. Jul 12 00:24:32.592464 env[1813]: time="2025-07-12T00:24:32.592412103Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:32.598538 env[1813]: time="2025-07-12T00:24:32.598483874Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:32.602671 env[1813]: time="2025-07-12T00:24:32.602621860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:32.606599 env[1813]: time="2025-07-12T00:24:32.606550617Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:32.609259 env[1813]: time="2025-07-12T00:24:32.608404367Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 12 00:24:32.613943 env[1813]: time="2025-07-12T00:24:32.613866318Z" level=info msg="CreateContainer within sandbox \"9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 12 00:24:32.631475 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3439357394.mount: Deactivated successfully. Jul 12 00:24:32.650519 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1987051288.mount: Deactivated successfully. Jul 12 00:24:32.656880 env[1813]: time="2025-07-12T00:24:32.656818761Z" level=info msg="CreateContainer within sandbox \"9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b\"" Jul 12 00:24:32.660278 env[1813]: time="2025-07-12T00:24:32.660085619Z" level=info msg="StartContainer for \"4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b\"" Jul 12 00:24:32.699109 systemd[1]: Started cri-containerd-4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b.scope. Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.744000 audit: BPF prog-id=120 op=LOAD Jul 12 00:24:32.746000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.746000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2959 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:32.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323130633537653837333961333864326263613830636465643362 Jul 12 00:24:32.746000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.746000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2959 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:32.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323130633537653837333961333864326263613830636465643362 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.747000 audit: BPF prog-id=121 op=LOAD Jul 12 00:24:32.747000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2959 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:32.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323130633537653837333961333864326263613830636465643362 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.751000 audit: BPF prog-id=122 op=LOAD Jul 12 00:24:32.751000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2959 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:32.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323130633537653837333961333864326263613830636465643362 Jul 12 00:24:32.752000 audit: BPF prog-id=122 op=UNLOAD Jul 12 00:24:32.753000 audit: BPF prog-id=121 op=UNLOAD Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:32.753000 audit: BPF prog-id=123 op=LOAD Jul 12 00:24:32.753000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2959 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:32.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465323130633537653837333961333864326263613830636465643362 Jul 12 00:24:32.807916 env[1813]: time="2025-07-12T00:24:32.807821502Z" level=info msg="StartContainer for \"4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b\" returns successfully" Jul 12 00:24:33.696697 kubelet[2909]: I0712 00:24:33.696619 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-6fp8k" podStartSLOduration=2.15353774 podStartE2EDuration="5.696593881s" podCreationTimestamp="2025-07-12 00:24:28 +0000 UTC" firstStartedPulling="2025-07-12 00:24:29.067662685 +0000 UTC m=+6.781772016" lastFinishedPulling="2025-07-12 00:24:32.610718838 +0000 UTC m=+10.324828157" observedRunningTime="2025-07-12 00:24:33.676269567 +0000 UTC m=+11.390378934" watchObservedRunningTime="2025-07-12 00:24:33.696593881 +0000 UTC m=+11.410703236" Jul 12 00:24:39.680791 sudo[2094]: pam_unix(sudo:session): session closed for user root Jul 12 00:24:39.693178 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 12 00:24:39.693329 kernel: audit: type=1106 audit(1752279879.679:927): pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:39.679000 audit[2094]: USER_END pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:39.679000 audit[2094]: CRED_DISP pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:39.707856 kernel: audit: type=1104 audit(1752279879.679:928): pid=2094 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:39.713973 sshd[2091]: pam_unix(sshd:session): session closed for user core Jul 12 00:24:39.718142 systemd[1]: session-7.scope: Deactivated successfully. Jul 12 00:24:39.718469 systemd[1]: session-7.scope: Consumed 14.004s CPU time. Jul 12 00:24:39.719278 systemd[1]: sshd@6-172.31.27.156:22-147.75.109.163:51458.service: Deactivated successfully. Jul 12 00:24:39.714000 audit[2091]: USER_END pid=2091 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:39.733296 kernel: audit: type=1106 audit(1752279879.714:929): pid=2091 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:39.714000 audit[2091]: CRED_DISP pid=2091 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:39.733607 systemd-logind[1808]: Session 7 logged out. Waiting for processes to exit. Jul 12 00:24:39.744229 kernel: audit: type=1104 audit(1752279879.714:930): pid=2091 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:39.744806 systemd-logind[1808]: Removed session 7. Jul 12 00:24:39.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.156:22-147.75.109.163:51458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:39.755106 kernel: audit: type=1131 audit(1752279879.718:931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.156:22-147.75.109.163:51458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:45.080000 audit[3287]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3287 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.080000 audit[3287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd6ee23f0 a2=0 a3=1 items=0 ppid=3055 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.098212 kernel: audit: type=1325 audit(1752279885.080:932): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3287 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.098340 kernel: audit: type=1300 audit(1752279885.080:932): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd6ee23f0 a2=0 a3=1 items=0 ppid=3055 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:45.110918 kernel: audit: type=1327 audit(1752279885.080:932): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:45.102000 audit[3287]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3287 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.119095 kernel: audit: type=1325 audit(1752279885.102:933): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3287 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.102000 audit[3287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd6ee23f0 a2=0 a3=1 items=0 ppid=3055 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.137923 kernel: audit: type=1300 audit(1752279885.102:933): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd6ee23f0 a2=0 a3=1 items=0 ppid=3055 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.102000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:45.149825 kernel: audit: type=1327 audit(1752279885.102:933): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:45.144000 audit[3289]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.157139 kernel: audit: type=1325 audit(1752279885.144:934): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.144000 audit[3289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff24498a0 a2=0 a3=1 items=0 ppid=3055 pid=3289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.171958 kernel: audit: type=1300 audit(1752279885.144:934): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff24498a0 a2=0 a3=1 items=0 ppid=3055 pid=3289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:45.181897 kernel: audit: type=1327 audit(1752279885.144:934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:45.182016 kernel: audit: type=1325 audit(1752279885.151:935): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.151000 audit[3289]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:45.151000 audit[3289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff24498a0 a2=0 a3=1 items=0 ppid=3055 pid=3289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.381000 audit[3291]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.383921 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 12 00:24:53.384079 kernel: audit: type=1325 audit(1752279893.381:936): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.381000 audit[3291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdc43c230 a2=0 a3=1 items=0 ppid=3055 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.403132 kernel: audit: type=1300 audit(1752279893.381:936): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdc43c230 a2=0 a3=1 items=0 ppid=3055 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.381000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.416057 kernel: audit: type=1327 audit(1752279893.381:936): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.392000 audit[3291]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.424631 kernel: audit: type=1325 audit(1752279893.392:937): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.392000 audit[3291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdc43c230 a2=0 a3=1 items=0 ppid=3055 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.441968 kernel: audit: type=1300 audit(1752279893.392:937): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdc43c230 a2=0 a3=1 items=0 ppid=3055 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.454951 kernel: audit: type=1327 audit(1752279893.392:937): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.520906 systemd[1]: Created slice kubepods-besteffort-pod7c0d8f10_b7e4_4014_ba6a_176c407339e8.slice. Jul 12 00:24:53.631210 kubelet[2909]: I0712 00:24:53.630909 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7c0d8f10-b7e4-4014-ba6a-176c407339e8-typha-certs\") pod \"calico-typha-6cbf46cc58-wstc6\" (UID: \"7c0d8f10-b7e4-4014-ba6a-176c407339e8\") " pod="calico-system/calico-typha-6cbf46cc58-wstc6" Jul 12 00:24:53.631210 kubelet[2909]: I0712 00:24:53.630983 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7c0d8f10-b7e4-4014-ba6a-176c407339e8-tigera-ca-bundle\") pod \"calico-typha-6cbf46cc58-wstc6\" (UID: \"7c0d8f10-b7e4-4014-ba6a-176c407339e8\") " pod="calico-system/calico-typha-6cbf46cc58-wstc6" Jul 12 00:24:53.631210 kubelet[2909]: I0712 00:24:53.631031 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7gl6w\" (UniqueName: \"kubernetes.io/projected/7c0d8f10-b7e4-4014-ba6a-176c407339e8-kube-api-access-7gl6w\") pod \"calico-typha-6cbf46cc58-wstc6\" (UID: \"7c0d8f10-b7e4-4014-ba6a-176c407339e8\") " pod="calico-system/calico-typha-6cbf46cc58-wstc6" Jul 12 00:24:53.686000 audit[3293]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.686000 audit[3293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffce3da990 a2=0 a3=1 items=0 ppid=3055 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.708232 kernel: audit: type=1325 audit(1752279893.686:938): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.708407 kernel: audit: type=1300 audit(1752279893.686:938): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffce3da990 a2=0 a3=1 items=0 ppid=3055 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.686000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.717408 kernel: audit: type=1327 audit(1752279893.686:938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.714000 audit[3293]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.726763 kernel: audit: type=1325 audit(1752279893.714:939): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:53.714000 audit[3293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffce3da990 a2=0 a3=1 items=0 ppid=3055 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:53.714000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:53.833796 env[1813]: time="2025-07-12T00:24:53.832741089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6cbf46cc58-wstc6,Uid:7c0d8f10-b7e4-4014-ba6a-176c407339e8,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:53.880284 systemd[1]: Created slice kubepods-besteffort-pod485e9f3a_ffc3_49a7_b8a9_2fa7bc58fa51.slice. Jul 12 00:24:53.886870 env[1813]: time="2025-07-12T00:24:53.884087582Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:53.886870 env[1813]: time="2025-07-12T00:24:53.884263956Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:53.886870 env[1813]: time="2025-07-12T00:24:53.884332112Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:53.886870 env[1813]: time="2025-07-12T00:24:53.884630410Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/31115f975610ab32fb4554c20a8a2f429e357ae9324939429bce0ab7bafa0639 pid=3302 runtime=io.containerd.runc.v2 Jul 12 00:24:53.938883 systemd[1]: Started cri-containerd-31115f975610ab32fb4554c20a8a2f429e357ae9324939429bce0ab7bafa0639.scope. Jul 12 00:24:54.034345 kubelet[2909]: I0712 00:24:54.033605 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hjkpw\" (UniqueName: \"kubernetes.io/projected/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-kube-api-access-hjkpw\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034345 kubelet[2909]: I0712 00:24:54.033691 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-cni-bin-dir\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034345 kubelet[2909]: I0712 00:24:54.033740 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-cni-log-dir\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034345 kubelet[2909]: I0712 00:24:54.033781 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-cni-net-dir\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034345 kubelet[2909]: I0712 00:24:54.033818 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-var-run-calico\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034785 kubelet[2909]: I0712 00:24:54.033859 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-tigera-ca-bundle\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034785 kubelet[2909]: I0712 00:24:54.033902 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-lib-modules\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034785 kubelet[2909]: I0712 00:24:54.033939 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-node-certs\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034785 kubelet[2909]: I0712 00:24:54.033977 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-var-lib-calico\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.034785 kubelet[2909]: I0712 00:24:54.034023 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-flexvol-driver-host\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.035092 kubelet[2909]: I0712 00:24:54.034058 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-xtables-lock\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.035092 kubelet[2909]: I0712 00:24:54.034098 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51-policysync\") pod \"calico-node-shjz8\" (UID: \"485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51\") " pod="calico-system/calico-node-shjz8" Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.046000 audit: BPF prog-id=124 op=LOAD Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3302 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331313135663937353631306162333266623435353463323061386132 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3302 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331313135663937353631306162333266623435353463323061386132 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.047000 audit: BPF prog-id=125 op=LOAD Jul 12 00:24:54.047000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3302 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331313135663937353631306162333266623435353463323061386132 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit: BPF prog-id=126 op=LOAD Jul 12 00:24:54.048000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3302 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331313135663937353631306162333266623435353463323061386132 Jul 12 00:24:54.048000 audit: BPF prog-id=126 op=UNLOAD Jul 12 00:24:54.048000 audit: BPF prog-id=125 op=UNLOAD Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { perfmon } for pid=3312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit[3312]: AVC avc: denied { bpf } for pid=3312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.048000 audit: BPF prog-id=127 op=LOAD Jul 12 00:24:54.048000 audit[3312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3302 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331313135663937353631306162333266623435353463323061386132 Jul 12 00:24:54.141389 kubelet[2909]: E0712 00:24:54.141344 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.141636 kubelet[2909]: W0712 00:24:54.141603 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.141776 kubelet[2909]: E0712 00:24:54.141745 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.142504 kubelet[2909]: E0712 00:24:54.142467 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.142680 kubelet[2909]: W0712 00:24:54.142652 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.142805 kubelet[2909]: E0712 00:24:54.142779 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.143729 kubelet[2909]: E0712 00:24:54.143696 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.143915 kubelet[2909]: W0712 00:24:54.143885 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.144049 kubelet[2909]: E0712 00:24:54.144021 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.147847 kubelet[2909]: E0712 00:24:54.147798 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.147847 kubelet[2909]: W0712 00:24:54.147838 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.148089 kubelet[2909]: E0712 00:24:54.147888 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.149360 kubelet[2909]: E0712 00:24:54.148426 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.149360 kubelet[2909]: W0712 00:24:54.148464 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.149360 kubelet[2909]: E0712 00:24:54.148498 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.154941 kubelet[2909]: E0712 00:24:54.154900 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.155174 kubelet[2909]: W0712 00:24:54.155146 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.155342 kubelet[2909]: E0712 00:24:54.155315 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.165840 kubelet[2909]: E0712 00:24:54.165775 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:24:54.180820 kubelet[2909]: E0712 00:24:54.180777 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.181045 kubelet[2909]: W0712 00:24:54.180996 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.181224 kubelet[2909]: E0712 00:24:54.181164 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.181778 env[1813]: time="2025-07-12T00:24:54.181694934Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6cbf46cc58-wstc6,Uid:7c0d8f10-b7e4-4014-ba6a-176c407339e8,Namespace:calico-system,Attempt:0,} returns sandbox id \"31115f975610ab32fb4554c20a8a2f429e357ae9324939429bce0ab7bafa0639\"" Jul 12 00:24:54.186017 env[1813]: time="2025-07-12T00:24:54.185935345Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 12 00:24:54.205261 env[1813]: time="2025-07-12T00:24:54.205152006Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-shjz8,Uid:485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:54.235329 env[1813]: time="2025-07-12T00:24:54.234202175Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:54.235329 env[1813]: time="2025-07-12T00:24:54.234296159Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:54.235329 env[1813]: time="2025-07-12T00:24:54.234323006Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:54.235329 env[1813]: time="2025-07-12T00:24:54.234883752Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a pid=3351 runtime=io.containerd.runc.v2 Jul 12 00:24:54.244566 kubelet[2909]: E0712 00:24:54.244510 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.244874 kubelet[2909]: W0712 00:24:54.244805 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.245138 kubelet[2909]: E0712 00:24:54.245059 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.246245 kubelet[2909]: E0712 00:24:54.246152 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.246615 kubelet[2909]: W0712 00:24:54.246519 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.246801 kubelet[2909]: E0712 00:24:54.246770 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.247457 kubelet[2909]: E0712 00:24:54.247424 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.247659 kubelet[2909]: W0712 00:24:54.247631 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.247815 kubelet[2909]: E0712 00:24:54.247789 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.248529 kubelet[2909]: E0712 00:24:54.248495 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.248759 kubelet[2909]: W0712 00:24:54.248728 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.248919 kubelet[2909]: E0712 00:24:54.248892 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.250342 kubelet[2909]: E0712 00:24:54.250303 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.250799 kubelet[2909]: W0712 00:24:54.250769 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.251083 kubelet[2909]: E0712 00:24:54.251053 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.264181 kubelet[2909]: E0712 00:24:54.264147 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.264434 kubelet[2909]: W0712 00:24:54.264400 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.264636 kubelet[2909]: E0712 00:24:54.264606 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.265345 kubelet[2909]: E0712 00:24:54.265313 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.265558 kubelet[2909]: W0712 00:24:54.265529 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.265686 kubelet[2909]: E0712 00:24:54.265660 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.274073 kubelet[2909]: E0712 00:24:54.274027 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.274316 kubelet[2909]: W0712 00:24:54.274284 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.274454 kubelet[2909]: E0712 00:24:54.274428 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.275840 kubelet[2909]: E0712 00:24:54.275793 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.276067 kubelet[2909]: W0712 00:24:54.276036 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.276504 kubelet[2909]: E0712 00:24:54.276472 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.277613 kubelet[2909]: E0712 00:24:54.277576 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.277819 kubelet[2909]: W0712 00:24:54.277784 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.277967 kubelet[2909]: E0712 00:24:54.277940 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.279696 kubelet[2909]: E0712 00:24:54.279654 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.280263 kubelet[2909]: W0712 00:24:54.280224 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.280428 kubelet[2909]: E0712 00:24:54.280402 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.281396 kubelet[2909]: E0712 00:24:54.281351 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.281585 kubelet[2909]: W0712 00:24:54.281555 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.281715 kubelet[2909]: E0712 00:24:54.281689 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.283478 kubelet[2909]: E0712 00:24:54.283437 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.283757 kubelet[2909]: W0712 00:24:54.283728 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.283919 kubelet[2909]: E0712 00:24:54.283873 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.290406 kubelet[2909]: E0712 00:24:54.287858 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.290406 kubelet[2909]: W0712 00:24:54.287896 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.290406 kubelet[2909]: E0712 00:24:54.287933 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.288030 systemd[1]: Started cri-containerd-3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a.scope. Jul 12 00:24:54.292258 kubelet[2909]: E0712 00:24:54.291784 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.292258 kubelet[2909]: W0712 00:24:54.291815 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.292258 kubelet[2909]: E0712 00:24:54.291846 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.294390 kubelet[2909]: E0712 00:24:54.294351 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.294806 kubelet[2909]: W0712 00:24:54.294555 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.294806 kubelet[2909]: E0712 00:24:54.294597 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.295373 kubelet[2909]: E0712 00:24:54.295346 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.295602 kubelet[2909]: W0712 00:24:54.295506 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.295748 kubelet[2909]: E0712 00:24:54.295724 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.296374 kubelet[2909]: E0712 00:24:54.296335 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.296510 kubelet[2909]: W0712 00:24:54.296484 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.296676 kubelet[2909]: E0712 00:24:54.296651 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.297203 kubelet[2909]: E0712 00:24:54.297153 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.297359 kubelet[2909]: W0712 00:24:54.297331 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.297509 kubelet[2909]: E0712 00:24:54.297483 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.298098 kubelet[2909]: E0712 00:24:54.298066 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.298415 kubelet[2909]: W0712 00:24:54.298383 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.298620 kubelet[2909]: E0712 00:24:54.298593 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.337427 kubelet[2909]: E0712 00:24:54.336920 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.337427 kubelet[2909]: W0712 00:24:54.336955 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.337427 kubelet[2909]: E0712 00:24:54.336987 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.337427 kubelet[2909]: I0712 00:24:54.337062 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/e5fa5afc-e8d7-456a-856b-28fa80629c7d-registration-dir\") pod \"csi-node-driver-nsj26\" (UID: \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\") " pod="calico-system/csi-node-driver-nsj26" Jul 12 00:24:54.338107 kubelet[2909]: E0712 00:24:54.337898 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.338107 kubelet[2909]: W0712 00:24:54.337933 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.338107 kubelet[2909]: E0712 00:24:54.337979 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.338107 kubelet[2909]: I0712 00:24:54.338021 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s9stb\" (UniqueName: \"kubernetes.io/projected/e5fa5afc-e8d7-456a-856b-28fa80629c7d-kube-api-access-s9stb\") pod \"csi-node-driver-nsj26\" (UID: \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\") " pod="calico-system/csi-node-driver-nsj26" Jul 12 00:24:54.340137 kubelet[2909]: E0712 00:24:54.339392 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.340137 kubelet[2909]: W0712 00:24:54.339428 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.340137 kubelet[2909]: E0712 00:24:54.339471 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.340137 kubelet[2909]: E0712 00:24:54.339921 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.340137 kubelet[2909]: W0712 00:24:54.339943 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.340137 kubelet[2909]: E0712 00:24:54.339966 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.341099 kubelet[2909]: E0712 00:24:54.341053 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.341467 kubelet[2909]: W0712 00:24:54.341408 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.341733 kubelet[2909]: E0712 00:24:54.341669 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.342147 kubelet[2909]: I0712 00:24:54.342095 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/e5fa5afc-e8d7-456a-856b-28fa80629c7d-kubelet-dir\") pod \"csi-node-driver-nsj26\" (UID: \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\") " pod="calico-system/csi-node-driver-nsj26" Jul 12 00:24:54.342793 kubelet[2909]: E0712 00:24:54.342756 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.342988 kubelet[2909]: W0712 00:24:54.342948 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.343278 kubelet[2909]: E0712 00:24:54.343240 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.344519 kubelet[2909]: E0712 00:24:54.344473 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.344768 kubelet[2909]: W0712 00:24:54.344724 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.345102 kubelet[2909]: E0712 00:24:54.345027 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.345612 kubelet[2909]: I0712 00:24:54.345555 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/e5fa5afc-e8d7-456a-856b-28fa80629c7d-socket-dir\") pod \"csi-node-driver-nsj26\" (UID: \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\") " pod="calico-system/csi-node-driver-nsj26" Jul 12 00:24:54.346244 kubelet[2909]: E0712 00:24:54.346155 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.346465 kubelet[2909]: W0712 00:24:54.346427 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.346646 kubelet[2909]: E0712 00:24:54.346618 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.347406 kubelet[2909]: E0712 00:24:54.347366 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.347620 kubelet[2909]: W0712 00:24:54.347585 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.347798 kubelet[2909]: E0712 00:24:54.347769 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.348561 kubelet[2909]: E0712 00:24:54.348522 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.348815 kubelet[2909]: W0712 00:24:54.348778 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.349053 kubelet[2909]: E0712 00:24:54.349002 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.350350 kubelet[2909]: I0712 00:24:54.350302 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/e5fa5afc-e8d7-456a-856b-28fa80629c7d-varrun\") pod \"csi-node-driver-nsj26\" (UID: \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\") " pod="calico-system/csi-node-driver-nsj26" Jul 12 00:24:54.350901 kubelet[2909]: E0712 00:24:54.350858 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.351112 kubelet[2909]: W0712 00:24:54.351079 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.351400 kubelet[2909]: E0712 00:24:54.351366 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.352022 kubelet[2909]: E0712 00:24:54.351981 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.352305 kubelet[2909]: W0712 00:24:54.352270 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.352466 kubelet[2909]: E0712 00:24:54.352436 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.354149 kubelet[2909]: E0712 00:24:54.354099 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.354489 kubelet[2909]: W0712 00:24:54.354447 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.354699 kubelet[2909]: E0712 00:24:54.354666 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.355370 kubelet[2909]: E0712 00:24:54.355333 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.355592 kubelet[2909]: W0712 00:24:54.355562 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.355732 kubelet[2909]: E0712 00:24:54.355705 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.356499 kubelet[2909]: E0712 00:24:54.356460 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.356737 kubelet[2909]: W0712 00:24:54.356702 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.356874 kubelet[2909]: E0712 00:24:54.356847 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.369000 audit: BPF prog-id=128 op=LOAD Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3351 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339363164333436356430643436346265663231323963383230616336 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3351 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339363164333436356430643436346265663231323963383230616336 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit: BPF prog-id=129 op=LOAD Jul 12 00:24:54.371000 audit[3361]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3351 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339363164333436356430643436346265663231323963383230616336 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.371000 audit: BPF prog-id=130 op=LOAD Jul 12 00:24:54.371000 audit[3361]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3351 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339363164333436356430643436346265663231323963383230616336 Jul 12 00:24:54.371000 audit: BPF prog-id=130 op=UNLOAD Jul 12 00:24:54.371000 audit: BPF prog-id=129 op=UNLOAD Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { perfmon } for pid=3361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit[3361]: AVC avc: denied { bpf } for pid=3361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:54.372000 audit: BPF prog-id=131 op=LOAD Jul 12 00:24:54.372000 audit[3361]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3351 pid=3361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339363164333436356430643436346265663231323963383230616336 Jul 12 00:24:54.429609 env[1813]: time="2025-07-12T00:24:54.429502384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-shjz8,Uid:485e9f3a-ffc3-49a7-b8a9-2fa7bc58fa51,Namespace:calico-system,Attempt:0,} returns sandbox id \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\"" Jul 12 00:24:54.454062 kubelet[2909]: E0712 00:24:54.453996 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.454062 kubelet[2909]: W0712 00:24:54.454042 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.454386 kubelet[2909]: E0712 00:24:54.454080 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.454900 kubelet[2909]: E0712 00:24:54.454842 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.454900 kubelet[2909]: W0712 00:24:54.454887 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.455165 kubelet[2909]: E0712 00:24:54.454937 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.455620 kubelet[2909]: E0712 00:24:54.455568 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.455745 kubelet[2909]: W0712 00:24:54.455609 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.455745 kubelet[2909]: E0712 00:24:54.455673 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.456455 kubelet[2909]: E0712 00:24:54.456391 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.456455 kubelet[2909]: W0712 00:24:54.456430 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.456703 kubelet[2909]: E0712 00:24:54.456477 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.458493 kubelet[2909]: E0712 00:24:54.458432 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.458493 kubelet[2909]: W0712 00:24:54.458478 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.458817 kubelet[2909]: E0712 00:24:54.458721 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.459399 kubelet[2909]: E0712 00:24:54.459331 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.459399 kubelet[2909]: W0712 00:24:54.459389 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.459673 kubelet[2909]: E0712 00:24:54.459635 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.460134 kubelet[2909]: E0712 00:24:54.460070 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.460134 kubelet[2909]: W0712 00:24:54.460125 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.460408 kubelet[2909]: E0712 00:24:54.460265 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.460865 kubelet[2909]: E0712 00:24:54.460818 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.460865 kubelet[2909]: W0712 00:24:54.460856 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.461131 kubelet[2909]: E0712 00:24:54.461093 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.461769 kubelet[2909]: E0712 00:24:54.461648 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.461769 kubelet[2909]: W0712 00:24:54.461689 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.461979 kubelet[2909]: E0712 00:24:54.461941 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.462460 kubelet[2909]: E0712 00:24:54.462415 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.462460 kubelet[2909]: W0712 00:24:54.462451 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.462884 kubelet[2909]: E0712 00:24:54.462670 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.465000 kubelet[2909]: E0712 00:24:54.464511 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.465000 kubelet[2909]: W0712 00:24:54.464589 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.465000 kubelet[2909]: E0712 00:24:54.464831 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.465682 kubelet[2909]: E0712 00:24:54.465571 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.465682 kubelet[2909]: W0712 00:24:54.465628 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.466098 kubelet[2909]: E0712 00:24:54.465937 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.466313 kubelet[2909]: E0712 00:24:54.466270 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.466313 kubelet[2909]: W0712 00:24:54.466306 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.466563 kubelet[2909]: E0712 00:24:54.466516 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.469511 kubelet[2909]: E0712 00:24:54.469423 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.469511 kubelet[2909]: W0712 00:24:54.469497 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.470046 kubelet[2909]: E0712 00:24:54.469805 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.470300 kubelet[2909]: E0712 00:24:54.470180 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.470300 kubelet[2909]: W0712 00:24:54.470273 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.470677 kubelet[2909]: E0712 00:24:54.470485 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.471010 kubelet[2909]: E0712 00:24:54.470943 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.471010 kubelet[2909]: W0712 00:24:54.470986 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.471418 kubelet[2909]: E0712 00:24:54.471309 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.471527 kubelet[2909]: E0712 00:24:54.471468 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.471527 kubelet[2909]: W0712 00:24:54.471488 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.471836 kubelet[2909]: E0712 00:24:54.471671 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.472963 kubelet[2909]: E0712 00:24:54.472370 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.472963 kubelet[2909]: W0712 00:24:54.472417 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.472963 kubelet[2909]: E0712 00:24:54.472517 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.474498 kubelet[2909]: E0712 00:24:54.474439 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.474498 kubelet[2909]: W0712 00:24:54.474486 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.474936 kubelet[2909]: E0712 00:24:54.474720 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.475085 kubelet[2909]: E0712 00:24:54.475016 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.475085 kubelet[2909]: W0712 00:24:54.475038 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.475576 kubelet[2909]: E0712 00:24:54.475308 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.475734 kubelet[2909]: E0712 00:24:54.475673 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.475734 kubelet[2909]: W0712 00:24:54.475698 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.475991 kubelet[2909]: E0712 00:24:54.475940 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.478605 kubelet[2909]: E0712 00:24:54.476506 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.478605 kubelet[2909]: W0712 00:24:54.476544 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.478605 kubelet[2909]: E0712 00:24:54.478321 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.478930 kubelet[2909]: E0712 00:24:54.478750 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.478930 kubelet[2909]: W0712 00:24:54.478778 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.479051 kubelet[2909]: E0712 00:24:54.479017 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.479681 kubelet[2909]: E0712 00:24:54.479627 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.479681 kubelet[2909]: W0712 00:24:54.479669 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.480136 kubelet[2909]: E0712 00:24:54.479916 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.481367 kubelet[2909]: E0712 00:24:54.480271 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.481367 kubelet[2909]: W0712 00:24:54.480305 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.481367 kubelet[2909]: E0712 00:24:54.480337 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.544316 kubelet[2909]: E0712 00:24:54.543508 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:54.544316 kubelet[2909]: W0712 00:24:54.543559 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:54.544316 kubelet[2909]: E0712 00:24:54.543595 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:54.735000 audit[3446]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3446 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:54.757424 systemd[1]: run-containerd-runc-k8s.io-31115f975610ab32fb4554c20a8a2f429e357ae9324939429bce0ab7bafa0639-runc.ZFEZnh.mount: Deactivated successfully. Jul 12 00:24:54.735000 audit[3446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffcd324680 a2=0 a3=1 items=0 ppid=3055 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.735000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:54.783000 audit[3446]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3446 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:54.783000 audit[3446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcd324680 a2=0 a3=1 items=0 ppid=3055 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:54.783000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:55.409464 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2087174689.mount: Deactivated successfully. Jul 12 00:24:55.596017 kubelet[2909]: E0712 00:24:55.595217 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:24:55.813000 audit[3448]: NETFILTER_CFG table=filter:99 family=2 entries=22 op=nft_register_rule pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:55.813000 audit[3448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd3151320 a2=0 a3=1 items=0 ppid=3055 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:55.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:55.820000 audit[3448]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:55.820000 audit[3448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd3151320 a2=0 a3=1 items=0 ppid=3055 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:55.820000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:56.802377 env[1813]: time="2025-07-12T00:24:56.802314192Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.807091 env[1813]: time="2025-07-12T00:24:56.807030660Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.811275 env[1813]: time="2025-07-12T00:24:56.811185508Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.815338 env[1813]: time="2025-07-12T00:24:56.815276773Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.817854 env[1813]: time="2025-07-12T00:24:56.816914261Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 12 00:24:56.823324 env[1813]: time="2025-07-12T00:24:56.821161773Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 12 00:24:56.859130 env[1813]: time="2025-07-12T00:24:56.859063838Z" level=info msg="CreateContainer within sandbox \"31115f975610ab32fb4554c20a8a2f429e357ae9324939429bce0ab7bafa0639\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 12 00:24:56.888025 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount826746788.mount: Deactivated successfully. Jul 12 00:24:56.891951 env[1813]: time="2025-07-12T00:24:56.891684672Z" level=info msg="CreateContainer within sandbox \"31115f975610ab32fb4554c20a8a2f429e357ae9324939429bce0ab7bafa0639\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"4024e1bdc405a1def9b99e0d11467afea8037249c37213aa1eb3855e94dd0770\"" Jul 12 00:24:56.893234 env[1813]: time="2025-07-12T00:24:56.893146555Z" level=info msg="StartContainer for \"4024e1bdc405a1def9b99e0d11467afea8037249c37213aa1eb3855e94dd0770\"" Jul 12 00:24:56.948849 systemd[1]: Started cri-containerd-4024e1bdc405a1def9b99e0d11467afea8037249c37213aa1eb3855e94dd0770.scope. Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.004000 audit: BPF prog-id=132 op=LOAD Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3302 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:57.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323465316264633430356131646566396239396530643131343637 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3302 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:57.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323465316264633430356131646566396239396530643131343637 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit: BPF prog-id=133 op=LOAD Jul 12 00:24:57.005000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3302 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:57.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323465316264633430356131646566396239396530643131343637 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit: BPF prog-id=134 op=LOAD Jul 12 00:24:57.005000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3302 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:57.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323465316264633430356131646566396239396530643131343637 Jul 12 00:24:57.005000 audit: BPF prog-id=134 op=UNLOAD Jul 12 00:24:57.005000 audit: BPF prog-id=133 op=UNLOAD Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:57.005000 audit: BPF prog-id=135 op=LOAD Jul 12 00:24:57.005000 audit[3457]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3302 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:57.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430323465316264633430356131646566396239396530643131343637 Jul 12 00:24:57.053452 env[1813]: time="2025-07-12T00:24:57.053134790Z" level=info msg="StartContainer for \"4024e1bdc405a1def9b99e0d11467afea8037249c37213aa1eb3855e94dd0770\" returns successfully" Jul 12 00:24:57.595378 kubelet[2909]: E0712 00:24:57.595185 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:24:57.832615 kubelet[2909]: E0712 00:24:57.832574 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.832854 kubelet[2909]: W0712 00:24:57.832821 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.833003 kubelet[2909]: E0712 00:24:57.832974 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.833647 kubelet[2909]: E0712 00:24:57.833614 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.833900 kubelet[2909]: W0712 00:24:57.833823 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.834034 kubelet[2909]: E0712 00:24:57.834007 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.834586 kubelet[2909]: E0712 00:24:57.834556 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.834754 kubelet[2909]: W0712 00:24:57.834726 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.834881 kubelet[2909]: E0712 00:24:57.834854 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.837404 kubelet[2909]: E0712 00:24:57.837345 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.837691 kubelet[2909]: W0712 00:24:57.837658 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.837833 kubelet[2909]: E0712 00:24:57.837806 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.838586 kubelet[2909]: E0712 00:24:57.838554 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.838774 kubelet[2909]: W0712 00:24:57.838745 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.838904 kubelet[2909]: E0712 00:24:57.838877 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.839511 kubelet[2909]: E0712 00:24:57.839481 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.839778 kubelet[2909]: W0712 00:24:57.839734 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.839977 kubelet[2909]: E0712 00:24:57.839946 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.840545 kubelet[2909]: E0712 00:24:57.840508 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.840779 kubelet[2909]: W0712 00:24:57.840748 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.840914 kubelet[2909]: E0712 00:24:57.840888 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.843465 kubelet[2909]: E0712 00:24:57.843423 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.843722 kubelet[2909]: W0712 00:24:57.843689 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.843877 kubelet[2909]: E0712 00:24:57.843848 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.844639 kubelet[2909]: E0712 00:24:57.844604 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.844837 kubelet[2909]: W0712 00:24:57.844806 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.844972 kubelet[2909]: E0712 00:24:57.844945 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.845723 kubelet[2909]: E0712 00:24:57.845600 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.845910 kubelet[2909]: W0712 00:24:57.845879 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.846063 kubelet[2909]: E0712 00:24:57.846012 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.846710 kubelet[2909]: E0712 00:24:57.846683 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.846873 kubelet[2909]: W0712 00:24:57.846847 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.846993 kubelet[2909]: E0712 00:24:57.846969 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.847477 kubelet[2909]: E0712 00:24:57.847452 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.847610 kubelet[2909]: W0712 00:24:57.847586 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.847755 kubelet[2909]: E0712 00:24:57.847731 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.850426 kubelet[2909]: E0712 00:24:57.850384 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.850649 kubelet[2909]: W0712 00:24:57.850614 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.850799 kubelet[2909]: E0712 00:24:57.850770 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.853377 kubelet[2909]: E0712 00:24:57.853336 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.853619 kubelet[2909]: W0712 00:24:57.853584 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.853779 kubelet[2909]: E0712 00:24:57.853748 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.854425 kubelet[2909]: E0712 00:24:57.854385 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.854660 kubelet[2909]: W0712 00:24:57.854628 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.854813 kubelet[2909]: E0712 00:24:57.854786 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.895167 kubelet[2909]: E0712 00:24:57.895130 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.895412 kubelet[2909]: W0712 00:24:57.895381 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.895549 kubelet[2909]: E0712 00:24:57.895522 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.898390 kubelet[2909]: E0712 00:24:57.898354 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.898600 kubelet[2909]: W0712 00:24:57.898570 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.898745 kubelet[2909]: E0712 00:24:57.898719 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.899414 kubelet[2909]: E0712 00:24:57.899381 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.899611 kubelet[2909]: W0712 00:24:57.899582 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.899757 kubelet[2909]: E0712 00:24:57.899731 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.900438 kubelet[2909]: E0712 00:24:57.900405 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.900611 kubelet[2909]: W0712 00:24:57.900583 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.900764 kubelet[2909]: E0712 00:24:57.900737 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.901881 kubelet[2909]: I0712 00:24:57.901807 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6cbf46cc58-wstc6" podStartSLOduration=2.267372141 podStartE2EDuration="4.901787826s" podCreationTimestamp="2025-07-12 00:24:53 +0000 UTC" firstStartedPulling="2025-07-12 00:24:54.185402563 +0000 UTC m=+31.899511882" lastFinishedPulling="2025-07-12 00:24:56.819818248 +0000 UTC m=+34.533927567" observedRunningTime="2025-07-12 00:24:57.86628474 +0000 UTC m=+35.580394107" watchObservedRunningTime="2025-07-12 00:24:57.901787826 +0000 UTC m=+35.615897157" Jul 12 00:24:57.902887 kubelet[2909]: E0712 00:24:57.902217 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.903439 kubelet[2909]: W0712 00:24:57.903403 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.903694 kubelet[2909]: E0712 00:24:57.903667 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.912274 kubelet[2909]: E0712 00:24:57.905927 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.912500 kubelet[2909]: W0712 00:24:57.912466 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.912644 kubelet[2909]: E0712 00:24:57.912618 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.919421 kubelet[2909]: E0712 00:24:57.919380 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.919630 kubelet[2909]: W0712 00:24:57.919601 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.919988 kubelet[2909]: E0712 00:24:57.919961 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.920513 kubelet[2909]: E0712 00:24:57.920475 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.920655 kubelet[2909]: W0712 00:24:57.920629 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.921002 kubelet[2909]: E0712 00:24:57.920973 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.921659 kubelet[2909]: E0712 00:24:57.921627 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.921870 kubelet[2909]: W0712 00:24:57.921839 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.922677 kubelet[2909]: E0712 00:24:57.922639 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.923635 kubelet[2909]: E0712 00:24:57.923598 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.923835 kubelet[2909]: W0712 00:24:57.923805 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.924275 kubelet[2909]: E0712 00:24:57.924107 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.925129 kubelet[2909]: E0712 00:24:57.925090 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.925437 kubelet[2909]: W0712 00:24:57.925401 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.925830 kubelet[2909]: E0712 00:24:57.925797 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.928259 kubelet[2909]: E0712 00:24:57.928062 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.928717 kubelet[2909]: W0712 00:24:57.928659 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.929438 kubelet[2909]: E0712 00:24:57.929402 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.929990 kubelet[2909]: E0712 00:24:57.929961 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.930439 kubelet[2909]: W0712 00:24:57.930403 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.930934 kubelet[2909]: E0712 00:24:57.930902 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.931563 kubelet[2909]: E0712 00:24:57.931533 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.931907 kubelet[2909]: W0712 00:24:57.931874 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.932319 kubelet[2909]: E0712 00:24:57.932288 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.934674 kubelet[2909]: E0712 00:24:57.934355 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.934891 kubelet[2909]: W0712 00:24:57.934858 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.935079 kubelet[2909]: E0712 00:24:57.935051 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.936602 kubelet[2909]: E0712 00:24:57.936565 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.937142 kubelet[2909]: W0712 00:24:57.937104 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.937704 kubelet[2909]: E0712 00:24:57.937666 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.941695 kubelet[2909]: E0712 00:24:57.941657 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.941918 kubelet[2909]: W0712 00:24:57.941889 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.942710 kubelet[2909]: E0712 00:24:57.942666 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:57.952891 kubelet[2909]: E0712 00:24:57.952768 2909 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:57.952891 kubelet[2909]: W0712 00:24:57.952805 2909 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:57.952891 kubelet[2909]: E0712 00:24:57.952838 2909 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:58.146000 audit[3523]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:58.146000 audit[3523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe18a5c00 a2=0 a3=1 items=0 ppid=3055 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.146000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:58.161000 audit[3523]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:58.161000 audit[3523]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe18a5c00 a2=0 a3=1 items=0 ppid=3055 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.161000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:58.178636 env[1813]: time="2025-07-12T00:24:58.178557747Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:58.181899 env[1813]: time="2025-07-12T00:24:58.181820410Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:58.184896 env[1813]: time="2025-07-12T00:24:58.184839277Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:58.191653 env[1813]: time="2025-07-12T00:24:58.188151613Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:58.191812 env[1813]: time="2025-07-12T00:24:58.191510396Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 12 00:24:58.202065 env[1813]: time="2025-07-12T00:24:58.201974868Z" level=info msg="CreateContainer within sandbox \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 12 00:24:58.243794 env[1813]: time="2025-07-12T00:24:58.243708504Z" level=info msg="CreateContainer within sandbox \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53\"" Jul 12 00:24:58.245352 env[1813]: time="2025-07-12T00:24:58.245273678Z" level=info msg="StartContainer for \"0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53\"" Jul 12 00:24:58.245586 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3465017236.mount: Deactivated successfully. Jul 12 00:24:58.304184 systemd[1]: Started cri-containerd-0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53.scope. Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.387274 kernel: kauditd_printk_skb: 191 callbacks suppressed Jul 12 00:24:58.387458 kernel: audit: type=1400 audit(1752279898.382:1000): avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3351 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.408417 kernel: audit: type=1300 audit(1752279898.382:1000): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3351 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037353762623337316232666166376131363235336464346665386532 Jul 12 00:24:58.421407 kernel: audit: type=1327 audit(1752279898.382:1000): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037353762623337316232666166376131363235336464346665386532 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.431235 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.439230 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.448864 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.457989 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.470228 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.482002 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.497349 kernel: audit: type=1400 audit(1752279898.382:1001): avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.382000 audit: BPF prog-id=136 op=LOAD Jul 12 00:24:58.382000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3351 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037353762623337316232666166376131363235336464346665386532 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit: BPF prog-id=137 op=LOAD Jul 12 00:24:58.383000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3351 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037353762623337316232666166376131363235336464346665386532 Jul 12 00:24:58.383000 audit: BPF prog-id=137 op=UNLOAD Jul 12 00:24:58.383000 audit: BPF prog-id=136 op=UNLOAD Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.383000 audit: BPF prog-id=138 op=LOAD Jul 12 00:24:58.383000 audit[3531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3351 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037353762623337316232666166376131363235336464346665386532 Jul 12 00:24:58.504370 env[1813]: time="2025-07-12T00:24:58.504303002Z" level=info msg="StartContainer for \"0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53\" returns successfully" Jul 12 00:24:58.539980 systemd[1]: cri-containerd-0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53.scope: Deactivated successfully. Jul 12 00:24:58.543000 audit: BPF prog-id=138 op=UNLOAD Jul 12 00:24:58.834146 systemd[1]: run-containerd-runc-k8s.io-0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53-runc.luEzBZ.mount: Deactivated successfully. Jul 12 00:24:58.834428 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53-rootfs.mount: Deactivated successfully. Jul 12 00:24:58.958442 env[1813]: time="2025-07-12T00:24:58.957950202Z" level=info msg="shim disconnected" id=0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53 Jul 12 00:24:58.958442 env[1813]: time="2025-07-12T00:24:58.958045397Z" level=warning msg="cleaning up after shim disconnected" id=0757bb371b2faf7a16253dd4fe8e257d15db2cd4aac1a0ac2082845847743f53 namespace=k8s.io Jul 12 00:24:58.958442 env[1813]: time="2025-07-12T00:24:58.958099283Z" level=info msg="cleaning up dead shim" Jul 12 00:24:58.974390 env[1813]: time="2025-07-12T00:24:58.974317859Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:24:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3575 runtime=io.containerd.runc.v2\n" Jul 12 00:24:59.594044 kubelet[2909]: E0712 00:24:59.593935 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:24:59.787500 env[1813]: time="2025-07-12T00:24:59.787431465Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 12 00:25:01.595015 kubelet[2909]: E0712 00:25:01.594311 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:25:03.594884 kubelet[2909]: E0712 00:25:03.594778 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:25:04.505848 env[1813]: time="2025-07-12T00:25:04.505733537Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:04.508366 env[1813]: time="2025-07-12T00:25:04.508222991Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:04.512246 env[1813]: time="2025-07-12T00:25:04.511489973Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:04.516573 env[1813]: time="2025-07-12T00:25:04.516506385Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 12 00:25:04.517267 env[1813]: time="2025-07-12T00:25:04.517016129Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:04.523972 env[1813]: time="2025-07-12T00:25:04.523610424Z" level=info msg="CreateContainer within sandbox \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 12 00:25:04.548609 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1658191217.mount: Deactivated successfully. Jul 12 00:25:04.558947 env[1813]: time="2025-07-12T00:25:04.558862147Z" level=info msg="CreateContainer within sandbox \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24\"" Jul 12 00:25:04.562440 env[1813]: time="2025-07-12T00:25:04.561391697Z" level=info msg="StartContainer for \"d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24\"" Jul 12 00:25:04.611836 systemd[1]: Started cri-containerd-d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24.scope. Jul 12 00:25:04.630735 systemd[1]: run-containerd-runc-k8s.io-d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24-runc.sE3nnk.mount: Deactivated successfully. Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.699516 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 12 00:25:04.699728 kernel: audit: type=1400 audit(1752279904.696:1007): avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3351 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.722405 kernel: audit: type=1300 audit(1752279904.696:1007): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3351 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430313061653338366535363236386664396630613965653732653734 Jul 12 00:25:04.737742 kernel: audit: type=1327 audit(1752279904.696:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430313061653338366535363236386664396630613965653732653734 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.746385 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.755636 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.764879 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.774374 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.784877 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.785034 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.802855 kernel: audit: type=1400 audit(1752279904.696:1008): avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.803783 env[1813]: time="2025-07-12T00:25:04.803684007Z" level=info msg="StartContainer for \"d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24\" returns successfully" Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.696000 audit: BPF prog-id=139 op=LOAD Jul 12 00:25:04.696000 audit[3600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3351 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430313061653338366535363236386664396630613965653732653734 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.698000 audit: BPF prog-id=140 op=LOAD Jul 12 00:25:04.698000 audit[3600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3351 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430313061653338366535363236386664396630613965653732653734 Jul 12 00:25:04.706000 audit: BPF prog-id=140 op=UNLOAD Jul 12 00:25:04.706000 audit: BPF prog-id=139 op=UNLOAD Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { perfmon } for pid=3600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit[3600]: AVC avc: denied { bpf } for pid=3600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.706000 audit: BPF prog-id=141 op=LOAD Jul 12 00:25:04.706000 audit[3600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3351 pid=3600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430313061653338366535363236386664396630613965653732653734 Jul 12 00:25:05.596630 kubelet[2909]: E0712 00:25:05.594963 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:25:06.126245 env[1813]: time="2025-07-12T00:25:06.126065042Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:25:06.131278 systemd[1]: cri-containerd-d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24.scope: Deactivated successfully. Jul 12 00:25:06.131745 systemd[1]: cri-containerd-d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24.scope: Consumed 1.209s CPU time. Jul 12 00:25:06.134000 audit: BPF prog-id=141 op=UNLOAD Jul 12 00:25:06.153029 kubelet[2909]: I0712 00:25:06.152956 2909 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 12 00:25:06.223636 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24-rootfs.mount: Deactivated successfully. Jul 12 00:25:06.245407 systemd[1]: Created slice kubepods-burstable-pod4393f0b3_32c9_454a_9e18_275192d2faaa.slice. Jul 12 00:25:06.270859 kubelet[2909]: I0712 00:25:06.270068 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l7sfc\" (UniqueName: \"kubernetes.io/projected/4393f0b3-32c9-454a-9e18-275192d2faaa-kube-api-access-l7sfc\") pod \"coredns-668d6bf9bc-lh4v8\" (UID: \"4393f0b3-32c9-454a-9e18-275192d2faaa\") " pod="kube-system/coredns-668d6bf9bc-lh4v8" Jul 12 00:25:06.270859 kubelet[2909]: I0712 00:25:06.270166 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hqgmn\" (UniqueName: \"kubernetes.io/projected/115e2b7e-ce17-422c-ab82-9a084dba0347-kube-api-access-hqgmn\") pod \"coredns-668d6bf9bc-vrkdm\" (UID: \"115e2b7e-ce17-422c-ab82-9a084dba0347\") " pod="kube-system/coredns-668d6bf9bc-vrkdm" Jul 12 00:25:06.270859 kubelet[2909]: I0712 00:25:06.270235 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/115e2b7e-ce17-422c-ab82-9a084dba0347-config-volume\") pod \"coredns-668d6bf9bc-vrkdm\" (UID: \"115e2b7e-ce17-422c-ab82-9a084dba0347\") " pod="kube-system/coredns-668d6bf9bc-vrkdm" Jul 12 00:25:06.270859 kubelet[2909]: I0712 00:25:06.270282 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4393f0b3-32c9-454a-9e18-275192d2faaa-config-volume\") pod \"coredns-668d6bf9bc-lh4v8\" (UID: \"4393f0b3-32c9-454a-9e18-275192d2faaa\") " pod="kube-system/coredns-668d6bf9bc-lh4v8" Jul 12 00:25:06.270430 systemd[1]: Created slice kubepods-burstable-pod115e2b7e_ce17_422c_ab82_9a084dba0347.slice. Jul 12 00:25:06.297171 systemd[1]: Created slice kubepods-besteffort-pod1311ce9e_8b34_448a_adb1_36c3adf1e1ff.slice. Jul 12 00:25:06.343153 systemd[1]: Created slice kubepods-besteffort-pod0516e3b7_78f1_4375_bd02_88ead332311a.slice. Jul 12 00:25:06.354393 kubelet[2909]: W0712 00:25:06.353460 2909 reflector.go:569] object-"calico-system"/"goldmane": failed to list *v1.ConfigMap: configmaps "goldmane" is forbidden: User "system:node:ip-172-31-27-156" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-27-156' and this object Jul 12 00:25:06.354393 kubelet[2909]: E0712 00:25:06.353945 2909 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"goldmane\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"goldmane\" is forbidden: User \"system:node:ip-172-31-27-156\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-27-156' and this object" logger="UnhandledError" Jul 12 00:25:06.358868 kubelet[2909]: W0712 00:25:06.355454 2909 reflector.go:569] object-"calico-system"/"goldmane-ca-bundle": failed to list *v1.ConfigMap: configmaps "goldmane-ca-bundle" is forbidden: User "system:node:ip-172-31-27-156" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-27-156' and this object Jul 12 00:25:06.358868 kubelet[2909]: E0712 00:25:06.355550 2909 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"goldmane-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"goldmane-ca-bundle\" is forbidden: User \"system:node:ip-172-31-27-156\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-27-156' and this object" logger="UnhandledError" Jul 12 00:25:06.374301 kubelet[2909]: I0712 00:25:06.372154 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/974e5eee-e5f3-46db-a740-7e56db54868a-calico-apiserver-certs\") pod \"calico-apiserver-7c994777b8-b54fl\" (UID: \"974e5eee-e5f3-46db-a740-7e56db54868a\") " pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" Jul 12 00:25:06.374301 kubelet[2909]: I0712 00:25:06.373044 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6252a4f0-29f6-482e-9ad2-072532702264-calico-apiserver-certs\") pod \"calico-apiserver-7c994777b8-jznt5\" (UID: \"6252a4f0-29f6-482e-9ad2-072532702264\") " pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" Jul 12 00:25:06.374301 kubelet[2909]: I0712 00:25:06.373326 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-svkvp\" (UniqueName: \"kubernetes.io/projected/6252a4f0-29f6-482e-9ad2-072532702264-kube-api-access-svkvp\") pod \"calico-apiserver-7c994777b8-jznt5\" (UID: \"6252a4f0-29f6-482e-9ad2-072532702264\") " pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" Jul 12 00:25:06.374301 kubelet[2909]: I0712 00:25:06.373509 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/c427eecb-6235-4057-9d5f-e009ae4d1cfa-goldmane-key-pair\") pod \"goldmane-768f4c5c69-rv8kz\" (UID: \"c427eecb-6235-4057-9d5f-e009ae4d1cfa\") " pod="calico-system/goldmane-768f4c5c69-rv8kz" Jul 12 00:25:06.374301 kubelet[2909]: I0712 00:25:06.373838 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/c427eecb-6235-4057-9d5f-e009ae4d1cfa-config\") pod \"goldmane-768f4c5c69-rv8kz\" (UID: \"c427eecb-6235-4057-9d5f-e009ae4d1cfa\") " pod="calico-system/goldmane-768f4c5c69-rv8kz" Jul 12 00:25:06.374845 kubelet[2909]: I0712 00:25:06.374032 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c427eecb-6235-4057-9d5f-e009ae4d1cfa-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-rv8kz\" (UID: \"c427eecb-6235-4057-9d5f-e009ae4d1cfa\") " pod="calico-system/goldmane-768f4c5c69-rv8kz" Jul 12 00:25:06.374845 kubelet[2909]: I0712 00:25:06.374142 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-backend-key-pair\") pod \"whisker-68fd5f6dff-wdd4d\" (UID: \"0516e3b7-78f1-4375-bd02-88ead332311a\") " pod="calico-system/whisker-68fd5f6dff-wdd4d" Jul 12 00:25:06.374845 kubelet[2909]: I0712 00:25:06.374263 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1311ce9e-8b34-448a-adb1-36c3adf1e1ff-calico-apiserver-certs\") pod \"calico-apiserver-c699c5847-hd8v7\" (UID: \"1311ce9e-8b34-448a-adb1-36c3adf1e1ff\") " pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" Jul 12 00:25:06.374845 kubelet[2909]: I0712 00:25:06.374527 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l4xrq\" (UniqueName: \"kubernetes.io/projected/974e5eee-e5f3-46db-a740-7e56db54868a-kube-api-access-l4xrq\") pod \"calico-apiserver-7c994777b8-b54fl\" (UID: \"974e5eee-e5f3-46db-a740-7e56db54868a\") " pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" Jul 12 00:25:06.377078 systemd[1]: Created slice kubepods-besteffort-podc427eecb_6235_4057_9d5f_e009ae4d1cfa.slice. Jul 12 00:25:06.390439 kubelet[2909]: I0712 00:25:06.375119 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9qxsl\" (UniqueName: \"kubernetes.io/projected/1311ce9e-8b34-448a-adb1-36c3adf1e1ff-kube-api-access-9qxsl\") pod \"calico-apiserver-c699c5847-hd8v7\" (UID: \"1311ce9e-8b34-448a-adb1-36c3adf1e1ff\") " pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" Jul 12 00:25:06.390439 kubelet[2909]: I0712 00:25:06.390245 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x6txj\" (UniqueName: \"kubernetes.io/projected/c427eecb-6235-4057-9d5f-e009ae4d1cfa-kube-api-access-x6txj\") pod \"goldmane-768f4c5c69-rv8kz\" (UID: \"c427eecb-6235-4057-9d5f-e009ae4d1cfa\") " pod="calico-system/goldmane-768f4c5c69-rv8kz" Jul 12 00:25:06.393395 kubelet[2909]: I0712 00:25:06.390910 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-ca-bundle\") pod \"whisker-68fd5f6dff-wdd4d\" (UID: \"0516e3b7-78f1-4375-bd02-88ead332311a\") " pod="calico-system/whisker-68fd5f6dff-wdd4d" Jul 12 00:25:06.393395 kubelet[2909]: I0712 00:25:06.390984 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kb2kn\" (UniqueName: \"kubernetes.io/projected/0516e3b7-78f1-4375-bd02-88ead332311a-kube-api-access-kb2kn\") pod \"whisker-68fd5f6dff-wdd4d\" (UID: \"0516e3b7-78f1-4375-bd02-88ead332311a\") " pod="calico-system/whisker-68fd5f6dff-wdd4d" Jul 12 00:25:06.401601 systemd[1]: Created slice kubepods-besteffort-pod6252a4f0_29f6_482e_9ad2_072532702264.slice. Jul 12 00:25:06.432685 systemd[1]: Created slice kubepods-besteffort-pod974e5eee_e5f3_46db_a740_7e56db54868a.slice. Jul 12 00:25:06.449851 systemd[1]: Created slice kubepods-besteffort-pod737559a1_5637_4ede_8bf9_c2d41a47c349.slice. Jul 12 00:25:06.496077 kubelet[2909]: I0712 00:25:06.492024 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-84hzv\" (UniqueName: \"kubernetes.io/projected/737559a1-5637-4ede-8bf9-c2d41a47c349-kube-api-access-84hzv\") pod \"calico-kube-controllers-5864457bbf-w7sk8\" (UID: \"737559a1-5637-4ede-8bf9-c2d41a47c349\") " pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" Jul 12 00:25:06.496077 kubelet[2909]: I0712 00:25:06.492286 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/737559a1-5637-4ede-8bf9-c2d41a47c349-tigera-ca-bundle\") pod \"calico-kube-controllers-5864457bbf-w7sk8\" (UID: \"737559a1-5637-4ede-8bf9-c2d41a47c349\") " pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" Jul 12 00:25:06.532519 env[1813]: time="2025-07-12T00:25:06.532396830Z" level=info msg="shim disconnected" id=d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24 Jul 12 00:25:06.532519 env[1813]: time="2025-07-12T00:25:06.532479207Z" level=warning msg="cleaning up after shim disconnected" id=d010ae386e56268fd9f0a9ee72e74b06decdd4bd1b2d2e4fc257dad6b5fb1f24 namespace=k8s.io Jul 12 00:25:06.532519 env[1813]: time="2025-07-12T00:25:06.532503533Z" level=info msg="cleaning up dead shim" Jul 12 00:25:06.575457 env[1813]: time="2025-07-12T00:25:06.575367765Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:25:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3650 runtime=io.containerd.runc.v2\n" Jul 12 00:25:06.586621 env[1813]: time="2025-07-12T00:25:06.586029304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vrkdm,Uid:115e2b7e-ce17-422c-ab82-9a084dba0347,Namespace:kube-system,Attempt:0,}" Jul 12 00:25:06.586621 env[1813]: time="2025-07-12T00:25:06.586029340Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lh4v8,Uid:4393f0b3-32c9-454a-9e18-275192d2faaa,Namespace:kube-system,Attempt:0,}" Jul 12 00:25:06.717678 env[1813]: time="2025-07-12T00:25:06.716129853Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-jznt5,Uid:6252a4f0-29f6-482e-9ad2-072532702264,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:25:06.744526 env[1813]: time="2025-07-12T00:25:06.744445404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-b54fl,Uid:974e5eee-e5f3-46db-a740-7e56db54868a,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:25:06.762865 env[1813]: time="2025-07-12T00:25:06.762800854Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5864457bbf-w7sk8,Uid:737559a1-5637-4ede-8bf9-c2d41a47c349,Namespace:calico-system,Attempt:0,}" Jul 12 00:25:06.849329 env[1813]: time="2025-07-12T00:25:06.849268236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 12 00:25:06.908385 env[1813]: time="2025-07-12T00:25:06.908319324Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c699c5847-hd8v7,Uid:1311ce9e-8b34-448a-adb1-36c3adf1e1ff,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:25:06.968859 env[1813]: time="2025-07-12T00:25:06.968064865Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68fd5f6dff-wdd4d,Uid:0516e3b7-78f1-4375-bd02-88ead332311a,Namespace:calico-system,Attempt:0,}" Jul 12 00:25:07.085344 env[1813]: time="2025-07-12T00:25:07.085217171Z" level=error msg="Failed to destroy network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.086130 env[1813]: time="2025-07-12T00:25:07.086019900Z" level=error msg="encountered an error cleaning up failed sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.086739 env[1813]: time="2025-07-12T00:25:07.086158443Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lh4v8,Uid:4393f0b3-32c9-454a-9e18-275192d2faaa,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.087090 kubelet[2909]: E0712 00:25:07.086649 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.087090 kubelet[2909]: E0712 00:25:07.086754 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-lh4v8" Jul 12 00:25:07.087090 kubelet[2909]: E0712 00:25:07.086793 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-lh4v8" Jul 12 00:25:07.088927 kubelet[2909]: E0712 00:25:07.086923 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-lh4v8_kube-system(4393f0b3-32c9-454a-9e18-275192d2faaa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-lh4v8_kube-system(4393f0b3-32c9-454a-9e18-275192d2faaa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-lh4v8" podUID="4393f0b3-32c9-454a-9e18-275192d2faaa" Jul 12 00:25:07.136761 env[1813]: time="2025-07-12T00:25:07.136681041Z" level=error msg="Failed to destroy network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.138230 env[1813]: time="2025-07-12T00:25:07.138118480Z" level=error msg="encountered an error cleaning up failed sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.138583 env[1813]: time="2025-07-12T00:25:07.138515002Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vrkdm,Uid:115e2b7e-ce17-422c-ab82-9a084dba0347,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.139112 kubelet[2909]: E0712 00:25:07.139036 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.139375 kubelet[2909]: E0712 00:25:07.139128 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-vrkdm" Jul 12 00:25:07.139375 kubelet[2909]: E0712 00:25:07.139166 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-vrkdm" Jul 12 00:25:07.139375 kubelet[2909]: E0712 00:25:07.139297 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-vrkdm_kube-system(115e2b7e-ce17-422c-ab82-9a084dba0347)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-vrkdm_kube-system(115e2b7e-ce17-422c-ab82-9a084dba0347)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-vrkdm" podUID="115e2b7e-ce17-422c-ab82-9a084dba0347" Jul 12 00:25:07.318462 env[1813]: time="2025-07-12T00:25:07.318336803Z" level=error msg="Failed to destroy network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.323397 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0-shm.mount: Deactivated successfully. Jul 12 00:25:07.329007 env[1813]: time="2025-07-12T00:25:07.323611600Z" level=error msg="Failed to destroy network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.332720 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0-shm.mount: Deactivated successfully. Jul 12 00:25:07.337012 env[1813]: time="2025-07-12T00:25:07.336464957Z" level=error msg="Failed to destroy network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.337434 env[1813]: time="2025-07-12T00:25:07.337149701Z" level=error msg="encountered an error cleaning up failed sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.337434 env[1813]: time="2025-07-12T00:25:07.337303833Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-jznt5,Uid:6252a4f0-29f6-482e-9ad2-072532702264,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.337879 env[1813]: time="2025-07-12T00:25:07.337797409Z" level=error msg="encountered an error cleaning up failed sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.337989 env[1813]: time="2025-07-12T00:25:07.337902769Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-b54fl,Uid:974e5eee-e5f3-46db-a740-7e56db54868a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.338355 kubelet[2909]: E0712 00:25:07.338253 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.338355 kubelet[2909]: E0712 00:25:07.338344 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" Jul 12 00:25:07.340900 kubelet[2909]: E0712 00:25:07.338381 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" Jul 12 00:25:07.340900 kubelet[2909]: E0712 00:25:07.338462 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7c994777b8-b54fl_calico-apiserver(974e5eee-e5f3-46db-a740-7e56db54868a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7c994777b8-b54fl_calico-apiserver(974e5eee-e5f3-46db-a740-7e56db54868a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" podUID="974e5eee-e5f3-46db-a740-7e56db54868a" Jul 12 00:25:07.340900 kubelet[2909]: E0712 00:25:07.338253 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.341383 kubelet[2909]: E0712 00:25:07.338542 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" Jul 12 00:25:07.341383 kubelet[2909]: E0712 00:25:07.338607 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" Jul 12 00:25:07.341383 kubelet[2909]: E0712 00:25:07.338696 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7c994777b8-jznt5_calico-apiserver(6252a4f0-29f6-482e-9ad2-072532702264)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7c994777b8-jznt5_calico-apiserver(6252a4f0-29f6-482e-9ad2-072532702264)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" podUID="6252a4f0-29f6-482e-9ad2-072532702264" Jul 12 00:25:07.350459 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12-shm.mount: Deactivated successfully. Jul 12 00:25:07.355698 env[1813]: time="2025-07-12T00:25:07.355591640Z" level=error msg="encountered an error cleaning up failed sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.356138 env[1813]: time="2025-07-12T00:25:07.356049572Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5864457bbf-w7sk8,Uid:737559a1-5637-4ede-8bf9-c2d41a47c349,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.357270 kubelet[2909]: E0712 00:25:07.356828 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.357270 kubelet[2909]: E0712 00:25:07.356946 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" Jul 12 00:25:07.357270 kubelet[2909]: E0712 00:25:07.357012 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" Jul 12 00:25:07.361146 kubelet[2909]: E0712 00:25:07.357142 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5864457bbf-w7sk8_calico-system(737559a1-5637-4ede-8bf9-c2d41a47c349)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5864457bbf-w7sk8_calico-system(737559a1-5637-4ede-8bf9-c2d41a47c349)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" podUID="737559a1-5637-4ede-8bf9-c2d41a47c349" Jul 12 00:25:07.420004 env[1813]: time="2025-07-12T00:25:07.419921600Z" level=error msg="Failed to destroy network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.426114 env[1813]: time="2025-07-12T00:25:07.424825641Z" level=error msg="encountered an error cleaning up failed sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.426114 env[1813]: time="2025-07-12T00:25:07.424930617Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c699c5847-hd8v7,Uid:1311ce9e-8b34-448a-adb1-36c3adf1e1ff,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.428447 kubelet[2909]: E0712 00:25:07.425244 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.428447 kubelet[2909]: E0712 00:25:07.425326 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" Jul 12 00:25:07.428447 kubelet[2909]: E0712 00:25:07.425357 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" Jul 12 00:25:07.424285 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49-shm.mount: Deactivated successfully. Jul 12 00:25:07.428861 kubelet[2909]: E0712 00:25:07.425427 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-c699c5847-hd8v7_calico-apiserver(1311ce9e-8b34-448a-adb1-36c3adf1e1ff)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-c699c5847-hd8v7_calico-apiserver(1311ce9e-8b34-448a-adb1-36c3adf1e1ff)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" podUID="1311ce9e-8b34-448a-adb1-36c3adf1e1ff" Jul 12 00:25:07.431180 env[1813]: time="2025-07-12T00:25:07.429541011Z" level=error msg="Failed to destroy network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.431180 env[1813]: time="2025-07-12T00:25:07.430759200Z" level=error msg="encountered an error cleaning up failed sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.431180 env[1813]: time="2025-07-12T00:25:07.430866215Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68fd5f6dff-wdd4d,Uid:0516e3b7-78f1-4375-bd02-88ead332311a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.431600 kubelet[2909]: E0712 00:25:07.431144 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.431600 kubelet[2909]: E0712 00:25:07.431432 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-68fd5f6dff-wdd4d" Jul 12 00:25:07.431600 kubelet[2909]: E0712 00:25:07.431471 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-68fd5f6dff-wdd4d" Jul 12 00:25:07.431833 kubelet[2909]: E0712 00:25:07.431545 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-68fd5f6dff-wdd4d_calico-system(0516e3b7-78f1-4375-bd02-88ead332311a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-68fd5f6dff-wdd4d_calico-system(0516e3b7-78f1-4375-bd02-88ead332311a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-68fd5f6dff-wdd4d" podUID="0516e3b7-78f1-4375-bd02-88ead332311a" Jul 12 00:25:07.493553 kubelet[2909]: E0712 00:25:07.493386 2909 configmap.go:193] Couldn't get configMap calico-system/goldmane-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:25:07.493553 kubelet[2909]: E0712 00:25:07.493527 2909 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/c427eecb-6235-4057-9d5f-e009ae4d1cfa-goldmane-ca-bundle podName:c427eecb-6235-4057-9d5f-e009ae4d1cfa nodeName:}" failed. No retries permitted until 2025-07-12 00:25:07.993494119 +0000 UTC m=+45.707603450 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "goldmane-ca-bundle" (UniqueName: "kubernetes.io/configmap/c427eecb-6235-4057-9d5f-e009ae4d1cfa-goldmane-ca-bundle") pod "goldmane-768f4c5c69-rv8kz" (UID: "c427eecb-6235-4057-9d5f-e009ae4d1cfa") : failed to sync configmap cache: timed out waiting for the condition Jul 12 00:25:07.523787 kubelet[2909]: E0712 00:25:07.523598 2909 configmap.go:193] Couldn't get configMap calico-system/goldmane: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:25:07.523787 kubelet[2909]: E0712 00:25:07.523742 2909 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/c427eecb-6235-4057-9d5f-e009ae4d1cfa-config podName:c427eecb-6235-4057-9d5f-e009ae4d1cfa nodeName:}" failed. No retries permitted until 2025-07-12 00:25:08.023713262 +0000 UTC m=+45.737822593 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config" (UniqueName: "kubernetes.io/configmap/c427eecb-6235-4057-9d5f-e009ae4d1cfa-config") pod "goldmane-768f4c5c69-rv8kz" (UID: "c427eecb-6235-4057-9d5f-e009ae4d1cfa") : failed to sync configmap cache: timed out waiting for the condition Jul 12 00:25:07.604938 systemd[1]: Created slice kubepods-besteffort-pode5fa5afc_e8d7_456a_856b_28fa80629c7d.slice. Jul 12 00:25:07.613493 env[1813]: time="2025-07-12T00:25:07.613434974Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nsj26,Uid:e5fa5afc-e8d7-456a-856b-28fa80629c7d,Namespace:calico-system,Attempt:0,}" Jul 12 00:25:07.743544 env[1813]: time="2025-07-12T00:25:07.743460361Z" level=error msg="Failed to destroy network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.744251 env[1813]: time="2025-07-12T00:25:07.744133776Z" level=error msg="encountered an error cleaning up failed sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.744386 env[1813]: time="2025-07-12T00:25:07.744285592Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nsj26,Uid:e5fa5afc-e8d7-456a-856b-28fa80629c7d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.745417 kubelet[2909]: E0712 00:25:07.744759 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.745417 kubelet[2909]: E0712 00:25:07.744850 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-nsj26" Jul 12 00:25:07.745417 kubelet[2909]: E0712 00:25:07.744885 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-nsj26" Jul 12 00:25:07.747688 kubelet[2909]: E0712 00:25:07.744983 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-nsj26_calico-system(e5fa5afc-e8d7-456a-856b-28fa80629c7d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-nsj26_calico-system(e5fa5afc-e8d7-456a-856b-28fa80629c7d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:25:07.837478 kubelet[2909]: I0712 00:25:07.837178 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:25:07.839818 env[1813]: time="2025-07-12T00:25:07.839758180Z" level=info msg="StopPodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\"" Jul 12 00:25:07.846783 kubelet[2909]: I0712 00:25:07.846718 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:07.848589 env[1813]: time="2025-07-12T00:25:07.848500323Z" level=info msg="StopPodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\"" Jul 12 00:25:07.857174 kubelet[2909]: I0712 00:25:07.856984 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:25:07.861717 env[1813]: time="2025-07-12T00:25:07.861657264Z" level=info msg="StopPodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\"" Jul 12 00:25:07.864958 kubelet[2909]: I0712 00:25:07.864888 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:25:07.869794 env[1813]: time="2025-07-12T00:25:07.869720711Z" level=info msg="StopPodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\"" Jul 12 00:25:07.875279 kubelet[2909]: I0712 00:25:07.874521 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:07.877975 env[1813]: time="2025-07-12T00:25:07.877912320Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" Jul 12 00:25:07.881593 kubelet[2909]: I0712 00:25:07.881533 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:07.884792 env[1813]: time="2025-07-12T00:25:07.884265167Z" level=info msg="StopPodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\"" Jul 12 00:25:07.889080 kubelet[2909]: I0712 00:25:07.889029 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:07.890541 env[1813]: time="2025-07-12T00:25:07.890437166Z" level=info msg="StopPodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\"" Jul 12 00:25:07.896136 kubelet[2909]: I0712 00:25:07.896076 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:25:07.899995 env[1813]: time="2025-07-12T00:25:07.899934885Z" level=info msg="StopPodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\"" Jul 12 00:25:07.981024 env[1813]: time="2025-07-12T00:25:07.980950254Z" level=error msg="StopPodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" failed" error="failed to destroy network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.981586 kubelet[2909]: E0712 00:25:07.981519 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:07.981750 kubelet[2909]: E0712 00:25:07.981612 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0"} Jul 12 00:25:07.981750 kubelet[2909]: E0712 00:25:07.981706 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"974e5eee-e5f3-46db-a740-7e56db54868a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:07.981916 kubelet[2909]: E0712 00:25:07.981749 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"974e5eee-e5f3-46db-a740-7e56db54868a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" podUID="974e5eee-e5f3-46db-a740-7e56db54868a" Jul 12 00:25:07.998283 env[1813]: time="2025-07-12T00:25:07.998165028Z" level=error msg="StopPodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" failed" error="failed to destroy network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:07.999173 kubelet[2909]: E0712 00:25:07.998855 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:25:07.999173 kubelet[2909]: E0712 00:25:07.998951 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49"} Jul 12 00:25:07.999173 kubelet[2909]: E0712 00:25:07.999031 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1311ce9e-8b34-448a-adb1-36c3adf1e1ff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:07.999173 kubelet[2909]: E0712 00:25:07.999076 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1311ce9e-8b34-448a-adb1-36c3adf1e1ff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" podUID="1311ce9e-8b34-448a-adb1-36c3adf1e1ff" Jul 12 00:25:08.082269 env[1813]: time="2025-07-12T00:25:08.082137309Z" level=error msg="StopPodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" failed" error="failed to destroy network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.083257 kubelet[2909]: E0712 00:25:08.082733 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:25:08.083257 kubelet[2909]: E0712 00:25:08.082852 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b"} Jul 12 00:25:08.083257 kubelet[2909]: E0712 00:25:08.082915 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.083257 kubelet[2909]: E0712 00:25:08.083111 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e5fa5afc-e8d7-456a-856b-28fa80629c7d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-nsj26" podUID="e5fa5afc-e8d7-456a-856b-28fa80629c7d" Jul 12 00:25:08.098664 env[1813]: time="2025-07-12T00:25:08.098586292Z" level=error msg="StopPodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" failed" error="failed to destroy network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.099604 kubelet[2909]: E0712 00:25:08.099266 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:08.099604 kubelet[2909]: E0712 00:25:08.099363 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1"} Jul 12 00:25:08.099604 kubelet[2909]: E0712 00:25:08.099448 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0516e3b7-78f1-4375-bd02-88ead332311a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.099604 kubelet[2909]: E0712 00:25:08.099515 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0516e3b7-78f1-4375-bd02-88ead332311a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-68fd5f6dff-wdd4d" podUID="0516e3b7-78f1-4375-bd02-88ead332311a" Jul 12 00:25:08.126247 env[1813]: time="2025-07-12T00:25:08.126058369Z" level=error msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" failed" error="failed to destroy network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.128039 kubelet[2909]: E0712 00:25:08.127618 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:08.128039 kubelet[2909]: E0712 00:25:08.127715 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0"} Jul 12 00:25:08.128039 kubelet[2909]: E0712 00:25:08.127818 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6252a4f0-29f6-482e-9ad2-072532702264\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.128039 kubelet[2909]: E0712 00:25:08.127898 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6252a4f0-29f6-482e-9ad2-072532702264\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" podUID="6252a4f0-29f6-482e-9ad2-072532702264" Jul 12 00:25:08.137678 env[1813]: time="2025-07-12T00:25:08.137528966Z" level=error msg="StopPodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" failed" error="failed to destroy network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.139722 kubelet[2909]: E0712 00:25:08.139144 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:25:08.139722 kubelet[2909]: E0712 00:25:08.139250 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411"} Jul 12 00:25:08.139722 kubelet[2909]: E0712 00:25:08.139421 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"115e2b7e-ce17-422c-ab82-9a084dba0347\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.139722 kubelet[2909]: E0712 00:25:08.139641 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"115e2b7e-ce17-422c-ab82-9a084dba0347\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-vrkdm" podUID="115e2b7e-ce17-422c-ab82-9a084dba0347" Jul 12 00:25:08.141965 env[1813]: time="2025-07-12T00:25:08.141876266Z" level=error msg="StopPodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" failed" error="failed to destroy network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.143367 kubelet[2909]: E0712 00:25:08.142492 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:08.143367 kubelet[2909]: E0712 00:25:08.142644 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda"} Jul 12 00:25:08.143367 kubelet[2909]: E0712 00:25:08.143136 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4393f0b3-32c9-454a-9e18-275192d2faaa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.143367 kubelet[2909]: E0712 00:25:08.143255 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4393f0b3-32c9-454a-9e18-275192d2faaa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-lh4v8" podUID="4393f0b3-32c9-454a-9e18-275192d2faaa" Jul 12 00:25:08.162822 env[1813]: time="2025-07-12T00:25:08.162735494Z" level=error msg="StopPodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" failed" error="failed to destroy network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.163584 kubelet[2909]: E0712 00:25:08.163240 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:25:08.163584 kubelet[2909]: E0712 00:25:08.163339 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12"} Jul 12 00:25:08.163584 kubelet[2909]: E0712 00:25:08.163422 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"737559a1-5637-4ede-8bf9-c2d41a47c349\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.163584 kubelet[2909]: E0712 00:25:08.163464 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"737559a1-5637-4ede-8bf9-c2d41a47c349\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" podUID="737559a1-5637-4ede-8bf9-c2d41a47c349" Jul 12 00:25:08.189573 env[1813]: time="2025-07-12T00:25:08.189513527Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rv8kz,Uid:c427eecb-6235-4057-9d5f-e009ae4d1cfa,Namespace:calico-system,Attempt:0,}" Jul 12 00:25:08.219402 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1-shm.mount: Deactivated successfully. Jul 12 00:25:08.358581 env[1813]: time="2025-07-12T00:25:08.358336336Z" level=error msg="Failed to destroy network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.363187 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5-shm.mount: Deactivated successfully. Jul 12 00:25:08.365491 env[1813]: time="2025-07-12T00:25:08.365380558Z" level=error msg="encountered an error cleaning up failed sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.365659 env[1813]: time="2025-07-12T00:25:08.365505491Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rv8kz,Uid:c427eecb-6235-4057-9d5f-e009ae4d1cfa,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.366442 kubelet[2909]: E0712 00:25:08.366101 2909 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.366442 kubelet[2909]: E0712 00:25:08.366272 2909 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-rv8kz" Jul 12 00:25:08.366442 kubelet[2909]: E0712 00:25:08.366336 2909 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-rv8kz" Jul 12 00:25:08.366952 kubelet[2909]: E0712 00:25:08.366496 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-rv8kz_calico-system(c427eecb-6235-4057-9d5f-e009ae4d1cfa)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-rv8kz_calico-system(c427eecb-6235-4057-9d5f-e009ae4d1cfa)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-rv8kz" podUID="c427eecb-6235-4057-9d5f-e009ae4d1cfa" Jul 12 00:25:08.907245 kubelet[2909]: I0712 00:25:08.906392 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:25:08.911272 env[1813]: time="2025-07-12T00:25:08.911172701Z" level=info msg="StopPodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\"" Jul 12 00:25:08.964563 env[1813]: time="2025-07-12T00:25:08.964449285Z" level=error msg="StopPodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" failed" error="failed to destroy network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:25:08.965382 kubelet[2909]: E0712 00:25:08.965029 2909 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:25:08.965382 kubelet[2909]: E0712 00:25:08.965133 2909 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5"} Jul 12 00:25:08.965382 kubelet[2909]: E0712 00:25:08.965247 2909 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c427eecb-6235-4057-9d5f-e009ae4d1cfa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:25:08.965382 kubelet[2909]: E0712 00:25:08.965328 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c427eecb-6235-4057-9d5f-e009ae4d1cfa\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-rv8kz" podUID="c427eecb-6235-4057-9d5f-e009ae4d1cfa" Jul 12 00:25:13.598080 amazon-ssm-agent[1795]: 2025-07-12 00:25:13 INFO [HealthCheck] HealthCheck reporting agent health. Jul 12 00:25:16.749571 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2302230299.mount: Deactivated successfully. Jul 12 00:25:16.811791 env[1813]: time="2025-07-12T00:25:16.811699679Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:16.816492 env[1813]: time="2025-07-12T00:25:16.816396766Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:16.818632 env[1813]: time="2025-07-12T00:25:16.818554974Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:16.822027 env[1813]: time="2025-07-12T00:25:16.821894770Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:16.823926 env[1813]: time="2025-07-12T00:25:16.823842922Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 12 00:25:16.858322 env[1813]: time="2025-07-12T00:25:16.858259607Z" level=info msg="CreateContainer within sandbox \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 12 00:25:16.894041 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2993296534.mount: Deactivated successfully. Jul 12 00:25:16.898475 env[1813]: time="2025-07-12T00:25:16.898411434Z" level=info msg="CreateContainer within sandbox \"3961d3465d0d464bef2129c820ac6f6fb0071a4bacc64bac3110ddceb0bab09a\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344\"" Jul 12 00:25:16.899539 env[1813]: time="2025-07-12T00:25:16.899488978Z" level=info msg="StartContainer for \"5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344\"" Jul 12 00:25:16.945543 systemd[1]: Started cri-containerd-5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344.scope. Jul 12 00:25:17.000000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003355 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 12 00:25:17.003551 kernel: audit: type=1400 audit(1752279917.000:1014): avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.000000 audit[4053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3351 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:17.023636 kernel: audit: type=1300 audit(1752279917.000:1014): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3351 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:17.023777 kernel: audit: type=1327 audit(1752279917.000:1014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532323466656536646335303662313466643438356639393064613436 Jul 12 00:25:17.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532323466656536646335303662313466643438356639393064613436 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.042348 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.046585 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.059381 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.059575 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.074724 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.082656 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.091637 kernel: audit: type=1400 audit(1752279917.001:1015): avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.001000 audit: BPF prog-id=142 op=LOAD Jul 12 00:25:17.001000 audit[4053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3351 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:17.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532323466656536646335303662313466643438356639393064613436 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.003000 audit: BPF prog-id=143 op=LOAD Jul 12 00:25:17.003000 audit[4053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3351 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:17.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532323466656536646335303662313466643438356639393064613436 Jul 12 00:25:17.010000 audit: BPF prog-id=143 op=UNLOAD Jul 12 00:25:17.010000 audit: BPF prog-id=142 op=UNLOAD Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { perfmon } for pid=4053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit[4053]: AVC avc: denied { bpf } for pid=4053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:17.010000 audit: BPF prog-id=144 op=LOAD Jul 12 00:25:17.010000 audit[4053]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3351 pid=4053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:17.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532323466656536646335303662313466643438356639393064613436 Jul 12 00:25:17.095587 env[1813]: time="2025-07-12T00:25:17.093622986Z" level=info msg="StartContainer for \"5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344\" returns successfully" Jul 12 00:25:17.362135 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 12 00:25:17.362342 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 12 00:25:17.554918 env[1813]: time="2025-07-12T00:25:17.554844721Z" level=info msg="StopPodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\"" Jul 12 00:25:18.018892 kubelet[2909]: I0712 00:25:18.018758 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-shjz8" podStartSLOduration=2.6255188 podStartE2EDuration="25.018734143s" podCreationTimestamp="2025-07-12 00:24:53 +0000 UTC" firstStartedPulling="2025-07-12 00:24:54.432429017 +0000 UTC m=+32.146538336" lastFinishedPulling="2025-07-12 00:25:16.825644348 +0000 UTC m=+54.539753679" observedRunningTime="2025-07-12 00:25:18.018336861 +0000 UTC m=+55.732446204" watchObservedRunningTime="2025-07-12 00:25:18.018734143 +0000 UTC m=+55.732843486" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.773 [INFO][4102] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.774 [INFO][4102] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" iface="eth0" netns="/var/run/netns/cni-7de0d8dd-f518-9313-cb95-cd82f192f9cd" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.774 [INFO][4102] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" iface="eth0" netns="/var/run/netns/cni-7de0d8dd-f518-9313-cb95-cd82f192f9cd" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.776 [INFO][4102] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" iface="eth0" netns="/var/run/netns/cni-7de0d8dd-f518-9313-cb95-cd82f192f9cd" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.778 [INFO][4102] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.778 [INFO][4102] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.941 [INFO][4114] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.942 [INFO][4114] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:17.942 [INFO][4114] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:18.006 [WARNING][4114] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:18.006 [INFO][4114] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:18.017 [INFO][4114] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:18.040253 env[1813]: 2025-07-12 00:25:18.028 [INFO][4102] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:18.041959 env[1813]: time="2025-07-12T00:25:18.041896492Z" level=info msg="TearDown network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" successfully" Jul 12 00:25:18.042173 env[1813]: time="2025-07-12T00:25:18.042126157Z" level=info msg="StopPodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" returns successfully" Jul 12 00:25:18.051074 systemd[1]: run-netns-cni\x2d7de0d8dd\x2df518\x2d9313\x2dcb95\x2dcd82f192f9cd.mount: Deactivated successfully. Jul 12 00:25:18.200342 kubelet[2909]: I0712 00:25:18.199569 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kb2kn\" (UniqueName: \"kubernetes.io/projected/0516e3b7-78f1-4375-bd02-88ead332311a-kube-api-access-kb2kn\") pod \"0516e3b7-78f1-4375-bd02-88ead332311a\" (UID: \"0516e3b7-78f1-4375-bd02-88ead332311a\") " Jul 12 00:25:18.200342 kubelet[2909]: I0712 00:25:18.199669 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-ca-bundle\") pod \"0516e3b7-78f1-4375-bd02-88ead332311a\" (UID: \"0516e3b7-78f1-4375-bd02-88ead332311a\") " Jul 12 00:25:18.200342 kubelet[2909]: I0712 00:25:18.199732 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-backend-key-pair\") pod \"0516e3b7-78f1-4375-bd02-88ead332311a\" (UID: \"0516e3b7-78f1-4375-bd02-88ead332311a\") " Jul 12 00:25:18.215288 kubelet[2909]: I0712 00:25:18.215211 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "0516e3b7-78f1-4375-bd02-88ead332311a" (UID: "0516e3b7-78f1-4375-bd02-88ead332311a"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 12 00:25:18.224288 kubelet[2909]: I0712 00:25:18.222837 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0516e3b7-78f1-4375-bd02-88ead332311a-kube-api-access-kb2kn" (OuterVolumeSpecName: "kube-api-access-kb2kn") pod "0516e3b7-78f1-4375-bd02-88ead332311a" (UID: "0516e3b7-78f1-4375-bd02-88ead332311a"). InnerVolumeSpecName "kube-api-access-kb2kn". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 12 00:25:18.224288 kubelet[2909]: I0712 00:25:18.223081 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "0516e3b7-78f1-4375-bd02-88ead332311a" (UID: "0516e3b7-78f1-4375-bd02-88ead332311a"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 12 00:25:18.223576 systemd[1]: var-lib-kubelet-pods-0516e3b7\x2d78f1\x2d4375\x2dbd02\x2d88ead332311a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkb2kn.mount: Deactivated successfully. Jul 12 00:25:18.223787 systemd[1]: var-lib-kubelet-pods-0516e3b7\x2d78f1\x2d4375\x2dbd02\x2d88ead332311a-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 12 00:25:18.226000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:18.226000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012c28b10 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:25:18.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:25:18.227000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:18.227000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012c28ba0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:25:18.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:25:18.228000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7346 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:18.228000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012c28c90 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:25:18.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:25:18.238000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:18.238000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012c94060 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:25:18.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:25:18.300648 kubelet[2909]: I0712 00:25:18.300508 2909 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-backend-key-pair\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:18.300915 kubelet[2909]: I0712 00:25:18.300879 2909 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-kb2kn\" (UniqueName: \"kubernetes.io/projected/0516e3b7-78f1-4375-bd02-88ead332311a-kube-api-access-kb2kn\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:18.301069 kubelet[2909]: I0712 00:25:18.301045 2909 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0516e3b7-78f1-4375-bd02-88ead332311a-whisker-ca-bundle\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:18.394000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:18.394000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012c8c420 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:25:18.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:25:18.472000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:18.472000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012c94180 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:25:18.472000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:25:18.597090 env[1813]: time="2025-07-12T00:25:18.595293794Z" level=info msg="StopPodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\"" Jul 12 00:25:18.612097 systemd[1]: Removed slice kubepods-besteffort-pod0516e3b7_78f1_4375_bd02_88ead332311a.slice. Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.696 [INFO][4165] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.696 [INFO][4165] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" iface="eth0" netns="/var/run/netns/cni-1bf04b8a-4c14-d230-b436-06d3cbdcb086" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.698 [INFO][4165] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" iface="eth0" netns="/var/run/netns/cni-1bf04b8a-4c14-d230-b436-06d3cbdcb086" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.699 [INFO][4165] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" iface="eth0" netns="/var/run/netns/cni-1bf04b8a-4c14-d230-b436-06d3cbdcb086" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.699 [INFO][4165] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.699 [INFO][4165] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.738 [INFO][4173] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.739 [INFO][4173] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.739 [INFO][4173] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.752 [WARNING][4173] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.752 [INFO][4173] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.755 [INFO][4173] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:18.762329 env[1813]: 2025-07-12 00:25:18.758 [INFO][4165] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:18.764456 env[1813]: time="2025-07-12T00:25:18.764388910Z" level=info msg="TearDown network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" successfully" Jul 12 00:25:18.764638 env[1813]: time="2025-07-12T00:25:18.764599796Z" level=info msg="StopPodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" returns successfully" Jul 12 00:25:18.769795 systemd[1]: run-netns-cni\x2d1bf04b8a\x2d4c14\x2dd230\x2db436\x2d06d3cbdcb086.mount: Deactivated successfully. Jul 12 00:25:18.772674 env[1813]: time="2025-07-12T00:25:18.772600813Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-b54fl,Uid:974e5eee-e5f3-46db-a740-7e56db54868a,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:25:19.040117 systemd[1]: run-containerd-runc-k8s.io-5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344-runc.e5SqMQ.mount: Deactivated successfully. Jul 12 00:25:19.079490 (udev-worker)[4210]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:25:19.102410 systemd-networkd[1535]: calia5dbed22c2d: Link UP Jul 12 00:25:19.109632 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:25:19.109825 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia5dbed22c2d: link becomes ready Jul 12 00:25:19.110372 systemd-networkd[1535]: calia5dbed22c2d: Gained carrier Jul 12 00:25:19.159557 systemd[1]: Created slice kubepods-besteffort-pod62d22a7f_acd2_483d_afdd_00451b1edb32.slice. Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.858 [INFO][4181] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.879 [INFO][4181] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0 calico-apiserver-7c994777b8- calico-apiserver 974e5eee-e5f3-46db-a740-7e56db54868a 922 0 2025-07-12 00:24:44 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7c994777b8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-156 calico-apiserver-7c994777b8-b54fl eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia5dbed22c2d [] [] }} ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.879 [INFO][4181] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.926 [INFO][4192] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.926 [INFO][4192] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c1790), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-156", "pod":"calico-apiserver-7c994777b8-b54fl", "timestamp":"2025-07-12 00:25:18.926438339 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.927 [INFO][4192] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.927 [INFO][4192] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.927 [INFO][4192] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.945 [INFO][4192] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.954 [INFO][4192] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.970 [INFO][4192] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.982 [INFO][4192] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.988 [INFO][4192] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.988 [INFO][4192] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:18.992 [INFO][4192] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:19.006 [INFO][4192] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:19.034 [INFO][4192] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.193/26] block=192.168.36.192/26 handle="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:19.034 [INFO][4192] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.193/26] handle="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" host="ip-172-31-27-156" Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:19.034 [INFO][4192] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:19.200821 env[1813]: 2025-07-12 00:25:19.034 [INFO][4192] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.193/26] IPv6=[] ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.202908 env[1813]: 2025-07-12 00:25:19.055 [INFO][4181] cni-plugin/k8s.go 418: Populated endpoint ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"974e5eee-e5f3-46db-a740-7e56db54868a", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"calico-apiserver-7c994777b8-b54fl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia5dbed22c2d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:19.202908 env[1813]: 2025-07-12 00:25:19.055 [INFO][4181] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.193/32] ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.202908 env[1813]: 2025-07-12 00:25:19.055 [INFO][4181] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia5dbed22c2d ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.202908 env[1813]: 2025-07-12 00:25:19.120 [INFO][4181] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.202908 env[1813]: 2025-07-12 00:25:19.126 [INFO][4181] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"974e5eee-e5f3-46db-a740-7e56db54868a", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad", Pod:"calico-apiserver-7c994777b8-b54fl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia5dbed22c2d", MAC:"36:3c:43:af:79:48", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:19.202908 env[1813]: 2025-07-12 00:25:19.185 [INFO][4181] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-b54fl" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:19.207664 kubelet[2909]: I0712 00:25:19.207606 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/62d22a7f-acd2-483d-afdd-00451b1edb32-whisker-backend-key-pair\") pod \"whisker-7db5458c9c-xlrx4\" (UID: \"62d22a7f-acd2-483d-afdd-00451b1edb32\") " pod="calico-system/whisker-7db5458c9c-xlrx4" Jul 12 00:25:19.208512 kubelet[2909]: I0712 00:25:19.208470 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/62d22a7f-acd2-483d-afdd-00451b1edb32-whisker-ca-bundle\") pod \"whisker-7db5458c9c-xlrx4\" (UID: \"62d22a7f-acd2-483d-afdd-00451b1edb32\") " pod="calico-system/whisker-7db5458c9c-xlrx4" Jul 12 00:25:19.208978 kubelet[2909]: I0712 00:25:19.208863 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2fr5n\" (UniqueName: \"kubernetes.io/projected/62d22a7f-acd2-483d-afdd-00451b1edb32-kube-api-access-2fr5n\") pod \"whisker-7db5458c9c-xlrx4\" (UID: \"62d22a7f-acd2-483d-afdd-00451b1edb32\") " pod="calico-system/whisker-7db5458c9c-xlrx4" Jul 12 00:25:19.261251 env[1813]: time="2025-07-12T00:25:19.261080864Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:19.261553 env[1813]: time="2025-07-12T00:25:19.261279667Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:19.261553 env[1813]: time="2025-07-12T00:25:19.261364622Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:19.268378 env[1813]: time="2025-07-12T00:25:19.268242974Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad pid=4231 runtime=io.containerd.runc.v2 Jul 12 00:25:19.327000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:19.327000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000b41600 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:25:19.327000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:19.331000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:19.331000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002462e70 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:25:19.331000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:19.344880 systemd[1]: Started cri-containerd-dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad.scope. Jul 12 00:25:19.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.413000 audit: BPF prog-id=145 op=LOAD Jul 12 00:25:19.414000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.414000 audit[4241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4231 pid=4241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313966623031633336376163313137383265303639653030653561 Jul 12 00:25:19.414000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.414000 audit[4241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4231 pid=4241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313966623031633336376163313137383265303639653030653561 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.415000 audit: BPF prog-id=146 op=LOAD Jul 12 00:25:19.415000 audit[4241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4231 pid=4241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313966623031633336376163313137383265303639653030653561 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.417000 audit: BPF prog-id=147 op=LOAD Jul 12 00:25:19.417000 audit[4241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4231 pid=4241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313966623031633336376163313137383265303639653030653561 Jul 12 00:25:19.420000 audit: BPF prog-id=147 op=UNLOAD Jul 12 00:25:19.422000 audit: BPF prog-id=146 op=UNLOAD Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { perfmon } for pid=4241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit[4241]: AVC avc: denied { bpf } for pid=4241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:19.422000 audit: BPF prog-id=148 op=LOAD Jul 12 00:25:19.422000 audit[4241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4231 pid=4241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313966623031633336376163313137383265303639653030653561 Jul 12 00:25:19.470648 env[1813]: time="2025-07-12T00:25:19.470533249Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7db5458c9c-xlrx4,Uid:62d22a7f-acd2-483d-afdd-00451b1edb32,Namespace:calico-system,Attempt:0,}" Jul 12 00:25:19.605000 audit[4321]: AVC avc: denied { write } for pid=4321 comm="tee" name="fd" dev="proc" ino=23595 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.636000 audit[4323]: AVC avc: denied { write } for pid=4323 comm="tee" name="fd" dev="proc" ino=23601 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.638000 audit[4325]: AVC avc: denied { write } for pid=4325 comm="tee" name="fd" dev="proc" ino=23606 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.636000 audit[4323]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff04627dc a2=241 a3=1b6 items=1 ppid=4257 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.605000 audit[4321]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc155c7cc a2=241 a3=1b6 items=1 ppid=4259 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.636000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 12 00:25:19.636000 audit: PATH item=0 name="/dev/fd/63" inode=23586 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.605000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 12 00:25:19.636000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:19.605000 audit: PATH item=0 name="/dev/fd/63" inode=23585 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.605000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:19.638000 audit[4325]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc573d7db a2=241 a3=1b6 items=1 ppid=4266 pid=4325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.638000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 12 00:25:19.638000 audit: PATH item=0 name="/dev/fd/63" inode=23589 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.638000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:19.737000 audit[4342]: AVC avc: denied { write } for pid=4342 comm="tee" name="fd" dev="proc" ino=23625 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.737000 audit[4342]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd6b5a7cb a2=241 a3=1b6 items=1 ppid=4268 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.737000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 12 00:25:19.737000 audit: PATH item=0 name="/dev/fd/63" inode=23596 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.737000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:19.793000 audit[4328]: AVC avc: denied { write } for pid=4328 comm="tee" name="fd" dev="proc" ino=22623 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.793000 audit[4328]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd22b37db a2=241 a3=1b6 items=1 ppid=4265 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.793000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 12 00:25:19.793000 audit: PATH item=0 name="/dev/fd/63" inode=23592 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.793000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:19.831000 audit[4348]: AVC avc: denied { write } for pid=4348 comm="tee" name="fd" dev="proc" ino=22630 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.831000 audit[4348]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd0e0f7db a2=241 a3=1b6 items=1 ppid=4263 pid=4348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.831000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 12 00:25:19.831000 audit: PATH item=0 name="/dev/fd/63" inode=23615 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.831000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:19.850041 env[1813]: time="2025-07-12T00:25:19.849944343Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-b54fl,Uid:974e5eee-e5f3-46db-a740-7e56db54868a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\"" Jul 12 00:25:19.855053 env[1813]: time="2025-07-12T00:25:19.854975696Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:25:19.879000 audit[4366]: AVC avc: denied { write } for pid=4366 comm="tee" name="fd" dev="proc" ino=23642 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:25:19.879000 audit[4366]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc09bc7dd a2=241 a3=1b6 items=1 ppid=4284 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:19.879000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 12 00:25:19.879000 audit: PATH item=0 name="/dev/fd/63" inode=23639 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:25:19.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:25:20.023945 (udev-worker)[4086]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:25:20.045795 systemd-networkd[1535]: caliab5bff86c64: Link UP Jul 12 00:25:20.051248 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliab5bff86c64: link becomes ready Jul 12 00:25:20.051536 systemd-networkd[1535]: caliab5bff86c64: Gained carrier Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.664 [INFO][4308] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.713 [INFO][4308] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0 whisker-7db5458c9c- calico-system 62d22a7f-acd2-483d-afdd-00451b1edb32 940 0 2025-07-12 00:25:19 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7db5458c9c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-27-156 whisker-7db5458c9c-xlrx4 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] caliab5bff86c64 [] [] }} ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.713 [INFO][4308] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.876 [INFO][4352] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" HandleID="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Workload="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.879 [INFO][4352] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" HandleID="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Workload="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000323590), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-156", "pod":"whisker-7db5458c9c-xlrx4", "timestamp":"2025-07-12 00:25:19.876917218 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.879 [INFO][4352] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.879 [INFO][4352] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.879 [INFO][4352] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.918 [INFO][4352] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.936 [INFO][4352] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.957 [INFO][4352] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.970 [INFO][4352] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.976 [INFO][4352] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.976 [INFO][4352] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.979 [INFO][4352] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357 Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:19.991 [INFO][4352] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:20.012 [INFO][4352] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.194/26] block=192.168.36.192/26 handle="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:20.012 [INFO][4352] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.194/26] handle="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" host="ip-172-31-27-156" Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:20.012 [INFO][4352] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:20.102667 env[1813]: 2025-07-12 00:25:20.012 [INFO][4352] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.194/26] IPv6=[] ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" HandleID="k8s-pod-network.a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Workload="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.104140 env[1813]: 2025-07-12 00:25:20.016 [INFO][4308] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0", GenerateName:"whisker-7db5458c9c-", Namespace:"calico-system", SelfLink:"", UID:"62d22a7f-acd2-483d-afdd-00451b1edb32", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 25, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7db5458c9c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"whisker-7db5458c9c-xlrx4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.36.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"caliab5bff86c64", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:20.104140 env[1813]: 2025-07-12 00:25:20.016 [INFO][4308] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.194/32] ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.104140 env[1813]: 2025-07-12 00:25:20.016 [INFO][4308] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliab5bff86c64 ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.104140 env[1813]: 2025-07-12 00:25:20.051 [INFO][4308] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.104140 env[1813]: 2025-07-12 00:25:20.052 [INFO][4308] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0", GenerateName:"whisker-7db5458c9c-", Namespace:"calico-system", SelfLink:"", UID:"62d22a7f-acd2-483d-afdd-00451b1edb32", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 25, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7db5458c9c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357", Pod:"whisker-7db5458c9c-xlrx4", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.36.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"caliab5bff86c64", MAC:"fa:41:c0:99:77:95", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:20.104140 env[1813]: 2025-07-12 00:25:20.099 [INFO][4308] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357" Namespace="calico-system" Pod="whisker-7db5458c9c-xlrx4" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--7db5458c9c--xlrx4-eth0" Jul 12 00:25:20.133807 env[1813]: time="2025-07-12T00:25:20.133614267Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:20.134116 env[1813]: time="2025-07-12T00:25:20.134040470Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:20.135149 env[1813]: time="2025-07-12T00:25:20.135062308Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:20.138918 env[1813]: time="2025-07-12T00:25:20.138805422Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357 pid=4385 runtime=io.containerd.runc.v2 Jul 12 00:25:20.182144 systemd-networkd[1535]: calia5dbed22c2d: Gained IPv6LL Jul 12 00:25:20.211887 systemd[1]: Started cri-containerd-a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357.scope. Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.322000 audit: BPF prog-id=149 op=LOAD Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4385 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:20.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139626633636461313163626564656436303133363435623466646638 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4385 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:20.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139626633636461313163626564656436303133363435623466646638 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.323000 audit: BPF prog-id=150 op=LOAD Jul 12 00:25:20.323000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4385 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:20.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139626633636461313163626564656436303133363435623466646638 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit: BPF prog-id=151 op=LOAD Jul 12 00:25:20.324000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4385 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:20.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139626633636461313163626564656436303133363435623466646638 Jul 12 00:25:20.324000 audit: BPF prog-id=151 op=UNLOAD Jul 12 00:25:20.324000 audit: BPF prog-id=150 op=UNLOAD Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { perfmon } for pid=4394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit[4394]: AVC avc: denied { bpf } for pid=4394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:20.324000 audit: BPF prog-id=152 op=LOAD Jul 12 00:25:20.324000 audit[4394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4385 pid=4394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:20.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139626633636461313163626564656436303133363435623466646638 Jul 12 00:25:20.417043 env[1813]: time="2025-07-12T00:25:20.416976678Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7db5458c9c-xlrx4,Uid:62d22a7f-acd2-483d-afdd-00451b1edb32,Namespace:calico-system,Attempt:0,} returns sandbox id \"a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357\"" Jul 12 00:25:20.597939 env[1813]: time="2025-07-12T00:25:20.597740685Z" level=info msg="StopPodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\"" Jul 12 00:25:20.601865 env[1813]: time="2025-07-12T00:25:20.601768927Z" level=info msg="StopPodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\"" Jul 12 00:25:20.607628 env[1813]: time="2025-07-12T00:25:20.607539086Z" level=info msg="StopPodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\"" Jul 12 00:25:20.610056 kubelet[2909]: I0712 00:25:20.609483 2909 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="0516e3b7-78f1-4375-bd02-88ead332311a" path="/var/lib/kubelet/pods/0516e3b7-78f1-4375-bd02-88ead332311a/volumes" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.845 [INFO][4454] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.845 [INFO][4454] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" iface="eth0" netns="/var/run/netns/cni-9e4f668d-0626-c84e-77b0-b4d79954e6ea" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.845 [INFO][4454] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" iface="eth0" netns="/var/run/netns/cni-9e4f668d-0626-c84e-77b0-b4d79954e6ea" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.846 [INFO][4454] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" iface="eth0" netns="/var/run/netns/cni-9e4f668d-0626-c84e-77b0-b4d79954e6ea" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.846 [INFO][4454] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.846 [INFO][4454] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.940 [INFO][4469] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.940 [INFO][4469] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.944 [INFO][4469] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.995 [WARNING][4469] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:20.996 [INFO][4469] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:21.013 [INFO][4469] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:21.021020 env[1813]: 2025-07-12 00:25:21.016 [INFO][4454] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:21.038670 systemd[1]: run-netns-cni\x2d9e4f668d\x2d0626\x2dc84e\x2d77b0\x2db4d79954e6ea.mount: Deactivated successfully. Jul 12 00:25:21.042368 env[1813]: time="2025-07-12T00:25:21.041453500Z" level=info msg="TearDown network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" successfully" Jul 12 00:25:21.042368 env[1813]: time="2025-07-12T00:25:21.041547851Z" level=info msg="StopPodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" returns successfully" Jul 12 00:25:21.045167 env[1813]: time="2025-07-12T00:25:21.043988617Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lh4v8,Uid:4393f0b3-32c9-454a-9e18-275192d2faaa,Namespace:kube-system,Attempt:1,}" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:20.981 [INFO][4455] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:20.982 [INFO][4455] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" iface="eth0" netns="/var/run/netns/cni-24b6b6da-e25a-293a-383c-69f2f0cc13eb" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:20.983 [INFO][4455] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" iface="eth0" netns="/var/run/netns/cni-24b6b6da-e25a-293a-383c-69f2f0cc13eb" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:20.984 [INFO][4455] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" iface="eth0" netns="/var/run/netns/cni-24b6b6da-e25a-293a-383c-69f2f0cc13eb" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:20.984 [INFO][4455] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:20.984 [INFO][4455] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.249 [INFO][4482] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.250 [INFO][4482] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.250 [INFO][4482] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.266 [WARNING][4482] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.267 [INFO][4482] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.270 [INFO][4482] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:21.280378 env[1813]: 2025-07-12 00:25:21.277 [INFO][4455] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:25:21.291543 systemd[1]: run-netns-cni\x2d24b6b6da\x2de25a\x2d293a\x2d383c\x2d69f2f0cc13eb.mount: Deactivated successfully. Jul 12 00:25:21.295719 env[1813]: time="2025-07-12T00:25:21.295655714Z" level=info msg="TearDown network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" successfully" Jul 12 00:25:21.298649 env[1813]: time="2025-07-12T00:25:21.298574619Z" level=info msg="StopPodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" returns successfully" Jul 12 00:25:21.300385 env[1813]: time="2025-07-12T00:25:21.300231635Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rv8kz,Uid:c427eecb-6235-4057-9d5f-e009ae4d1cfa,Namespace:calico-system,Attempt:1,}" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.026 [INFO][4442] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.026 [INFO][4442] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" iface="eth0" netns="/var/run/netns/cni-aac58777-5a07-77d0-e918-a7a721607d01" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.027 [INFO][4442] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" iface="eth0" netns="/var/run/netns/cni-aac58777-5a07-77d0-e918-a7a721607d01" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.027 [INFO][4442] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" iface="eth0" netns="/var/run/netns/cni-aac58777-5a07-77d0-e918-a7a721607d01" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.027 [INFO][4442] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.027 [INFO][4442] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.242 [INFO][4488] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.252 [INFO][4488] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.271 [INFO][4488] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.311 [WARNING][4488] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.311 [INFO][4488] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.316 [INFO][4488] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:21.326104 env[1813]: 2025-07-12 00:25:21.319 [INFO][4442] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:25:21.336030 systemd[1]: run-netns-cni\x2daac58777\x2d5a07\x2d77d0\x2de918\x2da7a721607d01.mount: Deactivated successfully. Jul 12 00:25:21.339354 env[1813]: time="2025-07-12T00:25:21.339291036Z" level=info msg="TearDown network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" successfully" Jul 12 00:25:21.339555 env[1813]: time="2025-07-12T00:25:21.339519156Z" level=info msg="StopPodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" returns successfully" Jul 12 00:25:21.340818 env[1813]: time="2025-07-12T00:25:21.340764390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c699c5847-hd8v7,Uid:1311ce9e-8b34-448a-adb1-36c3adf1e1ff,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.434000 audit: BPF prog-id=153 op=LOAD Jul 12 00:25:21.434000 audit[4563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedde8088 a2=98 a3=ffffedde8078 items=0 ppid=4273 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.434000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:25:21.435000 audit: BPF prog-id=153 op=UNLOAD Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit: BPF prog-id=154 op=LOAD Jul 12 00:25:21.435000 audit[4563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedde7f38 a2=74 a3=95 items=0 ppid=4273 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.435000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:25:21.435000 audit: BPF prog-id=154 op=UNLOAD Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit[4563]: AVC avc: denied { bpf } for pid=4563 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.435000 audit: BPF prog-id=155 op=LOAD Jul 12 00:25:21.435000 audit[4563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffedde7f68 a2=40 a3=ffffedde7f98 items=0 ppid=4273 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.435000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:25:21.436000 audit: BPF prog-id=155 op=UNLOAD Jul 12 00:25:21.436000 audit[4563]: AVC avc: denied { perfmon } for pid=4563 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.436000 audit[4563]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffedde8080 a2=50 a3=0 items=0 ppid=4273 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.436000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.443000 audit: BPF prog-id=156 op=LOAD Jul 12 00:25:21.443000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff835cfa8 a2=98 a3=fffff835cf98 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.443000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:21.443000 audit: BPF prog-id=156 op=UNLOAD Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.449000 audit: BPF prog-id=157 op=LOAD Jul 12 00:25:21.449000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff835cc38 a2=74 a3=95 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.449000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:21.450000 audit: BPF prog-id=157 op=UNLOAD Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:21.450000 audit: BPF prog-id=158 op=LOAD Jul 12 00:25:21.450000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff835cc98 a2=94 a3=2 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.450000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:21.455000 audit: BPF prog-id=158 op=UNLOAD Jul 12 00:25:21.651802 systemd-networkd[1535]: caliab5bff86c64: Gained IPv6LL Jul 12 00:25:21.762679 systemd-networkd[1535]: cali7cf8f768602: Link UP Jul 12 00:25:21.770504 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:25:21.770673 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7cf8f768602: link becomes ready Jul 12 00:25:21.770920 systemd-networkd[1535]: cali7cf8f768602: Gained carrier Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.349 [INFO][4496] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0 coredns-668d6bf9bc- kube-system 4393f0b3-32c9-454a-9e18-275192d2faaa 955 0 2025-07-12 00:24:28 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-156 coredns-668d6bf9bc-lh4v8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7cf8f768602 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.349 [INFO][4496] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.576 [INFO][4545] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" HandleID="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.584 [INFO][4545] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" HandleID="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3670), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-156", "pod":"coredns-668d6bf9bc-lh4v8", "timestamp":"2025-07-12 00:25:21.576912963 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.584 [INFO][4545] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.584 [INFO][4545] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.585 [INFO][4545] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.623 [INFO][4545] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.643 [INFO][4545] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.666 [INFO][4545] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.680 [INFO][4545] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.697 [INFO][4545] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.697 [INFO][4545] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.703 [INFO][4545] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.717 [INFO][4545] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.741 [INFO][4545] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.195/26] block=192.168.36.192/26 handle="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.742 [INFO][4545] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.195/26] handle="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" host="ip-172-31-27-156" Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.742 [INFO][4545] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:21.831142 env[1813]: 2025-07-12 00:25:21.742 [INFO][4545] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.195/26] IPv6=[] ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" HandleID="k8s-pod-network.ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.833267 env[1813]: 2025-07-12 00:25:21.748 [INFO][4496] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4393f0b3-32c9-454a-9e18-275192d2faaa", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"coredns-668d6bf9bc-lh4v8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7cf8f768602", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:21.833267 env[1813]: 2025-07-12 00:25:21.748 [INFO][4496] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.195/32] ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.833267 env[1813]: 2025-07-12 00:25:21.748 [INFO][4496] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7cf8f768602 ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.833267 env[1813]: 2025-07-12 00:25:21.775 [INFO][4496] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.833267 env[1813]: 2025-07-12 00:25:21.784 [INFO][4496] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4393f0b3-32c9-454a-9e18-275192d2faaa", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee", Pod:"coredns-668d6bf9bc-lh4v8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7cf8f768602", MAC:"4e:64:28:45:04:5f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:21.833267 env[1813]: 2025-07-12 00:25:21.824 [INFO][4496] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee" Namespace="kube-system" Pod="coredns-668d6bf9bc-lh4v8" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:21.871002 env[1813]: time="2025-07-12T00:25:21.870418742Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:21.871002 env[1813]: time="2025-07-12T00:25:21.870633951Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:21.871002 env[1813]: time="2025-07-12T00:25:21.870710315Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:21.872214 env[1813]: time="2025-07-12T00:25:21.872081794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee pid=4602 runtime=io.containerd.runc.v2 Jul 12 00:25:21.921232 systemd-networkd[1535]: calib897efedfba: Link UP Jul 12 00:25:21.928174 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib897efedfba: link becomes ready Jul 12 00:25:21.928444 systemd-networkd[1535]: calib897efedfba: Gained carrier Jul 12 00:25:21.975977 systemd[1]: Started cri-containerd-ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee.scope. Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.555 [INFO][4531] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0 goldmane-768f4c5c69- calico-system c427eecb-6235-4057-9d5f-e009ae4d1cfa 957 0 2025-07-12 00:24:53 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-27-156 goldmane-768f4c5c69-rv8kz eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calib897efedfba [] [] }} ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.559 [INFO][4531] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.731 [INFO][4574] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" HandleID="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.738 [INFO][4574] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" HandleID="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024a950), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-156", "pod":"goldmane-768f4c5c69-rv8kz", "timestamp":"2025-07-12 00:25:21.731606575 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.739 [INFO][4574] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.742 [INFO][4574] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.742 [INFO][4574] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.791 [INFO][4574] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.830 [INFO][4574] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.838 [INFO][4574] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.843 [INFO][4574] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.850 [INFO][4574] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.850 [INFO][4574] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.853 [INFO][4574] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.873 [INFO][4574] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.893 [INFO][4574] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.196/26] block=192.168.36.192/26 handle="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.893 [INFO][4574] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.196/26] handle="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" host="ip-172-31-27-156" Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.894 [INFO][4574] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:21.983569 env[1813]: 2025-07-12 00:25:21.894 [INFO][4574] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.196/26] IPv6=[] ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" HandleID="k8s-pod-network.3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.985341 env[1813]: 2025-07-12 00:25:21.900 [INFO][4531] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c427eecb-6235-4057-9d5f-e009ae4d1cfa", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"goldmane-768f4c5c69-rv8kz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.36.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib897efedfba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:21.985341 env[1813]: 2025-07-12 00:25:21.900 [INFO][4531] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.196/32] ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.985341 env[1813]: 2025-07-12 00:25:21.900 [INFO][4531] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib897efedfba ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.985341 env[1813]: 2025-07-12 00:25:21.941 [INFO][4531] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:21.985341 env[1813]: 2025-07-12 00:25:21.942 [INFO][4531] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c427eecb-6235-4057-9d5f-e009ae4d1cfa", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f", Pod:"goldmane-768f4c5c69-rv8kz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.36.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib897efedfba", MAC:"9a:b1:fd:1b:bd:e3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:21.985341 env[1813]: 2025-07-12 00:25:21.978 [INFO][4531] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f" Namespace="calico-system" Pod="goldmane-768f4c5c69-rv8kz" WorkloadEndpoint="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:25:22.038258 env[1813]: time="2025-07-12T00:25:22.033312602Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:22.038258 env[1813]: time="2025-07-12T00:25:22.033512284Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:22.038258 env[1813]: time="2025-07-12T00:25:22.033584220Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:22.038258 env[1813]: time="2025-07-12T00:25:22.033922999Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f pid=4632 runtime=io.containerd.runc.v2 Jul 12 00:25:22.118075 systemd[1]: Started cri-containerd-3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f.scope. Jul 12 00:25:22.188045 kernel: kauditd_printk_skb: 287 callbacks suppressed Jul 12 00:25:22.188287 kernel: audit: type=1400 audit(1752279922.175:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.200299 kernel: audit: type=1400 audit(1752279922.186:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.209708 kernel: audit: type=1400 audit(1752279922.186:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.210775 systemd-networkd[1535]: calif22b65d7510: Link UP Jul 12 00:25:22.222525 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif22b65d7510: link becomes ready Jul 12 00:25:22.222671 kernel: audit: type=1400 audit(1752279922.186:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.223125 systemd-networkd[1535]: calif22b65d7510: Gained carrier Jul 12 00:25:22.242181 kernel: audit: type=1400 audit(1752279922.186:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.250402 kernel: audit: type=1400 audit(1752279922.186:1089): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.268491 kernel: audit: type=1400 audit(1752279922.186:1090): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.268653 kernel: audit: type=1400 audit(1752279922.186:1091): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.280287 kernel: audit: type=1400 audit(1752279922.186:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.591 [INFO][4549] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0 calico-apiserver-c699c5847- calico-apiserver 1311ce9e-8b34-448a-adb1-36c3adf1e1ff 958 0 2025-07-12 00:24:50 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:c699c5847 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-156 calico-apiserver-c699c5847-hd8v7 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif22b65d7510 [] [] }} ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.591 [INFO][4549] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.820 [INFO][4579] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" HandleID="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.823 [INFO][4579] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" HandleID="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d990), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-156", "pod":"calico-apiserver-c699c5847-hd8v7", "timestamp":"2025-07-12 00:25:21.820326443 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.824 [INFO][4579] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.894 [INFO][4579] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.894 [INFO][4579] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.927 [INFO][4579] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.955 [INFO][4579] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:21.991 [INFO][4579] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.000 [INFO][4579] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.016 [INFO][4579] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.016 [INFO][4579] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.023 [INFO][4579] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.083 [INFO][4579] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.153 [INFO][4579] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.197/26] block=192.168.36.192/26 handle="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.153 [INFO][4579] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.197/26] handle="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" host="ip-172-31-27-156" Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.153 [INFO][4579] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:22.280745 env[1813]: 2025-07-12 00:25:22.153 [INFO][4579] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.197/26] IPv6=[] ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" HandleID="k8s-pod-network.f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.282068 env[1813]: 2025-07-12 00:25:22.166 [INFO][4549] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0", GenerateName:"calico-apiserver-c699c5847-", Namespace:"calico-apiserver", SelfLink:"", UID:"1311ce9e-8b34-448a-adb1-36c3adf1e1ff", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c699c5847", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"calico-apiserver-c699c5847-hd8v7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif22b65d7510", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:22.282068 env[1813]: 2025-07-12 00:25:22.166 [INFO][4549] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.197/32] ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.282068 env[1813]: 2025-07-12 00:25:22.166 [INFO][4549] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif22b65d7510 ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.282068 env[1813]: 2025-07-12 00:25:22.232 [INFO][4549] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.282068 env[1813]: 2025-07-12 00:25:22.232 [INFO][4549] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0", GenerateName:"calico-apiserver-c699c5847-", Namespace:"calico-apiserver", SelfLink:"", UID:"1311ce9e-8b34-448a-adb1-36c3adf1e1ff", ResourceVersion:"958", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c699c5847", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc", Pod:"calico-apiserver-c699c5847-hd8v7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif22b65d7510", MAC:"66:2e:04:48:f8:20", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:22.282068 env[1813]: 2025-07-12 00:25:22.270 [INFO][4549] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-hd8v7" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:25:22.294402 kernel: audit: type=1400 audit(1752279922.186:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.186000 audit: BPF prog-id=159 op=LOAD Jul 12 00:25:22.188000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.308924 systemd[1]: run-containerd-runc-k8s.io-3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f-runc.8iClHy.mount: Deactivated successfully. Jul 12 00:25:22.188000 audit[4612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4602 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633531623263333163613536383531636363636462613137633462 Jul 12 00:25:22.188000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.188000 audit[4612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4602 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633531623263333163613536383531636363636462613137633462 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit: BPF prog-id=160 op=LOAD Jul 12 00:25:22.189000 audit[4612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4602 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633531623263333163613536383531636363636462613137633462 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.189000 audit: BPF prog-id=161 op=LOAD Jul 12 00:25:22.189000 audit[4612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4602 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633531623263333163613536383531636363636462613137633462 Jul 12 00:25:22.190000 audit: BPF prog-id=161 op=UNLOAD Jul 12 00:25:22.190000 audit: BPF prog-id=160 op=UNLOAD Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { perfmon } for pid=4612 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit[4612]: AVC avc: denied { bpf } for pid=4612 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.190000 audit: BPF prog-id=162 op=LOAD Jul 12 00:25:22.190000 audit[4612]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4602 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562633531623263333163613536383531636363636462613137633462 Jul 12 00:25:22.407834 env[1813]: time="2025-07-12T00:25:22.407713496Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:22.408140 env[1813]: time="2025-07-12T00:25:22.408052803Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:22.408140 env[1813]: time="2025-07-12T00:25:22.408100705Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:22.408747 env[1813]: time="2025-07-12T00:25:22.408621023Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc pid=4670 runtime=io.containerd.runc.v2 Jul 12 00:25:22.453090 env[1813]: time="2025-07-12T00:25:22.452909665Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-lh4v8,Uid:4393f0b3-32c9-454a-9e18-275192d2faaa,Namespace:kube-system,Attempt:1,} returns sandbox id \"ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee\"" Jul 12 00:25:22.484476 env[1813]: time="2025-07-12T00:25:22.484415720Z" level=info msg="CreateContainer within sandbox \"ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:25:22.523331 systemd[1]: Started cri-containerd-f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc.scope. Jul 12 00:25:22.527158 env[1813]: time="2025-07-12T00:25:22.527104289Z" level=info msg="StopPodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\"" Jul 12 00:25:22.546450 env[1813]: time="2025-07-12T00:25:22.546387483Z" level=info msg="CreateContainer within sandbox \"ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c7b30ec7628fe312f91591572510a51e32b0256c2464124ed12b34156dbc616a\"" Jul 12 00:25:22.547704 env[1813]: time="2025-07-12T00:25:22.547650480Z" level=info msg="StartContainer for \"c7b30ec7628fe312f91591572510a51e32b0256c2464124ed12b34156dbc616a\"" Jul 12 00:25:22.603701 env[1813]: time="2025-07-12T00:25:22.603647077Z" level=info msg="StopPodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\"" Jul 12 00:25:22.604030 env[1813]: time="2025-07-12T00:25:22.603973281Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" Jul 12 00:25:22.611643 env[1813]: time="2025-07-12T00:25:22.603799937Z" level=info msg="StopPodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\"" Jul 12 00:25:22.614827 env[1813]: time="2025-07-12T00:25:22.603859107Z" level=info msg="StopPodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\"" Jul 12 00:25:22.719812 systemd[1]: Started cri-containerd-c7b30ec7628fe312f91591572510a51e32b0256c2464124ed12b34156dbc616a.scope. Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.822000 audit: BPF prog-id=163 op=LOAD Jul 12 00:25:22.822000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff835cc58 a2=40 a3=fffff835cc88 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.840000 audit: BPF prog-id=164 op=LOAD Jul 12 00:25:22.840000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.840000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4602 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623330656337363238666533313266393135393135373235313061 Jul 12 00:25:22.841000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.841000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4602 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623330656337363238666533313266393135393135373235313061 Jul 12 00:25:22.841000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:22.841000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400281e000 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:25:22.841000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:22.841000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:22.841000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400281e040 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:25:22.841000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit: BPF prog-id=165 op=LOAD Jul 12 00:25:22.843000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4602 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623330656337363238666533313266393135393135373235313061 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit: BPF prog-id=166 op=LOAD Jul 12 00:25:22.843000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4602 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623330656337363238666533313266393135393135373235313061 Jul 12 00:25:22.843000 audit: BPF prog-id=166 op=UNLOAD Jul 12 00:25:22.843000 audit: BPF prog-id=165 op=UNLOAD Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { perfmon } for pid=4711 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit[4711]: AVC avc: denied { bpf } for pid=4711 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.843000 audit: BPF prog-id=167 op=LOAD Jul 12 00:25:22.843000 audit[4711]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4602 pid=4711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623330656337363238666533313266393135393135373235313061 Jul 12 00:25:22.845000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:22.845000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400281e360 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:25:22.845000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:22.846000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:22.846000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40025d4000 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:25:22.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:22.822000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.856000 audit: BPF prog-id=163 op=UNLOAD Jul 12 00:25:22.856000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.856000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff835cd70 a2=50 a3=0 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.856000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.966000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.966000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff835ccc8 a2=28 a3=fffff835cdf8 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.966000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.968000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.968000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff835ccf8 a2=28 a3=fffff835ce28 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.968000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.968000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.968000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff835cba8 a2=28 a3=fffff835ccd8 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.968000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.969000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.969000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff835cd18 a2=28 a3=fffff835ce48 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.969000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.969000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.969000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff835ccf8 a2=28 a3=fffff835ce28 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.969000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.969000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.969000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff835cce8 a2=28 a3=fffff835ce18 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.969000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.976000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.976000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff835cd18 a2=28 a3=fffff835ce48 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.976000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:22.977000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.977000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff835ccf8 a2=28 a3=fffff835ce28 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.994000 audit: BPF prog-id=168 op=LOAD Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4670 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639383864633562323434643439636534383965323761366235373663 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4670 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639383864633562323434643439636534383965323761366235373663 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit: BPF prog-id=169 op=LOAD Jul 12 00:25:22.995000 audit[4688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4670 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639383864633562323434643439636534383965323761366235373663 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit: BPF prog-id=170 op=LOAD Jul 12 00:25:22.995000 audit[4688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4670 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639383864633562323434643439636534383965323761366235373663 Jul 12 00:25:22.995000 audit: BPF prog-id=170 op=UNLOAD Jul 12 00:25:22.995000 audit: BPF prog-id=169 op=UNLOAD Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { perfmon } for pid=4688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit[4688]: AVC avc: denied { bpf } for pid=4688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.995000 audit: BPF prog-id=171 op=LOAD Jul 12 00:25:22.995000 audit[4688]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4670 pid=4688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639383864633562323434643439636534383965323761366235373663 Jul 12 00:25:22.977000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.006000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.006000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff835cd18 a2=28 a3=fffff835ce48 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.006000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.006000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.006000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff835cce8 a2=28 a3=fffff835ce18 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.006000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.006000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.006000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff835cd68 a2=28 a3=fffff835cea8 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.006000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.015000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.015000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff835caa0 a2=50 a3=0 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.015000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit: BPF prog-id=172 op=LOAD Jul 12 00:25:23.019000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff835caa8 a2=94 a3=5 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.019000 audit: BPF prog-id=172 op=UNLOAD Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff835cbb0 a2=50 a3=0 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff835ccf8 a2=4 a3=3 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.019000 audit[4564]: AVC avc: denied { confidentiality } for pid=4564 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:23.019000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff835ccd8 a2=94 a3=6 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.019000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.020000 audit[4564]: AVC avc: denied { confidentiality } for pid=4564 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:23.020000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff835c4a8 a2=94 a3=83 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.020000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.021000 audit[4564]: AVC avc: denied { confidentiality } for pid=4564 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:23.021000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff835c4a8 a2=94 a3=83 items=0 ppid=4273 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.021000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.065000 audit: BPF prog-id=173 op=LOAD Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4632 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364663431373762663536396133333466343764313030383032393339 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4632 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364663431373762663536396133333466343764313030383032393339 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit: BPF prog-id=174 op=LOAD Jul 12 00:25:23.068000 audit[4644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4632 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364663431373762663536396133333466343764313030383032393339 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.068000 audit: BPF prog-id=175 op=LOAD Jul 12 00:25:23.068000 audit[4644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4632 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364663431373762663536396133333466343764313030383032393339 Jul 12 00:25:23.069000 audit: BPF prog-id=175 op=UNLOAD Jul 12 00:25:23.069000 audit: BPF prog-id=174 op=UNLOAD Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { perfmon } for pid=4644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit[4644]: AVC avc: denied { bpf } for pid=4644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.069000 audit: BPF prog-id=176 op=LOAD Jul 12 00:25:23.069000 audit[4644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4632 pid=4644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364663431373762663536396133333466343764313030383032393339 Jul 12 00:25:23.170756 env[1813]: time="2025-07-12T00:25:23.170675445Z" level=info msg="StartContainer for \"c7b30ec7628fe312f91591572510a51e32b0256c2464124ed12b34156dbc616a\" returns successfully" Jul 12 00:25:23.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.156:22-147.75.109.163:59794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:23.251391 systemd-networkd[1535]: calib897efedfba: Gained IPv6LL Jul 12 00:25:23.254434 systemd[1]: Started sshd@7-172.31.27.156:22-147.75.109.163:59794.service. Jul 12 00:25:23.443648 systemd-networkd[1535]: cali7cf8f768602: Gained IPv6LL Jul 12 00:25:23.463000 audit[4826]: USER_ACCT pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.465000 audit[4826]: CRED_ACQ pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.465000 audit[4826]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdd774c0 a2=3 a3=1 items=0 ppid=1 pid=4826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.465000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:23.467340 sshd[4826]: Accepted publickey for core from 147.75.109.163 port 59794 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:23.468089 sshd[4826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:23.483347 systemd-logind[1808]: New session 8 of user core. Jul 12 00:25:23.484874 systemd[1]: Started session-8.scope. Jul 12 00:25:23.499000 audit[4826]: USER_START pid=4826 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.502000 audit[4854]: CRED_ACQ pid=4854 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.533000 audit: BPF prog-id=177 op=LOAD Jul 12 00:25:23.533000 audit[4848]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffea8578c8 a2=98 a3=ffffea8578b8 items=0 ppid=4273 pid=4848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.533000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:25:23.547000 audit: BPF prog-id=177 op=UNLOAD Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.547000 audit: BPF prog-id=178 op=LOAD Jul 12 00:25:23.547000 audit[4848]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffea857778 a2=74 a3=95 items=0 ppid=4273 pid=4848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.547000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:25:23.563000 audit: BPF prog-id=178 op=UNLOAD Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { perfmon } for pid=4848 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit[4848]: AVC avc: denied { bpf } for pid=4848 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:23.563000 audit: BPF prog-id=179 op=LOAD Jul 12 00:25:23.563000 audit[4848]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffea8577a8 a2=40 a3=ffffea8577d8 items=0 ppid=4273 pid=4848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.563000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:25:23.564000 audit: BPF prog-id=179 op=UNLOAD Jul 12 00:25:23.719119 env[1813]: time="2025-07-12T00:25:23.709855724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c699c5847-hd8v7,Uid:1311ce9e-8b34-448a-adb1-36c3adf1e1ff,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc\"" Jul 12 00:25:23.793824 env[1813]: time="2025-07-12T00:25:23.793656066Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-rv8kz,Uid:c427eecb-6235-4057-9d5f-e009ae4d1cfa,Namespace:calico-system,Attempt:1,} returns sandbox id \"3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f\"" Jul 12 00:25:23.892357 systemd-networkd[1535]: calif22b65d7510: Gained IPv6LL Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.228 [INFO][4788] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.228 [INFO][4788] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" iface="eth0" netns="/var/run/netns/cni-4a0b9d16-e760-43e1-3619-0f1560e70394" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.229 [INFO][4788] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" iface="eth0" netns="/var/run/netns/cni-4a0b9d16-e760-43e1-3619-0f1560e70394" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.230 [INFO][4788] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" iface="eth0" netns="/var/run/netns/cni-4a0b9d16-e760-43e1-3619-0f1560e70394" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.230 [INFO][4788] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.230 [INFO][4788] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.812 [INFO][4824] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.813 [INFO][4824] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.813 [INFO][4824] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.879 [WARNING][4824] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.879 [INFO][4824] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.904 [INFO][4824] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:23.921532 env[1813]: 2025-07-12 00:25:23.915 [INFO][4788] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:25:23.936231 env[1813]: time="2025-07-12T00:25:23.924536635Z" level=info msg="TearDown network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" successfully" Jul 12 00:25:23.936231 env[1813]: time="2025-07-12T00:25:23.924592540Z" level=info msg="StopPodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" returns successfully" Jul 12 00:25:23.929827 systemd[1]: run-netns-cni\x2d4a0b9d16\x2de760\x2d43e1\x2d3619\x2d0f1560e70394.mount: Deactivated successfully. Jul 12 00:25:23.937699 env[1813]: time="2025-07-12T00:25:23.937627667Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5864457bbf-w7sk8,Uid:737559a1-5637-4ede-8bf9-c2d41a47c349,Namespace:calico-system,Attempt:1,}" Jul 12 00:25:23.969050 sshd[4826]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:23.974000 audit[4826]: USER_END pid=4826 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.974000 audit[4826]: CRED_DISP pid=4826 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.982427 systemd[1]: sshd@7-172.31.27.156:22-147.75.109.163:59794.service: Deactivated successfully. Jul 12 00:25:23.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.156:22-147.75.109.163:59794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:24.000771 systemd[1]: session-8.scope: Deactivated successfully. Jul 12 00:25:24.008541 systemd-logind[1808]: Session 8 logged out. Waiting for processes to exit. Jul 12 00:25:24.016268 systemd-logind[1808]: Removed session 8. Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:23.517 [INFO][4793] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:23.517 [INFO][4793] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" iface="eth0" netns="/var/run/netns/cni-c33ddf54-b31a-6dd4-8a31-2625ab4471f9" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:23.517 [INFO][4793] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" iface="eth0" netns="/var/run/netns/cni-c33ddf54-b31a-6dd4-8a31-2625ab4471f9" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:23.518 [INFO][4793] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" iface="eth0" netns="/var/run/netns/cni-c33ddf54-b31a-6dd4-8a31-2625ab4471f9" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:23.518 [INFO][4793] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:23.518 [INFO][4793] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.002 [INFO][4858] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.003 [INFO][4858] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.003 [INFO][4858] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.029 [WARNING][4858] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.030 [INFO][4858] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.038 [INFO][4858] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:24.070063 env[1813]: 2025-07-12 00:25:24.043 [INFO][4793] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:25:24.077923 env[1813]: time="2025-07-12T00:25:24.077853662Z" level=info msg="TearDown network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" successfully" Jul 12 00:25:24.078312 env[1813]: time="2025-07-12T00:25:24.078167113Z" level=info msg="StopPodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" returns successfully" Jul 12 00:25:24.086553 systemd[1]: run-netns-cni\x2dc33ddf54\x2db31a\x2d6dd4\x2d8a31\x2d2625ab4471f9.mount: Deactivated successfully. Jul 12 00:25:24.094305 env[1813]: time="2025-07-12T00:25:24.094218275Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vrkdm,Uid:115e2b7e-ce17-422c-ab82-9a084dba0347,Namespace:kube-system,Attempt:1,}" Jul 12 00:25:24.192000 audit[4769]: AVC avc: denied { getattr } for pid=4769 comm="coredns" path="cgroup:[4026533022]" dev="nsfs" ino=4026533022 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c676 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:25:24.192000 audit[4769]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056918 a2=40000da578 a3=0 items=0 ppid=4602 pid=4769 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c676 key=(null) Jul 12 00:25:24.192000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:23.306 [WARNING][4744] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:23.306 [INFO][4744] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:23.307 [INFO][4744] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" iface="eth0" netns="" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:23.307 [INFO][4744] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:23.307 [INFO][4744] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.222 [INFO][4835] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.222 [INFO][4835] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.223 [INFO][4835] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.361 [WARNING][4835] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.361 [INFO][4835] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.380 [INFO][4835] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:24.387113 env[1813]: 2025-07-12 00:25:24.384 [INFO][4744] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:24.388743 env[1813]: time="2025-07-12T00:25:24.388686735Z" level=info msg="TearDown network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" successfully" Jul 12 00:25:24.388918 env[1813]: time="2025-07-12T00:25:24.388878703Z" level=info msg="StopPodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" returns successfully" Jul 12 00:25:24.390275 env[1813]: time="2025-07-12T00:25:24.390152438Z" level=info msg="RemovePodSandbox for \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\"" Jul 12 00:25:24.395443 env[1813]: time="2025-07-12T00:25:24.395330772Z" level=info msg="Forcibly stopping sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\"" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:23.528 [INFO][4797] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:23.529 [INFO][4797] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" iface="eth0" netns="/var/run/netns/cni-2932a420-edf8-f751-b290-b0f3da8ab8b0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:23.529 [INFO][4797] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" iface="eth0" netns="/var/run/netns/cni-2932a420-edf8-f751-b290-b0f3da8ab8b0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:23.529 [INFO][4797] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" iface="eth0" netns="/var/run/netns/cni-2932a420-edf8-f751-b290-b0f3da8ab8b0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:23.529 [INFO][4797] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:23.529 [INFO][4797] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.264 [INFO][4866] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.269 [INFO][4866] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.380 [INFO][4866] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.425 [WARNING][4866] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.425 [INFO][4866] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.437 [INFO][4866] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:24.445059 env[1813]: 2025-07-12 00:25:24.441 [INFO][4797] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:24.457419 systemd[1]: run-netns-cni\x2d2932a420\x2dedf8\x2df751\x2db290\x2db0f3da8ab8b0.mount: Deactivated successfully. Jul 12 00:25:24.459678 env[1813]: time="2025-07-12T00:25:24.459611919Z" level=info msg="TearDown network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" successfully" Jul 12 00:25:24.460009 env[1813]: time="2025-07-12T00:25:24.459943405Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" returns successfully" Jul 12 00:25:24.461077 env[1813]: time="2025-07-12T00:25:24.461009369Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-jznt5,Uid:6252a4f0-29f6-482e-9ad2-072532702264,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:25:24.494000 audit[4947]: NETFILTER_CFG table=filter:103 family=2 entries=20 op=nft_register_rule pid=4947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:24.494000 audit[4947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcd3ea970 a2=0 a3=1 items=0 ppid=3055 pid=4947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:24.494000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:24.499000 audit[4947]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:24.499000 audit[4947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffcd3ea970 a2=0 a3=1 items=0 ppid=3055 pid=4947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:24.499000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:23.399 [INFO][4781] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:23.400 [INFO][4781] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" iface="eth0" netns="/var/run/netns/cni-8f1348b8-356b-a35a-a75f-ab82993616e0" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:23.407 [INFO][4781] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" iface="eth0" netns="/var/run/netns/cni-8f1348b8-356b-a35a-a75f-ab82993616e0" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:23.412 [INFO][4781] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" iface="eth0" netns="/var/run/netns/cni-8f1348b8-356b-a35a-a75f-ab82993616e0" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:23.412 [INFO][4781] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:23.412 [INFO][4781] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.300 [INFO][4849] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.305 [INFO][4849] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.434 [INFO][4849] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.478 [WARNING][4849] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.478 [INFO][4849] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.481 [INFO][4849] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:24.513830 env[1813]: 2025-07-12 00:25:24.497 [INFO][4781] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:25:24.513830 env[1813]: time="2025-07-12T00:25:24.501736236Z" level=info msg="TearDown network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" successfully" Jul 12 00:25:24.513830 env[1813]: time="2025-07-12T00:25:24.501781534Z" level=info msg="StopPodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" returns successfully" Jul 12 00:25:24.513830 env[1813]: time="2025-07-12T00:25:24.502727910Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nsj26,Uid:e5fa5afc-e8d7-456a-856b-28fa80629c7d,Namespace:calico-system,Attempt:1,}" Jul 12 00:25:24.511523 systemd[1]: run-netns-cni\x2d8f1348b8\x2d356b\x2da35a\x2da75f\x2dab82993616e0.mount: Deactivated successfully. Jul 12 00:25:25.041520 systemd-networkd[1535]: vxlan.calico: Link UP Jul 12 00:25:25.041537 systemd-networkd[1535]: vxlan.calico: Gained carrier Jul 12 00:25:25.068229 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:25:25.068427 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif2c1b2346ed: link becomes ready Jul 12 00:25:25.062106 systemd-networkd[1535]: calif2c1b2346ed: Link UP Jul 12 00:25:25.069400 systemd-networkd[1535]: calif2c1b2346ed: Gained carrier Jul 12 00:25:25.134022 kubelet[2909]: I0712 00:25:25.133889 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-lh4v8" podStartSLOduration=57.133863658 podStartE2EDuration="57.133863658s" podCreationTimestamp="2025-07-12 00:24:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:25:24.295497517 +0000 UTC m=+62.009606860" watchObservedRunningTime="2025-07-12 00:25:25.133863658 +0000 UTC m=+62.847972989" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.429 [INFO][4913] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0 coredns-668d6bf9bc- kube-system 115e2b7e-ce17-422c-ab82-9a084dba0347 1018 0 2025-07-12 00:24:28 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-156 coredns-668d6bf9bc-vrkdm eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif2c1b2346ed [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.430 [INFO][4913] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.779 [INFO][4946] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" HandleID="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.779 [INFO][4946] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" HandleID="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003a7630), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-156", "pod":"coredns-668d6bf9bc-vrkdm", "timestamp":"2025-07-12 00:25:24.779518484 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.780 [INFO][4946] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.780 [INFO][4946] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.780 [INFO][4946] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.808 [INFO][4946] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.829 [INFO][4946] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.853 [INFO][4946] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.867 [INFO][4946] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.876 [INFO][4946] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.876 [INFO][4946] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.886 [INFO][4946] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.945 [INFO][4946] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.974 [INFO][4946] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.198/26] block=192.168.36.192/26 handle="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.975 [INFO][4946] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.198/26] handle="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" host="ip-172-31-27-156" Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.975 [INFO][4946] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:25.147828 env[1813]: 2025-07-12 00:25:24.975 [INFO][4946] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.198/26] IPv6=[] ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" HandleID="k8s-pod-network.3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.149478 env[1813]: 2025-07-12 00:25:24.987 [INFO][4913] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"115e2b7e-ce17-422c-ab82-9a084dba0347", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"coredns-668d6bf9bc-vrkdm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif2c1b2346ed", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.149478 env[1813]: 2025-07-12 00:25:24.987 [INFO][4913] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.198/32] ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.149478 env[1813]: 2025-07-12 00:25:24.987 [INFO][4913] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif2c1b2346ed ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.149478 env[1813]: 2025-07-12 00:25:25.078 [INFO][4913] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.149478 env[1813]: 2025-07-12 00:25:25.079 [INFO][4913] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"115e2b7e-ce17-422c-ab82-9a084dba0347", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a", Pod:"coredns-668d6bf9bc-vrkdm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif2c1b2346ed", MAC:"b2:0f:90:19:92:6f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.149478 env[1813]: 2025-07-12 00:25:25.138 [INFO][4913] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a" Namespace="kube-system" Pod="coredns-668d6bf9bc-vrkdm" WorkloadEndpoint="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:25:25.294000 audit[5029]: NETFILTER_CFG table=filter:105 family=2 entries=17 op=nft_register_rule pid=5029 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:25.294000 audit[5029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe751dde0 a2=0 a3=1 items=0 ppid=3055 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:25.309000 audit[5029]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=5029 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:25.309000 audit[5029]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffe751dde0 a2=0 a3=1 items=0 ppid=3055 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.309000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:25.363732 systemd-networkd[1535]: caliab7dddba605: Link UP Jul 12 00:25:25.372449 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliab7dddba605: link becomes ready Jul 12 00:25:25.372804 systemd-networkd[1535]: caliab7dddba605: Gained carrier Jul 12 00:25:25.381971 env[1813]: time="2025-07-12T00:25:25.381795972Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:25.382380 env[1813]: time="2025-07-12T00:25:25.382306396Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:25.382612 env[1813]: time="2025-07-12T00:25:25.382546879Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:25.389469 env[1813]: time="2025-07-12T00:25:25.389354937Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a pid=5030 runtime=io.containerd.runc.v2 Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:24.781 [WARNING][4938] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" WorkloadEndpoint="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:24.782 [INFO][4938] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:24.782 [INFO][4938] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" iface="eth0" netns="" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:24.782 [INFO][4938] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:24.782 [INFO][4938] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.030 [INFO][4983] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.030 [INFO][4983] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.333 [INFO][4983] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.386 [WARNING][4983] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.387 [INFO][4983] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" HandleID="k8s-pod-network.a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Workload="ip--172--31--27--156-k8s-whisker--68fd5f6dff--wdd4d-eth0" Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.396 [INFO][4983] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:25.439507 env[1813]: 2025-07-12 00:25:25.425 [INFO][4938] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1" Jul 12 00:25:25.440502 env[1813]: time="2025-07-12T00:25:25.440445300Z" level=info msg="TearDown network for sandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" successfully" Jul 12 00:25:25.447566 env[1813]: time="2025-07-12T00:25:25.447506176Z" level=info msg="RemovePodSandbox \"a76e876c7b5c8f0fac9dd00203584f20ea8be4e99e9988eb5db5a275d5e3e7d1\" returns successfully" Jul 12 00:25:25.460359 env[1813]: time="2025-07-12T00:25:25.460300648Z" level=info msg="StopPodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\"" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.305 [INFO][4900] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0 calico-kube-controllers-5864457bbf- calico-system 737559a1-5637-4ede-8bf9-c2d41a47c349 1016 0 2025-07-12 00:24:54 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5864457bbf projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-27-156 calico-kube-controllers-5864457bbf-w7sk8 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] caliab7dddba605 [] [] }} ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.306 [INFO][4900] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.954 [INFO][4933] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" HandleID="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.955 [INFO][4933] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" HandleID="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb950), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-156", "pod":"calico-kube-controllers-5864457bbf-w7sk8", "timestamp":"2025-07-12 00:25:24.954133897 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.955 [INFO][4933] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.988 [INFO][4933] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:24.989 [INFO][4933] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.059 [INFO][4933] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.174 [INFO][4933] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.244 [INFO][4933] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.252 [INFO][4933] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.272 [INFO][4933] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.272 [INFO][4933] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.280 [INFO][4933] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.304 [INFO][4933] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.332 [INFO][4933] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.199/26] block=192.168.36.192/26 handle="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.332 [INFO][4933] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.199/26] handle="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" host="ip-172-31-27-156" Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.332 [INFO][4933] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:25.471424 env[1813]: 2025-07-12 00:25:25.332 [INFO][4933] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.199/26] IPv6=[] ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" HandleID="k8s-pod-network.28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.472811 env[1813]: 2025-07-12 00:25:25.343 [INFO][4900] cni-plugin/k8s.go 418: Populated endpoint ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0", GenerateName:"calico-kube-controllers-5864457bbf-", Namespace:"calico-system", SelfLink:"", UID:"737559a1-5637-4ede-8bf9-c2d41a47c349", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5864457bbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"calico-kube-controllers-5864457bbf-w7sk8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.36.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliab7dddba605", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.472811 env[1813]: 2025-07-12 00:25:25.344 [INFO][4900] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.199/32] ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.472811 env[1813]: 2025-07-12 00:25:25.344 [INFO][4900] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliab7dddba605 ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.472811 env[1813]: 2025-07-12 00:25:25.379 [INFO][4900] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.472811 env[1813]: 2025-07-12 00:25:25.380 [INFO][4900] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0", GenerateName:"calico-kube-controllers-5864457bbf-", Namespace:"calico-system", SelfLink:"", UID:"737559a1-5637-4ede-8bf9-c2d41a47c349", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5864457bbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e", Pod:"calico-kube-controllers-5864457bbf-w7sk8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.36.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliab7dddba605", MAC:"22:84:73:90:25:8e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.472811 env[1813]: 2025-07-12 00:25:25.455 [INFO][4900] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e" Namespace="calico-system" Pod="calico-kube-controllers-5864457bbf-w7sk8" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:25:25.512257 systemd-networkd[1535]: cali5bc4eb33f56: Link UP Jul 12 00:25:25.520921 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5bc4eb33f56: link becomes ready Jul 12 00:25:25.521363 systemd-networkd[1535]: cali5bc4eb33f56: Gained carrier Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:24.868 [INFO][4951] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0 calico-apiserver-7c994777b8- calico-apiserver 6252a4f0-29f6-482e-9ad2-072532702264 1019 0 2025-07-12 00:24:44 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7c994777b8 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-156 calico-apiserver-7c994777b8-jznt5 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5bc4eb33f56 [] [] }} ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:24.868 [INFO][4951] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.287 [INFO][4995] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.302 [INFO][4995] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000312390), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-156", "pod":"calico-apiserver-7c994777b8-jznt5", "timestamp":"2025-07-12 00:25:25.28660553 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.304 [INFO][4995] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.396 [INFO][4995] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.396 [INFO][4995] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.427 [INFO][4995] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.435 [INFO][4995] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.456 [INFO][4995] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.461 [INFO][4995] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.468 [INFO][4995] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.469 [INFO][4995] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.471 [INFO][4995] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549 Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.481 [INFO][4995] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.500 [INFO][4995] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.200/26] block=192.168.36.192/26 handle="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.500 [INFO][4995] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.200/26] handle="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" host="ip-172-31-27-156" Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.500 [INFO][4995] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:25.560550 env[1813]: 2025-07-12 00:25:25.500 [INFO][4995] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.200/26] IPv6=[] ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.562065 env[1813]: 2025-07-12 00:25:25.508 [INFO][4951] cni-plugin/k8s.go 418: Populated endpoint ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"6252a4f0-29f6-482e-9ad2-072532702264", ResourceVersion:"1019", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"calico-apiserver-7c994777b8-jznt5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc4eb33f56", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.562065 env[1813]: 2025-07-12 00:25:25.508 [INFO][4951] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.200/32] ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.562065 env[1813]: 2025-07-12 00:25:25.508 [INFO][4951] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5bc4eb33f56 ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.562065 env[1813]: 2025-07-12 00:25:25.528 [INFO][4951] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.562065 env[1813]: 2025-07-12 00:25:25.529 [INFO][4951] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"6252a4f0-29f6-482e-9ad2-072532702264", ResourceVersion:"1019", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549", Pod:"calico-apiserver-7c994777b8-jznt5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc4eb33f56", MAC:"f6:b3:dc:4c:05:e0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.562065 env[1813]: 2025-07-12 00:25:25.556 [INFO][4951] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Namespace="calico-apiserver" Pod="calico-apiserver-7c994777b8-jznt5" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:25.607399 systemd[1]: run-containerd-runc-k8s.io-3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a-runc.aD2t1R.mount: Deactivated successfully. Jul 12 00:25:25.615306 systemd[1]: Started cri-containerd-3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a.scope. Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.720000 audit: BPF prog-id=180 op=LOAD Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5030 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361313432303562373731303166323963396439666536353436356363 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5030 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361313432303562373731303166323963396439666536353436356363 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit: BPF prog-id=181 op=LOAD Jul 12 00:25:25.721000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5030 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361313432303562373731303166323963396439666536353436356363 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.721000 audit: BPF prog-id=182 op=LOAD Jul 12 00:25:25.721000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5030 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361313432303562373731303166323963396439666536353436356363 Jul 12 00:25:25.721000 audit: BPF prog-id=182 op=UNLOAD Jul 12 00:25:25.721000 audit: BPF prog-id=181 op=UNLOAD Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.725000 audit: BPF prog-id=183 op=LOAD Jul 12 00:25:25.725000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5030 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361313432303562373731303166323963396439666536353436356363 Jul 12 00:25:25.728305 env[1813]: time="2025-07-12T00:25:25.721376020Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:25.728305 env[1813]: time="2025-07-12T00:25:25.721608811Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:25.728305 env[1813]: time="2025-07-12T00:25:25.721754257Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:25.728305 env[1813]: time="2025-07-12T00:25:25.727600336Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549 pid=5096 runtime=io.containerd.runc.v2 Jul 12 00:25:25.737240 env[1813]: time="2025-07-12T00:25:25.736844996Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:25.737240 env[1813]: time="2025-07-12T00:25:25.737085743Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:25.737530 env[1813]: time="2025-07-12T00:25:25.737272396Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:25.737836 env[1813]: time="2025-07-12T00:25:25.737721227Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e pid=5100 runtime=io.containerd.runc.v2 Jul 12 00:25:25.777405 systemd[1]: Started cri-containerd-28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e.scope. Jul 12 00:25:25.801298 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicf07c77e8c1: link becomes ready Jul 12 00:25:25.801687 systemd-networkd[1535]: calicf07c77e8c1: Link UP Jul 12 00:25:25.802217 systemd-networkd[1535]: calicf07c77e8c1: Gained carrier Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.012 [INFO][4967] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0 csi-node-driver- calico-system e5fa5afc-e8d7-456a-856b-28fa80629c7d 1017 0 2025-07-12 00:24:54 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-27-156 csi-node-driver-nsj26 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calicf07c77e8c1 [] [] }} ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.014 [INFO][4967] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.445 [INFO][5010] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" HandleID="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.446 [INFO][5010] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" HandleID="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005c3080), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-156", "pod":"csi-node-driver-nsj26", "timestamp":"2025-07-12 00:25:25.445559107 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.446 [INFO][5010] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.501 [INFO][5010] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.501 [INFO][5010] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.589 [INFO][5010] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.620 [INFO][5010] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.674 [INFO][5010] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.686 [INFO][5010] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.702 [INFO][5010] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.702 [INFO][5010] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.708 [INFO][5010] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38 Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.732 [INFO][5010] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.773 [INFO][5010] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.201/26] block=192.168.36.192/26 handle="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.773 [INFO][5010] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.201/26] handle="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" host="ip-172-31-27-156" Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.773 [INFO][5010] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:25.865576 env[1813]: 2025-07-12 00:25:25.773 [INFO][5010] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.201/26] IPv6=[] ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" HandleID="k8s-pod-network.6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.867859 env[1813]: 2025-07-12 00:25:25.790 [INFO][4967] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5fa5afc-e8d7-456a-856b-28fa80629c7d", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"csi-node-driver-nsj26", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.36.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicf07c77e8c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.867859 env[1813]: 2025-07-12 00:25:25.790 [INFO][4967] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.201/32] ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.867859 env[1813]: 2025-07-12 00:25:25.790 [INFO][4967] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicf07c77e8c1 ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.867859 env[1813]: 2025-07-12 00:25:25.805 [INFO][4967] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.867859 env[1813]: 2025-07-12 00:25:25.808 [INFO][4967] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5fa5afc-e8d7-456a-856b-28fa80629c7d", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38", Pod:"csi-node-driver-nsj26", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.36.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicf07c77e8c1", MAC:"d6:88:b6:12:71:2f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:25.867859 env[1813]: 2025-07-12 00:25:25.858 [INFO][4967] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38" Namespace="calico-system" Pod="csi-node-driver-nsj26" WorkloadEndpoint="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.977000 audit: BPF prog-id=184 op=LOAD Jul 12 00:25:25.977000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffacb0c68 a2=98 a3=fffffacb0c58 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.977000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit: BPF prog-id=184 op=UNLOAD Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit: BPF prog-id=185 op=LOAD Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffacb0948 a2=74 a3=95 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit: BPF prog-id=185 op=UNLOAD Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit: BPF prog-id=186 op=LOAD Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffacb09a8 a2=94 a3=2 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit: BPF prog-id=186 op=UNLOAD Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffacb09d8 a2=28 a3=fffffacb0b08 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffacb0a08 a2=28 a3=fffffacb0b38 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffacb08b8 a2=28 a3=fffffacb09e8 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffacb0a28 a2=28 a3=fffffacb0b58 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffacb0a08 a2=28 a3=fffffacb0b38 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffacb09f8 a2=28 a3=fffffacb0b28 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.986000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.986000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffacb0a28 a2=28 a3=fffffacb0b58 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffacb0a08 a2=28 a3=fffffacb0b38 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffacb0a28 a2=28 a3=fffffacb0b58 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffacb09f8 a2=28 a3=fffffacb0b28 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffacb0a78 a2=28 a3=fffffacb0bb8 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:25.987000 audit: BPF prog-id=187 op=LOAD Jul 12 00:25:25.987000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffacb0898 a2=40 a3=fffffacb08c8 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:25.987000 audit: BPF prog-id=187 op=UNLOAD Jul 12 00:25:25.987000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.001120 env[1813]: time="2025-07-12T00:25:26.000496549Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-vrkdm,Uid:115e2b7e-ce17-422c-ab82-9a084dba0347,Namespace:kube-system,Attempt:1,} returns sandbox id \"3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a\"" Jul 12 00:25:25.987000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffffacb08c0 a2=50 a3=0 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:25.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffffacb08c0 a2=50 a3=0 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.014000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit: BPF prog-id=188 op=LOAD Jul 12 00:25:26.014000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffacb0028 a2=94 a3=2 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.014000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:26.014000 audit: BPF prog-id=188 op=UNLOAD Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { perfmon } for pid=5167 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit[5167]: AVC avc: denied { bpf } for pid=5167 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.014000 audit: BPF prog-id=189 op=LOAD Jul 12 00:25:26.014000 audit[5167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffacb01b8 a2=94 a3=30 items=0 ppid=4273 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.014000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:26.024720 env[1813]: time="2025-07-12T00:25:26.020953429Z" level=info msg="CreateContainer within sandbox \"3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit: BPF prog-id=190 op=LOAD Jul 12 00:25:26.032000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe2919ad8 a2=98 a3=ffffe2919ac8 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.032000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:26.032000 audit: BPF prog-id=190 op=UNLOAD Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.032000 audit: BPF prog-id=191 op=LOAD Jul 12 00:25:26.032000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe2919768 a2=74 a3=95 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.032000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:26.033000 audit: BPF prog-id=191 op=UNLOAD Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.033000 audit: BPF prog-id=192 op=LOAD Jul 12 00:25:26.033000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe29197c8 a2=94 a3=2 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:26.033000 audit: BPF prog-id=192 op=UNLOAD Jul 12 00:25:26.096908 env[1813]: time="2025-07-12T00:25:26.077729869Z" level=info msg="CreateContainer within sandbox \"3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6f40267a53d2dbc9e51909f9210c3b619d14856fd2a406be2e84b2c7b11d323d\"" Jul 12 00:25:26.106880 env[1813]: time="2025-07-12T00:25:26.106814496Z" level=info msg="StartContainer for \"6f40267a53d2dbc9e51909f9210c3b619d14856fd2a406be2e84b2c7b11d323d\"" Jul 12 00:25:26.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.127000 audit: BPF prog-id=193 op=LOAD Jul 12 00:25:26.131000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.131000 audit[5118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5100 pid=5118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238636463646263653137656636636538363266326537323330393363 Jul 12 00:25:26.131000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.131000 audit[5118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5100 pid=5118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238636463646263653137656636636538363266326537323330393363 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit: BPF prog-id=194 op=LOAD Jul 12 00:25:26.137000 audit[5118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5100 pid=5118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238636463646263653137656636636538363266326537323330393363 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.137000 audit: BPF prog-id=195 op=LOAD Jul 12 00:25:26.137000 audit[5118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5100 pid=5118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.137000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238636463646263653137656636636538363266326537323330393363 Jul 12 00:25:26.137000 audit: BPF prog-id=195 op=UNLOAD Jul 12 00:25:26.138000 audit: BPF prog-id=194 op=UNLOAD Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { perfmon } for pid=5118 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit[5118]: AVC avc: denied { bpf } for pid=5118 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.138000 audit: BPF prog-id=196 op=LOAD Jul 12 00:25:26.138000 audit[5118]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5100 pid=5118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238636463646263653137656636636538363266326537323330393363 Jul 12 00:25:26.189607 env[1813]: time="2025-07-12T00:25:26.181576552Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:26.189754 env[1813]: time="2025-07-12T00:25:26.189625702Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:26.189849 env[1813]: time="2025-07-12T00:25:26.189733014Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:26.195746 env[1813]: time="2025-07-12T00:25:26.195599212Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38 pid=5168 runtime=io.containerd.runc.v2 Jul 12 00:25:26.200903 systemd[1]: Started cri-containerd-38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549.scope. Jul 12 00:25:26.206633 systemd[1]: run-containerd-runc-k8s.io-38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549-runc.hW28Lo.mount: Deactivated successfully. Jul 12 00:25:26.295544 systemd[1]: Started cri-containerd-6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38.scope. Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.355000 audit: BPF prog-id=197 op=LOAD Jul 12 00:25:26.356000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.356000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5168 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323766313238393739643661623434396538363036343638613933 Jul 12 00:25:26.356000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.356000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5168 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.356000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323766313238393739643661623434396538363036343638613933 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit: BPF prog-id=198 op=LOAD Jul 12 00:25:26.357000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5168 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323766313238393739643661623434396538363036343638613933 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit: BPF prog-id=199 op=LOAD Jul 12 00:25:26.357000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5168 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323766313238393739643661623434396538363036343638613933 Jul 12 00:25:26.357000 audit: BPF prog-id=199 op=UNLOAD Jul 12 00:25:26.357000 audit: BPF prog-id=198 op=UNLOAD Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { perfmon } for pid=5201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit[5201]: AVC avc: denied { bpf } for pid=5201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.357000 audit: BPF prog-id=200 op=LOAD Jul 12 00:25:26.357000 audit[5201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5168 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323766313238393739643661623434396538363036343638613933 Jul 12 00:25:26.409667 systemd[1]: Started cri-containerd-6f40267a53d2dbc9e51909f9210c3b619d14856fd2a406be2e84b2c7b11d323d.scope. Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.099 [WARNING][5078] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"974e5eee-e5f3-46db-a740-7e56db54868a", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad", Pod:"calico-apiserver-7c994777b8-b54fl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia5dbed22c2d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.100 [INFO][5078] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.100 [INFO][5078] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" iface="eth0" netns="" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.100 [INFO][5078] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.100 [INFO][5078] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.427 [INFO][5184] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.428 [INFO][5184] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.428 [INFO][5184] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.501 [WARNING][5184] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.501 [INFO][5184] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.517 [INFO][5184] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:26.531726 env[1813]: 2025-07-12 00:25:26.526 [INFO][5078] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.533073 env[1813]: time="2025-07-12T00:25:26.531767667Z" level=info msg="TearDown network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" successfully" Jul 12 00:25:26.533073 env[1813]: time="2025-07-12T00:25:26.531815593Z" level=info msg="StopPodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" returns successfully" Jul 12 00:25:26.538986 env[1813]: time="2025-07-12T00:25:26.538926472Z" level=info msg="RemovePodSandbox for \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\"" Jul 12 00:25:26.539324 env[1813]: time="2025-07-12T00:25:26.539245565Z" level=info msg="Forcibly stopping sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\"" Jul 12 00:25:26.559397 env[1813]: time="2025-07-12T00:25:26.559327808Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5864457bbf-w7sk8,Uid:737559a1-5637-4ede-8bf9-c2d41a47c349,Namespace:calico-system,Attempt:1,} returns sandbox id \"28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e\"" Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.591000 audit: BPF prog-id=201 op=LOAD Jul 12 00:25:26.594000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.594000 audit[5203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5030 pid=5203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666343032363761353364326462633965353139303966393231306333 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5030 pid=5203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666343032363761353364326462633965353139303966393231306333 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.595000 audit: BPF prog-id=202 op=LOAD Jul 12 00:25:26.595000 audit[5203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5030 pid=5203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666343032363761353364326462633965353139303966393231306333 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.599000 audit: BPF prog-id=203 op=LOAD Jul 12 00:25:26.599000 audit[5203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5030 pid=5203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666343032363761353364326462633965353139303966393231306333 Jul 12 00:25:26.602000 audit: BPF prog-id=203 op=UNLOAD Jul 12 00:25:26.603000 audit: BPF prog-id=202 op=UNLOAD Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { perfmon } for pid=5203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit[5203]: AVC avc: denied { bpf } for pid=5203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.603000 audit: BPF prog-id=204 op=LOAD Jul 12 00:25:26.603000 audit[5203]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5030 pid=5203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666343032363761353364326462633965353139303966393231306333 Jul 12 00:25:26.693603 env[1813]: time="2025-07-12T00:25:26.693428310Z" level=info msg="StartContainer for \"6f40267a53d2dbc9e51909f9210c3b619d14856fd2a406be2e84b2c7b11d323d\" returns successfully" Jul 12 00:25:26.707376 systemd-networkd[1535]: caliab7dddba605: Gained IPv6LL Jul 12 00:25:26.745402 env[1813]: time="2025-07-12T00:25:26.745311273Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-nsj26,Uid:e5fa5afc-e8d7-456a-856b-28fa80629c7d,Namespace:calico-system,Attempt:1,} returns sandbox id \"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38\"" Jul 12 00:25:26.770000 audit[5238]: AVC avc: denied { getattr } for pid=5238 comm="coredns" path="cgroup:[4026533066]" dev="nsfs" ino=4026533066 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c342 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:25:26.770000 audit[5238]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000564f8 a2=400014e578 a3=0 items=0 ppid=5030 pid=5238 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c342 key=(null) Jul 12 00:25:26.770000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.885000 audit: BPF prog-id=205 op=LOAD Jul 12 00:25:26.886000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.886000 audit[5130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5096 pid=5130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338636531613835316438376535616362376632373466343438383430 Jul 12 00:25:26.886000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.886000 audit[5130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5096 pid=5130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338636531613835316438376535616362376632373466343438383430 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit: BPF prog-id=206 op=LOAD Jul 12 00:25:26.887000 audit[5130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5096 pid=5130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338636531613835316438376535616362376632373466343438383430 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit: BPF prog-id=207 op=LOAD Jul 12 00:25:26.887000 audit[5130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5096 pid=5130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338636531613835316438376535616362376632373466343438383430 Jul 12 00:25:26.887000 audit: BPF prog-id=207 op=UNLOAD Jul 12 00:25:26.887000 audit: BPF prog-id=206 op=UNLOAD Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { perfmon } for pid=5130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit[5130]: AVC avc: denied { bpf } for pid=5130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:26.887000 audit: BPF prog-id=208 op=LOAD Jul 12 00:25:26.887000 audit[5130]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5096 pid=5130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:26.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338636531613835316438376535616362376632373466343438383430 Jul 12 00:25:26.901101 systemd-networkd[1535]: cali5bc4eb33f56: Gained IPv6LL Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.784 [WARNING][5263] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"974e5eee-e5f3-46db-a740-7e56db54868a", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad", Pod:"calico-apiserver-7c994777b8-b54fl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia5dbed22c2d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.785 [INFO][5263] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.785 [INFO][5263] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" iface="eth0" netns="" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.785 [INFO][5263] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.785 [INFO][5263] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.924 [INFO][5286] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.929 [INFO][5286] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.929 [INFO][5286] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.953 [WARNING][5286] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.953 [INFO][5286] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" HandleID="k8s-pod-network.0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.966 [INFO][5286] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:26.981482 env[1813]: 2025-07-12 00:25:26.976 [INFO][5263] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0" Jul 12 00:25:26.981482 env[1813]: time="2025-07-12T00:25:26.981377789Z" level=info msg="TearDown network for sandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" successfully" Jul 12 00:25:26.996975 env[1813]: time="2025-07-12T00:25:26.996885913Z" level=info msg="RemovePodSandbox \"0dda569b82d0f06cb02632bd7d0b0cef9e13a04e93359607017cd66bb587d2a0\" returns successfully" Jul 12 00:25:27.003616 env[1813]: time="2025-07-12T00:25:27.003539567Z" level=info msg="StopPodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\"" Jul 12 00:25:27.027474 systemd-networkd[1535]: vxlan.calico: Gained IPv6LL Jul 12 00:25:27.060421 env[1813]: time="2025-07-12T00:25:27.060358119Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c994777b8-jznt5,Uid:6252a4f0-29f6-482e-9ad2-072532702264,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\"" Jul 12 00:25:27.092508 systemd-networkd[1535]: calif2c1b2346ed: Gained IPv6LL Jul 12 00:25:27.157782 systemd-networkd[1535]: calicf07c77e8c1: Gained IPv6LL Jul 12 00:25:27.236855 kubelet[2909]: I0712 00:25:27.235916 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-vrkdm" podStartSLOduration=59.235867414 podStartE2EDuration="59.235867414s" podCreationTimestamp="2025-07-12 00:24:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:25:27.234437144 +0000 UTC m=+64.948546499" watchObservedRunningTime="2025-07-12 00:25:27.235867414 +0000 UTC m=+64.949976745" Jul 12 00:25:27.257253 kernel: kauditd_printk_skb: 850 callbacks suppressed Jul 12 00:25:27.257502 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.266514 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.280440 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.297939 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:25:27.298103 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.310871 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.311010 kernel: audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.328216 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.338146 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.351381 kernel: audit: type=1400 audit(1752279927.241:1323): avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.241000 audit: BPF prog-id=209 op=LOAD Jul 12 00:25:27.241000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe2919788 a2=40 a3=ffffe29197b8 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.241000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.244000 audit: BPF prog-id=209 op=UNLOAD Jul 12 00:25:27.244000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.244000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe29198a0 a2=50 a3=0 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.244000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe29197f8 a2=28 a3=ffffe2919928 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe2919828 a2=28 a3=ffffe2919958 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe29196d8 a2=28 a3=ffffe2919808 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe2919848 a2=28 a3=ffffe2919978 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe2919828 a2=28 a3=ffffe2919958 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe2919818 a2=28 a3=ffffe2919948 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe2919848 a2=28 a3=ffffe2919978 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe2919828 a2=28 a3=ffffe2919958 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.277000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.277000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe2919848 a2=28 a3=ffffe2919978 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.277000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe2919818 a2=28 a3=ffffe2919948 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe2919898 a2=28 a3=ffffe29199d8 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe29195d0 a2=50 a3=0 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.279000 audit: BPF prog-id=210 op=LOAD Jul 12 00:25:27.279000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe29195d8 a2=94 a3=5 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.279000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.405000 audit: BPF prog-id=210 op=UNLOAD Jul 12 00:25:27.405000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.405000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe29196e0 a2=50 a3=0 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.405000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe2919828 a2=4 a3=3 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.409000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.409000 audit[5174]: AVC avc: denied { confidentiality } for pid=5174 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:27.409000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe2919808 a2=94 a3=6 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.409000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.415000 audit[5174]: AVC avc: denied { confidentiality } for pid=5174 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:27.415000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe2918fd8 a2=94 a3=83 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.415000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { perfmon } for pid=5174 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.427000 audit[5174]: AVC avc: denied { confidentiality } for pid=5174 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:27.427000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe2918fd8 a2=94 a3=83 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.427000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.437000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.437000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe291aa18 a2=10 a3=ffffe291ab08 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.239 [WARNING][5312] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4393f0b3-32c9-454a-9e18-275192d2faaa", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee", Pod:"coredns-668d6bf9bc-lh4v8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7cf8f768602", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.240 [INFO][5312] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.240 [INFO][5312] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" iface="eth0" netns="" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.240 [INFO][5312] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.240 [INFO][5312] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.399 [INFO][5319] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.400 [INFO][5319] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.400 [INFO][5319] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.423 [WARNING][5319] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.423 [INFO][5319] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.426 [INFO][5319] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:27.439887 env[1813]: 2025-07-12 00:25:27.432 [INFO][5312] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.439887 env[1813]: time="2025-07-12T00:25:27.439683977Z" level=info msg="TearDown network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" successfully" Jul 12 00:25:27.439887 env[1813]: time="2025-07-12T00:25:27.439729899Z" level=info msg="StopPodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" returns successfully" Jul 12 00:25:27.441000 audit[5326]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:27.437000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.441000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.441000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe291a8d8 a2=10 a3=ffffe291a9c8 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.441000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.441000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.441000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe291a848 a2=10 a3=ffffe291a9c8 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.441000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.442000 audit[5174]: AVC avc: denied { bpf } for pid=5174 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:27.442000 audit[5174]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe291a848 a2=10 a3=ffffe291a9c8 items=0 ppid=4273 pid=5174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.442000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:27.444714 env[1813]: time="2025-07-12T00:25:27.444617848Z" level=info msg="RemovePodSandbox for \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\"" Jul 12 00:25:27.444837 env[1813]: time="2025-07-12T00:25:27.444681302Z" level=info msg="Forcibly stopping sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\"" Jul 12 00:25:27.441000 audit[5326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd6dbb030 a2=0 a3=1 items=0 ppid=3055 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:27.448000 audit[5326]: NETFILTER_CFG table=nat:108 family=2 entries=44 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:27.448000 audit[5326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffd6dbb030 a2=0 a3=1 items=0 ppid=3055 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:27.467000 audit: BPF prog-id=189 op=UNLOAD Jul 12 00:25:27.540000 audit[5344]: NETFILTER_CFG table=filter:109 family=2 entries=14 op=nft_register_rule pid=5344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:27.540000 audit[5344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffed939290 a2=0 a3=1 items=0 ppid=3055 pid=5344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.540000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:27.582000 audit[5344]: NETFILTER_CFG table=nat:110 family=2 entries=56 op=nft_register_chain pid=5344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:27.582000 audit[5344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffed939290 a2=0 a3=1 items=0 ppid=3055 pid=5344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:27.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.621 [WARNING][5339] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4393f0b3-32c9-454a-9e18-275192d2faaa", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"ebc51b2c31ca56851ccccdba17c4b72b4c44ec6a293b0b3d75a829ca021398ee", Pod:"coredns-668d6bf9bc-lh4v8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7cf8f768602", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.622 [INFO][5339] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.622 [INFO][5339] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" iface="eth0" netns="" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.622 [INFO][5339] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.622 [INFO][5339] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.767 [INFO][5354] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.767 [INFO][5354] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.767 [INFO][5354] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.800 [WARNING][5354] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.800 [INFO][5354] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" HandleID="k8s-pod-network.059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--lh4v8-eth0" Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.813 [INFO][5354] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:27.821057 env[1813]: 2025-07-12 00:25:27.816 [INFO][5339] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda" Jul 12 00:25:27.821057 env[1813]: time="2025-07-12T00:25:27.821013903Z" level=info msg="TearDown network for sandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" successfully" Jul 12 00:25:27.858173 env[1813]: time="2025-07-12T00:25:27.857981979Z" level=info msg="RemovePodSandbox \"059993e681858dfb42320cfa1834879b0dd5d0de699f45860f5b13f29bddbbda\" returns successfully" Jul 12 00:25:28.604000 audit[5384]: NETFILTER_CFG table=mangle:111 family=2 entries=16 op=nft_register_chain pid=5384 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:28.604000 audit[5384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffe269880 a2=0 a3=ffffbb91cfa8 items=0 ppid=4273 pid=5384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.604000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:28.662000 audit[5383]: NETFILTER_CFG table=nat:112 family=2 entries=15 op=nft_register_chain pid=5383 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:28.662000 audit[5383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=fffffed10820 a2=0 a3=ffffa1712fa8 items=0 ppid=4273 pid=5383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.662000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:28.730000 audit[5382]: NETFILTER_CFG table=raw:113 family=2 entries=21 op=nft_register_chain pid=5382 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:28.730000 audit[5382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffffb4a0ea0 a2=0 a3=ffffb41c0fa8 items=0 ppid=4273 pid=5382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.730000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:28.754000 audit[5385]: NETFILTER_CFG table=filter:114 family=2 entries=241 op=nft_register_chain pid=5385 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:28.754000 audit[5385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=142196 a0=3 a1=fffffd3f6f60 a2=0 a3=ffffb534dfa8 items=0 ppid=4273 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.754000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:28.804730 env[1813]: time="2025-07-12T00:25:28.804666503Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:28.809965 env[1813]: time="2025-07-12T00:25:28.809886570Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:28.816544 env[1813]: time="2025-07-12T00:25:28.816471393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:28.821793 env[1813]: time="2025-07-12T00:25:28.821706735Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:28.824611 env[1813]: time="2025-07-12T00:25:28.823266822Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:25:28.827392 env[1813]: time="2025-07-12T00:25:28.827327926Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 12 00:25:28.829110 env[1813]: time="2025-07-12T00:25:28.829053645Z" level=info msg="CreateContainer within sandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:25:28.870554 env[1813]: time="2025-07-12T00:25:28.870368101Z" level=info msg="CreateContainer within sandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\"" Jul 12 00:25:28.871605 env[1813]: time="2025-07-12T00:25:28.871519504Z" level=info msg="StartContainer for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\"" Jul 12 00:25:28.958511 systemd[1]: run-containerd-runc-k8s.io-301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9-runc.Ef6qBG.mount: Deactivated successfully. Jul 12 00:25:28.979524 systemd[1]: Started cri-containerd-301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9.scope. Jul 12 00:25:28.992000 audit[5414]: NETFILTER_CFG table=filter:115 family=2 entries=147 op=nft_register_chain pid=5414 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:28.992000 audit[5414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=80768 a0=3 a1=ffffe01eb8a0 a2=0 a3=ffff827fafa8 items=0 ppid=4273 pid=5414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.992000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:29.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.156:22-147.75.109.163:49948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:29.003599 systemd[1]: Started sshd@8-172.31.27.156:22-147.75.109.163:49948.service. Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.052000 audit: BPF prog-id=211 op=LOAD Jul 12 00:25:29.053000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.053000 audit[5405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4231 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316236653764616433363361333262323963316335626533366165 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4231 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316236653764616433363361333262323963316335626533366165 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.054000 audit: BPF prog-id=212 op=LOAD Jul 12 00:25:29.054000 audit[5405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4231 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316236653764616433363361333262323963316335626533366165 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.056000 audit: BPF prog-id=213 op=LOAD Jul 12 00:25:29.056000 audit[5405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4231 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316236653764616433363361333262323963316335626533366165 Jul 12 00:25:29.058000 audit: BPF prog-id=213 op=UNLOAD Jul 12 00:25:29.058000 audit: BPF prog-id=212 op=UNLOAD Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { perfmon } for pid=5405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit[5405]: AVC avc: denied { bpf } for pid=5405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:29.058000 audit: BPF prog-id=214 op=LOAD Jul 12 00:25:29.058000 audit[5405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4231 pid=5405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330316236653764616433363361333262323963316335626533366165 Jul 12 00:25:29.139121 env[1813]: time="2025-07-12T00:25:29.138966489Z" level=info msg="StartContainer for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" returns successfully" Jul 12 00:25:29.224000 audit[5418]: USER_ACCT pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.226689 sshd[5418]: Accepted publickey for core from 147.75.109.163 port 49948 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:29.228000 audit[5418]: CRED_ACQ pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.228000 audit[5418]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd867d020 a2=3 a3=1 items=0 ppid=1 pid=5418 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.228000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:29.231949 sshd[5418]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:29.246695 systemd[1]: Started session-9.scope. Jul 12 00:25:29.250280 systemd-logind[1808]: New session 9 of user core. Jul 12 00:25:29.272000 audit[5418]: USER_START pid=5418 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.279000 audit[5435]: CRED_ACQ pid=5435 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.449000 audit[5444]: NETFILTER_CFG table=filter:116 family=2 entries=14 op=nft_register_rule pid=5444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:29.449000 audit[5444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc6d2a920 a2=0 a3=1 items=0 ppid=3055 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.449000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:29.459000 audit[5444]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=5444 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:29.459000 audit[5444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc6d2a920 a2=0 a3=1 items=0 ppid=3055 pid=5444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:29.459000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:29.656559 sshd[5418]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:29.657000 audit[5418]: USER_END pid=5418 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.658000 audit[5418]: CRED_DISP pid=5418 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.662845 systemd[1]: session-9.scope: Deactivated successfully. Jul 12 00:25:29.664409 systemd-logind[1808]: Session 9 logged out. Waiting for processes to exit. Jul 12 00:25:29.664554 systemd[1]: sshd@8-172.31.27.156:22-147.75.109.163:49948.service: Deactivated successfully. Jul 12 00:25:29.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.156:22-147.75.109.163:49948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:29.667714 systemd-logind[1808]: Removed session 9. Jul 12 00:25:30.153717 env[1813]: time="2025-07-12T00:25:30.153660294Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.157714 env[1813]: time="2025-07-12T00:25:30.157643544Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.161990 env[1813]: time="2025-07-12T00:25:30.161919048Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.165301 env[1813]: time="2025-07-12T00:25:30.165233997Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.167748 env[1813]: time="2025-07-12T00:25:30.166442826Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 12 00:25:30.171952 env[1813]: time="2025-07-12T00:25:30.171754782Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:25:30.175670 env[1813]: time="2025-07-12T00:25:30.175473653Z" level=info msg="CreateContainer within sandbox \"a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 12 00:25:30.209088 env[1813]: time="2025-07-12T00:25:30.209007388Z" level=info msg="CreateContainer within sandbox \"a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"e9beb47b5f025d356f28b9f11a81864c36fa4d92d177a33d40b460f7585750eb\"" Jul 12 00:25:30.210702 env[1813]: time="2025-07-12T00:25:30.210627867Z" level=info msg="StartContainer for \"e9beb47b5f025d356f28b9f11a81864c36fa4d92d177a33d40b460f7585750eb\"" Jul 12 00:25:30.277100 systemd[1]: Started cri-containerd-e9beb47b5f025d356f28b9f11a81864c36fa4d92d177a33d40b460f7585750eb.scope. Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.392000 audit: BPF prog-id=215 op=LOAD Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4385 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539626562343762356630323564333536663238623966313161383138 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4385 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539626562343762356630323564333536663238623966313161383138 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit: BPF prog-id=216 op=LOAD Jul 12 00:25:30.394000 audit[5464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4385 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539626562343762356630323564333536663238623966313161383138 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit: BPF prog-id=217 op=LOAD Jul 12 00:25:30.394000 audit[5464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4385 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539626562343762356630323564333536663238623966313161383138 Jul 12 00:25:30.394000 audit: BPF prog-id=217 op=UNLOAD Jul 12 00:25:30.394000 audit: BPF prog-id=216 op=UNLOAD Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { perfmon } for pid=5464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit[5464]: AVC avc: denied { bpf } for pid=5464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.394000 audit: BPF prog-id=218 op=LOAD Jul 12 00:25:30.394000 audit[5464]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4385 pid=5464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.394000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539626562343762356630323564333536663238623966313161383138 Jul 12 00:25:30.458647 env[1813]: time="2025-07-12T00:25:30.458468706Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.468943 env[1813]: time="2025-07-12T00:25:30.468867167Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.473573 env[1813]: time="2025-07-12T00:25:30.473498666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.478768 env[1813]: time="2025-07-12T00:25:30.478714540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:30.480032 env[1813]: time="2025-07-12T00:25:30.479969448Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:25:30.485895 env[1813]: time="2025-07-12T00:25:30.485788644Z" level=info msg="StartContainer for \"e9beb47b5f025d356f28b9f11a81864c36fa4d92d177a33d40b460f7585750eb\" returns successfully" Jul 12 00:25:30.487612 env[1813]: time="2025-07-12T00:25:30.487557608Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 12 00:25:30.493840 env[1813]: time="2025-07-12T00:25:30.493763076Z" level=info msg="CreateContainer within sandbox \"f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:25:30.531773 env[1813]: time="2025-07-12T00:25:30.531708498Z" level=info msg="CreateContainer within sandbox \"f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ee94f76ad5d12eddec2e88bf6440b7e9f06fc9f99a480ec305e3645ea9165280\"" Jul 12 00:25:30.533107 env[1813]: time="2025-07-12T00:25:30.533040012Z" level=info msg="StartContainer for \"ee94f76ad5d12eddec2e88bf6440b7e9f06fc9f99a480ec305e3645ea9165280\"" Jul 12 00:25:30.565000 audit[5474]: AVC avc: denied { search } for pid=5474 comm="nginx" name="crypto" dev="proc" ino=26785 scontext=system_u:system_r:svirt_lxc_net_t:s0:c116,c166 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 12 00:25:30.565000 audit[5474]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffa070b958 a2=0 a3=0 items=0 ppid=4385 pid=5474 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c116,c166 key=(null) Jul 12 00:25:30.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 12 00:25:30.591130 systemd[1]: Started cri-containerd-ee94f76ad5d12eddec2e88bf6440b7e9f06fc9f99a480ec305e3645ea9165280.scope. Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.693000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.693000 audit: BPF prog-id=219 op=LOAD Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4670 pid=5496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393466373661643564313265646465633265383862663634343062 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4670 pid=5496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393466373661643564313265646465633265383862663634343062 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit: BPF prog-id=220 op=LOAD Jul 12 00:25:30.694000 audit[5496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4670 pid=5496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393466373661643564313265646465633265383862663634343062 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit: BPF prog-id=221 op=LOAD Jul 12 00:25:30.694000 audit[5496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4670 pid=5496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393466373661643564313265646465633265383862663634343062 Jul 12 00:25:30.694000 audit: BPF prog-id=221 op=UNLOAD Jul 12 00:25:30.694000 audit: BPF prog-id=220 op=UNLOAD Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { perfmon } for pid=5496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit[5496]: AVC avc: denied { bpf } for pid=5496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:30.694000 audit: BPF prog-id=222 op=LOAD Jul 12 00:25:30.694000 audit[5496]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4670 pid=5496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:30.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393466373661643564313265646465633265383862663634343062 Jul 12 00:25:30.772156 env[1813]: time="2025-07-12T00:25:30.772062358Z" level=info msg="StartContainer for \"ee94f76ad5d12eddec2e88bf6440b7e9f06fc9f99a480ec305e3645ea9165280\" returns successfully" Jul 12 00:25:31.335792 kubelet[2909]: I0712 00:25:31.335679 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7c994777b8-b54fl" podStartSLOduration=38.364079544 podStartE2EDuration="47.335623145s" podCreationTimestamp="2025-07-12 00:24:44 +0000 UTC" firstStartedPulling="2025-07-12 00:25:19.854329931 +0000 UTC m=+57.568439262" lastFinishedPulling="2025-07-12 00:25:28.825873544 +0000 UTC m=+66.539982863" observedRunningTime="2025-07-12 00:25:29.341504581 +0000 UTC m=+67.055613936" watchObservedRunningTime="2025-07-12 00:25:31.335623145 +0000 UTC m=+69.049732464" Jul 12 00:25:31.406000 audit[5534]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=5534 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:31.406000 audit[5534]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe8905820 a2=0 a3=1 items=0 ppid=3055 pid=5534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:31.406000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:31.414000 audit[5534]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=5534 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:31.414000 audit[5534]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe8905820 a2=0 a3=1 items=0 ppid=3055 pid=5534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:31.414000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:32.558703 kernel: kauditd_printk_skb: 339 callbacks suppressed Jul 12 00:25:32.559024 kernel: audit: type=1400 audit(1752279932.542:1427): avc: denied { watch } for pid=5416 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_25_06.1870569064/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c354,c898 tclass=file permissive=0 Jul 12 00:25:32.542000 audit[5416]: AVC avc: denied { watch } for pid=5416 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_25_06.1870569064/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c354,c898 tclass=file permissive=0 Jul 12 00:25:32.542000 audit[5416]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40013eed00 a2=fc6 a3=0 items=0 ppid=4231 pid=5416 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c898 key=(null) Jul 12 00:25:32.586811 kernel: audit: type=1300 audit(1752279932.542:1427): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40013eed00 a2=fc6 a3=0 items=0 ppid=4231 pid=5416 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c898 key=(null) Jul 12 00:25:32.542000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:25:32.606683 kernel: audit: type=1327 audit(1752279932.542:1427): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:25:32.677151 kubelet[2909]: I0712 00:25:32.677016 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-c699c5847-hd8v7" podStartSLOduration=35.927699856 podStartE2EDuration="42.67698562s" podCreationTimestamp="2025-07-12 00:24:50 +0000 UTC" firstStartedPulling="2025-07-12 00:25:23.73359753 +0000 UTC m=+61.447706861" lastFinishedPulling="2025-07-12 00:25:30.482883186 +0000 UTC m=+68.196992625" observedRunningTime="2025-07-12 00:25:31.34318188 +0000 UTC m=+69.057291223" watchObservedRunningTime="2025-07-12 00:25:32.67698562 +0000 UTC m=+70.391094951" Jul 12 00:25:32.795000 audit[5536]: NETFILTER_CFG table=filter:120 family=2 entries=13 op=nft_register_rule pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:32.795000 audit[5536]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe17f9750 a2=0 a3=1 items=0 ppid=3055 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:32.815157 kernel: audit: type=1325 audit(1752279932.795:1428): table=filter:120 family=2 entries=13 op=nft_register_rule pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:32.815378 kernel: audit: type=1300 audit(1752279932.795:1428): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe17f9750 a2=0 a3=1 items=0 ppid=3055 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:32.795000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:32.833018 kernel: audit: type=1327 audit(1752279932.795:1428): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:32.825000 audit[5536]: NETFILTER_CFG table=nat:121 family=2 entries=27 op=nft_register_chain pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:32.844491 kernel: audit: type=1325 audit(1752279932.825:1429): table=nat:121 family=2 entries=27 op=nft_register_chain pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:32.825000 audit[5536]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe17f9750 a2=0 a3=1 items=0 ppid=3055 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:32.857037 kernel: audit: type=1300 audit(1752279932.825:1429): arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=ffffe17f9750 a2=0 a3=1 items=0 ppid=3055 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:32.825000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:32.863315 kernel: audit: type=1327 audit(1752279932.825:1429): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:33.328272 kubelet[2909]: I0712 00:25:33.327466 2909 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:25:33.451419 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2008663640.mount: Deactivated successfully. Jul 12 00:25:34.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.156:22-147.75.109.163:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:34.683970 systemd[1]: Started sshd@9-172.31.27.156:22-147.75.109.163:49950.service. Jul 12 00:25:34.698406 kernel: audit: type=1130 audit(1752279934.683:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.156:22-147.75.109.163:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:34.758978 env[1813]: time="2025-07-12T00:25:34.758855917Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:34.772306 env[1813]: time="2025-07-12T00:25:34.772182735Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:34.795494 env[1813]: time="2025-07-12T00:25:34.795363814Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:34.820311 env[1813]: time="2025-07-12T00:25:34.820239873Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:34.825454 env[1813]: time="2025-07-12T00:25:34.825366922Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 12 00:25:34.831084 env[1813]: time="2025-07-12T00:25:34.831002176Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 12 00:25:34.839337 env[1813]: time="2025-07-12T00:25:34.839099658Z" level=info msg="CreateContainer within sandbox \"3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 12 00:25:34.865000 audit[5512]: AVC avc: denied { watch } for pid=5512 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_25_06.1408028503/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c501 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c317,c501 tclass=file permissive=0 Jul 12 00:25:34.865000 audit[5512]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40006f9620 a2=fc6 a3=0 items=0 ppid=4670 pid=5512 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c501 key=(null) Jul 12 00:25:34.865000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:25:34.936474 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount938442228.mount: Deactivated successfully. Jul 12 00:25:34.940000 audit[5547]: USER_ACCT pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.942429 sshd[5547]: Accepted publickey for core from 147.75.109.163 port 49950 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:34.944760 env[1813]: time="2025-07-12T00:25:34.944556115Z" level=info msg="CreateContainer within sandbox \"3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371\"" Jul 12 00:25:34.943000 audit[5547]: CRED_ACQ pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.945000 audit[5547]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc03862a0 a2=3 a3=1 items=0 ppid=1 pid=5547 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:34.945000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:34.953011 env[1813]: time="2025-07-12T00:25:34.952908282Z" level=info msg="StartContainer for \"6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371\"" Jul 12 00:25:34.954931 sshd[5547]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:34.972890 systemd[1]: Started session-10.scope. Jul 12 00:25:34.974574 systemd-logind[1808]: New session 10 of user core. Jul 12 00:25:35.021000 audit[5547]: USER_START pid=5547 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:35.027000 audit[5564]: CRED_ACQ pid=5564 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:35.071182 systemd[1]: run-containerd-runc-k8s.io-6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371-runc.wDFTis.mount: Deactivated successfully. Jul 12 00:25:35.088233 systemd[1]: Started cri-containerd-6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371.scope. Jul 12 00:25:35.270412 systemd[1]: Created slice kubepods-besteffort-pod1efc1378_c67c_4909_9c78_d274cbac766e.slice. Jul 12 00:25:35.383000 audit[5578]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=5578 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:35.383000 audit[5578]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc62c9320 a2=0 a3=1 items=0 ppid=3055 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.383000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:35.391000 audit[5578]: NETFILTER_CFG table=nat:123 family=2 entries=34 op=nft_register_chain pid=5578 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:35.391000 audit[5578]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffc62c9320 a2=0 a3=1 items=0 ppid=3055 pid=5578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.391000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:35.418890 kubelet[2909]: I0712 00:25:35.418797 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1efc1378-c67c-4909-9c78-d274cbac766e-calico-apiserver-certs\") pod \"calico-apiserver-c699c5847-m4qb6\" (UID: \"1efc1378-c67c-4909-9c78-d274cbac766e\") " pod="calico-apiserver/calico-apiserver-c699c5847-m4qb6" Jul 12 00:25:35.418890 kubelet[2909]: I0712 00:25:35.418890 2909 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zdrs6\" (UniqueName: \"kubernetes.io/projected/1efc1378-c67c-4909-9c78-d274cbac766e-kube-api-access-zdrs6\") pod \"calico-apiserver-c699c5847-m4qb6\" (UID: \"1efc1378-c67c-4909-9c78-d274cbac766e\") " pod="calico-apiserver/calico-apiserver-c699c5847-m4qb6" Jul 12 00:25:35.423328 sshd[5547]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:35.424000 audit[5547]: USER_END pid=5547 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:35.424000 audit[5547]: CRED_DISP pid=5547 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:35.430369 systemd-logind[1808]: Session 10 logged out. Waiting for processes to exit. Jul 12 00:25:35.431900 systemd[1]: session-10.scope: Deactivated successfully. Jul 12 00:25:35.433129 systemd[1]: sshd@9-172.31.27.156:22-147.75.109.163:49950.service: Deactivated successfully. Jul 12 00:25:35.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.156:22-147.75.109.163:49950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:35.437395 systemd-logind[1808]: Removed session 10. Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.462000 audit: BPF prog-id=223 op=LOAD Jul 12 00:25:35.463000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.463000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4632 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333337313865356263623039386638646439383966613862303230 Jul 12 00:25:35.463000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.463000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4632 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333337313865356263623039386638646439383966613862303230 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit: BPF prog-id=224 op=LOAD Jul 12 00:25:35.464000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4632 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333337313865356263623039386638646439383966613862303230 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit: BPF prog-id=225 op=LOAD Jul 12 00:25:35.464000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4632 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333337313865356263623039386638646439383966613862303230 Jul 12 00:25:35.464000 audit: BPF prog-id=225 op=UNLOAD Jul 12 00:25:35.464000 audit: BPF prog-id=224 op=UNLOAD Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { perfmon } for pid=5558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit[5558]: AVC avc: denied { bpf } for pid=5558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:35.464000 audit: BPF prog-id=226 op=LOAD Jul 12 00:25:35.464000 audit[5558]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4632 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:35.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333337313865356263623039386638646439383966613862303230 Jul 12 00:25:35.589059 env[1813]: time="2025-07-12T00:25:35.588868258Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c699c5847-m4qb6,Uid:1efc1378-c67c-4909-9c78-d274cbac766e,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:25:35.774842 env[1813]: time="2025-07-12T00:25:35.774777090Z" level=info msg="StartContainer for \"6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371\" returns successfully" Jul 12 00:25:35.989021 (udev-worker)[5618]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:25:35.993457 systemd-networkd[1535]: cali389332a0154: Link UP Jul 12 00:25:36.003313 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:25:36.003544 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali389332a0154: link becomes ready Jul 12 00:25:36.005971 systemd-networkd[1535]: cali389332a0154: Gained carrier Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.755 [INFO][5588] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0 calico-apiserver-c699c5847- calico-apiserver 1efc1378-c67c-4909-9c78-d274cbac766e 1157 0 2025-07-12 00:25:35 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:c699c5847 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-156 calico-apiserver-c699c5847-m4qb6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali389332a0154 [] [] }} ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.755 [INFO][5588] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.842 [INFO][5608] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" HandleID="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.842 [INFO][5608] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" HandleID="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-156", "pod":"calico-apiserver-c699c5847-m4qb6", "timestamp":"2025-07-12 00:25:35.842016213 +0000 UTC"}, Hostname:"ip-172-31-27-156", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.842 [INFO][5608] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.843 [INFO][5608] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.843 [INFO][5608] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-156' Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.860 [INFO][5608] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.870 [INFO][5608] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.887 [INFO][5608] ipam/ipam.go 511: Trying affinity for 192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.892 [INFO][5608] ipam/ipam.go 158: Attempting to load block cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.912 [INFO][5608] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.36.192/26 host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.912 [INFO][5608] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.36.192/26 handle="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.934 [INFO][5608] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.942 [INFO][5608] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.36.192/26 handle="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.962 [INFO][5608] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.36.202/26] block=192.168.36.192/26 handle="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.962 [INFO][5608] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.36.202/26] handle="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" host="ip-172-31-27-156" Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.962 [INFO][5608] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:36.038318 env[1813]: 2025-07-12 00:25:35.962 [INFO][5608] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.36.202/26] IPv6=[] ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" HandleID="k8s-pod-network.ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.039803 env[1813]: 2025-07-12 00:25:35.974 [INFO][5588] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0", GenerateName:"calico-apiserver-c699c5847-", Namespace:"calico-apiserver", SelfLink:"", UID:"1efc1378-c67c-4909-9c78-d274cbac766e", ResourceVersion:"1157", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 25, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c699c5847", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"", Pod:"calico-apiserver-c699c5847-m4qb6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.202/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali389332a0154", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:36.039803 env[1813]: 2025-07-12 00:25:35.974 [INFO][5588] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.36.202/32] ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.039803 env[1813]: 2025-07-12 00:25:35.974 [INFO][5588] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali389332a0154 ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.039803 env[1813]: 2025-07-12 00:25:36.004 [INFO][5588] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.039803 env[1813]: 2025-07-12 00:25:36.010 [INFO][5588] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0", GenerateName:"calico-apiserver-c699c5847-", Namespace:"calico-apiserver", SelfLink:"", UID:"1efc1378-c67c-4909-9c78-d274cbac766e", ResourceVersion:"1157", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 25, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c699c5847", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b", Pod:"calico-apiserver-c699c5847-m4qb6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.202/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali389332a0154", MAC:"f6:e4:fa:eb:7a:fc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:36.039803 env[1813]: 2025-07-12 00:25:36.033 [INFO][5588] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b" Namespace="calico-apiserver" Pod="calico-apiserver-c699c5847-m4qb6" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--m4qb6-eth0" Jul 12 00:25:36.108018 env[1813]: time="2025-07-12T00:25:36.107642284Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:36.108018 env[1813]: time="2025-07-12T00:25:36.107736171Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:36.108018 env[1813]: time="2025-07-12T00:25:36.107764479Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:36.108611 env[1813]: time="2025-07-12T00:25:36.108469162Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b pid=5635 runtime=io.containerd.runc.v2 Jul 12 00:25:36.105000 audit[5641]: NETFILTER_CFG table=filter:124 family=2 entries=57 op=nft_register_chain pid=5641 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:36.105000 audit[5641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27796 a0=3 a1=ffffff8b9770 a2=0 a3=ffffbcb36fa8 items=0 ppid=4273 pid=5641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.105000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:36.161113 systemd[1]: Started cri-containerd-ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b.scope. Jul 12 00:25:36.189047 systemd[1]: run-containerd-runc-k8s.io-ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b-runc.4ODaRm.mount: Deactivated successfully. Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.244000 audit: BPF prog-id=227 op=LOAD Jul 12 00:25:36.248000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.248000 audit[5648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5635 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164363666376132353866643264323436663462306436336261376533 Jul 12 00:25:36.248000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.248000 audit[5648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5635 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164363666376132353866643264323436663462306436336261376533 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit: BPF prog-id=228 op=LOAD Jul 12 00:25:36.249000 audit[5648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5635 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164363666376132353866643264323436663462306436336261376533 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit: BPF prog-id=229 op=LOAD Jul 12 00:25:36.249000 audit[5648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5635 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164363666376132353866643264323436663462306436336261376533 Jul 12 00:25:36.249000 audit: BPF prog-id=229 op=UNLOAD Jul 12 00:25:36.249000 audit: BPF prog-id=228 op=UNLOAD Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.249000 audit: BPF prog-id=230 op=LOAD Jul 12 00:25:36.249000 audit[5648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5635 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164363666376132353866643264323436663462306436336261376533 Jul 12 00:25:36.310609 env[1813]: time="2025-07-12T00:25:36.310431945Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c699c5847-m4qb6,Uid:1efc1378-c67c-4909-9c78-d274cbac766e,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b\"" Jul 12 00:25:36.322163 env[1813]: time="2025-07-12T00:25:36.321245914Z" level=info msg="CreateContainer within sandbox \"ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:25:36.385725 env[1813]: time="2025-07-12T00:25:36.385653461Z" level=info msg="CreateContainer within sandbox \"ad66f7a258fd2d246f4b0d63ba7e3701e55940bef22cebbe36ea02e6eb3e907b\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1cb1eabaa94273437f6418cf02a6dd0624c282aaababd3b28f2f5b2323c308bd\"" Jul 12 00:25:36.393243 env[1813]: time="2025-07-12T00:25:36.391344963Z" level=info msg="StartContainer for \"1cb1eabaa94273437f6418cf02a6dd0624c282aaababd3b28f2f5b2323c308bd\"" Jul 12 00:25:36.485000 audit[5694]: NETFILTER_CFG table=filter:125 family=2 entries=12 op=nft_register_rule pid=5694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:36.485000 audit[5694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe6f04a10 a2=0 a3=1 items=0 ppid=3055 pid=5694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.485000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:36.495000 audit[5694]: NETFILTER_CFG table=nat:126 family=2 entries=22 op=nft_register_rule pid=5694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:36.495000 audit[5694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe6f04a10 a2=0 a3=1 items=0 ppid=3055 pid=5694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.495000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:36.513523 systemd[1]: Started cri-containerd-1cb1eabaa94273437f6418cf02a6dd0624c282aaababd3b28f2f5b2323c308bd.scope. Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.598000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.599000 audit: BPF prog-id=231 op=LOAD Jul 12 00:25:36.599000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.599000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5635 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623165616261613934323733343337663634313863663032613664 Jul 12 00:25:36.599000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.599000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5635 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623165616261613934323733343337663634313863663032613664 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit: BPF prog-id=232 op=LOAD Jul 12 00:25:36.600000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5635 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623165616261613934323733343337663634313863663032613664 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit: BPF prog-id=233 op=LOAD Jul 12 00:25:36.600000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5635 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623165616261613934323733343337663634313863663032613664 Jul 12 00:25:36.600000 audit: BPF prog-id=233 op=UNLOAD Jul 12 00:25:36.600000 audit: BPF prog-id=232 op=UNLOAD Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:36.600000 audit: BPF prog-id=234 op=LOAD Jul 12 00:25:36.600000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5635 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:36.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623165616261613934323733343337663634313863663032613664 Jul 12 00:25:36.714755 env[1813]: time="2025-07-12T00:25:36.714674657Z" level=info msg="StartContainer for \"1cb1eabaa94273437f6418cf02a6dd0624c282aaababd3b28f2f5b2323c308bd\" returns successfully" Jul 12 00:25:36.909785 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3453125333.mount: Deactivated successfully. Jul 12 00:25:37.204070 systemd-networkd[1535]: cali389332a0154: Gained IPv6LL Jul 12 00:25:37.405268 kubelet[2909]: I0712 00:25:37.405147 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-rv8kz" podStartSLOduration=33.386440592 podStartE2EDuration="44.405120871s" podCreationTimestamp="2025-07-12 00:24:53 +0000 UTC" firstStartedPulling="2025-07-12 00:25:23.810281825 +0000 UTC m=+61.524391144" lastFinishedPulling="2025-07-12 00:25:34.828962092 +0000 UTC m=+72.543071423" observedRunningTime="2025-07-12 00:25:36.390688819 +0000 UTC m=+74.104798138" watchObservedRunningTime="2025-07-12 00:25:37.405120871 +0000 UTC m=+75.119230202" Jul 12 00:25:37.626233 kernel: kauditd_printk_skb: 199 callbacks suppressed Jul 12 00:25:37.626476 kernel: audit: type=1325 audit(1752279937.605:1499): table=filter:127 family=2 entries=12 op=nft_register_rule pid=5768 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:37.605000 audit[5768]: NETFILTER_CFG table=filter:127 family=2 entries=12 op=nft_register_rule pid=5768 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:37.605000 audit[5768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdd42ef20 a2=0 a3=1 items=0 ppid=3055 pid=5768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:37.605000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:37.662938 kernel: audit: type=1300 audit(1752279937.605:1499): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdd42ef20 a2=0 a3=1 items=0 ppid=3055 pid=5768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:37.663125 kernel: audit: type=1327 audit(1752279937.605:1499): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:37.690000 audit[5768]: NETFILTER_CFG table=nat:128 family=2 entries=36 op=nft_register_rule pid=5768 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:37.690000 audit[5768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffdd42ef20 a2=0 a3=1 items=0 ppid=3055 pid=5768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:37.703435 kernel: audit: type=1325 audit(1752279937.690:1500): table=nat:128 family=2 entries=36 op=nft_register_rule pid=5768 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:37.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:37.730379 kernel: audit: type=1300 audit(1752279937.690:1500): arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffdd42ef20 a2=0 a3=1 items=0 ppid=3055 pid=5768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:37.730532 kernel: audit: type=1327 audit(1752279937.690:1500): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:38.836390 env[1813]: time="2025-07-12T00:25:38.836292491Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:38.840787 env[1813]: time="2025-07-12T00:25:38.840710511Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:38.846178 env[1813]: time="2025-07-12T00:25:38.846085012Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:38.849519 env[1813]: time="2025-07-12T00:25:38.849413926Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:38.850073 env[1813]: time="2025-07-12T00:25:38.849999621Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 12 00:25:38.853880 env[1813]: time="2025-07-12T00:25:38.853806014Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 12 00:25:38.893106 env[1813]: time="2025-07-12T00:25:38.893030651Z" level=info msg="CreateContainer within sandbox \"28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 12 00:25:38.926890 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3326925234.mount: Deactivated successfully. Jul 12 00:25:38.930384 env[1813]: time="2025-07-12T00:25:38.930292716Z" level=info msg="CreateContainer within sandbox \"28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"4dffc875b517cacf94a3df56d9979d1cac506d86049d22752b4b86c23b202d3e\"" Jul 12 00:25:38.933636 env[1813]: time="2025-07-12T00:25:38.931364421Z" level=info msg="StartContainer for \"4dffc875b517cacf94a3df56d9979d1cac506d86049d22752b4b86c23b202d3e\"" Jul 12 00:25:39.011857 systemd[1]: Started cri-containerd-4dffc875b517cacf94a3df56d9979d1cac506d86049d22752b4b86c23b202d3e.scope. Jul 12 00:25:39.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.253301 kernel: audit: type=1400 audit(1752279939.238:1501): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.273135 kernel: audit: type=1400 audit(1752279939.247:1502): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.273305 kernel: audit: type=1400 audit(1752279939.247:1503): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.283965 kernel: audit: type=1400 audit(1752279939.247:1504): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.247000 audit: BPF prog-id=235 op=LOAD Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5100 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:39.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464666663383735623531376361636639346133646635366439393739 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5100 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:39.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464666663383735623531376361636639346133646635366439393739 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit: BPF prog-id=236 op=LOAD Jul 12 00:25:39.248000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5100 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:39.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464666663383735623531376361636639346133646635366439393739 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit: BPF prog-id=237 op=LOAD Jul 12 00:25:39.248000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5100 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:39.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464666663383735623531376361636639346133646635366439393739 Jul 12 00:25:39.248000 audit: BPF prog-id=237 op=UNLOAD Jul 12 00:25:39.248000 audit: BPF prog-id=236 op=UNLOAD Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { perfmon } for pid=5793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit[5793]: AVC avc: denied { bpf } for pid=5793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:39.248000 audit: BPF prog-id=238 op=LOAD Jul 12 00:25:39.248000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5100 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:39.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464666663383735623531376361636639346133646635366439393739 Jul 12 00:25:39.378803 kubelet[2909]: I0712 00:25:39.378747 2909 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:25:39.448500 env[1813]: time="2025-07-12T00:25:39.448409203Z" level=info msg="StartContainer for \"4dffc875b517cacf94a3df56d9979d1cac506d86049d22752b4b86c23b202d3e\" returns successfully" Jul 12 00:25:39.868309 systemd[1]: run-containerd-runc-k8s.io-6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371-runc.tyqZla.mount: Deactivated successfully. Jul 12 00:25:40.265580 env[1813]: time="2025-07-12T00:25:40.265501587Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.269371 env[1813]: time="2025-07-12T00:25:40.269290116Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.273507 env[1813]: time="2025-07-12T00:25:40.273437554Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.277218 env[1813]: time="2025-07-12T00:25:40.277135748Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.280035 env[1813]: time="2025-07-12T00:25:40.278639615Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 12 00:25:40.285280 env[1813]: time="2025-07-12T00:25:40.285183112Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:25:40.288983 env[1813]: time="2025-07-12T00:25:40.288889777Z" level=info msg="CreateContainer within sandbox \"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 12 00:25:40.325027 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3995037506.mount: Deactivated successfully. Jul 12 00:25:40.332219 env[1813]: time="2025-07-12T00:25:40.332122765Z" level=info msg="CreateContainer within sandbox \"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"c732817a77bd193a714f843bddb49769faf5c9dba7574438742e36face0ad0ce\"" Jul 12 00:25:40.335278 env[1813]: time="2025-07-12T00:25:40.335144480Z" level=info msg="StartContainer for \"c732817a77bd193a714f843bddb49769faf5c9dba7574438742e36face0ad0ce\"" Jul 12 00:25:40.426060 kubelet[2909]: I0712 00:25:40.423695 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-c699c5847-m4qb6" podStartSLOduration=5.423673165 podStartE2EDuration="5.423673165s" podCreationTimestamp="2025-07-12 00:25:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:25:37.407984323 +0000 UTC m=+75.122093666" watchObservedRunningTime="2025-07-12 00:25:40.423673165 +0000 UTC m=+78.137782508" Jul 12 00:25:40.443690 systemd[1]: Started cri-containerd-c732817a77bd193a714f843bddb49769faf5c9dba7574438742e36face0ad0ce.scope. Jul 12 00:25:40.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.156:22-147.75.109.163:36164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:40.461684 systemd[1]: Started sshd@10-172.31.27.156:22-147.75.109.163:36164.service. Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5168 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337333238313761373762643139336137313466383433626464623439 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.553000 audit: BPF prog-id=239 op=LOAD Jul 12 00:25:40.553000 audit[5853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5168 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337333238313761373762643139336137313466383433626464623439 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit: BPF prog-id=240 op=LOAD Jul 12 00:25:40.554000 audit[5853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5168 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337333238313761373762643139336137313466383433626464623439 Jul 12 00:25:40.554000 audit: BPF prog-id=240 op=UNLOAD Jul 12 00:25:40.554000 audit: BPF prog-id=239 op=UNLOAD Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { perfmon } for pid=5853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit[5853]: AVC avc: denied { bpf } for pid=5853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.554000 audit: BPF prog-id=241 op=LOAD Jul 12 00:25:40.554000 audit[5853]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5168 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337333238313761373762643139336137313466383433626464623439 Jul 12 00:25:40.614972 env[1813]: time="2025-07-12T00:25:40.614910694Z" level=info msg="StartContainer for \"c732817a77bd193a714f843bddb49769faf5c9dba7574438742e36face0ad0ce\" returns successfully" Jul 12 00:25:40.627025 env[1813]: time="2025-07-12T00:25:40.626871220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.636754 env[1813]: time="2025-07-12T00:25:40.636673324Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.642604 env[1813]: time="2025-07-12T00:25:40.642525127Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.651388 env[1813]: time="2025-07-12T00:25:40.651312509Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:40.653532 env[1813]: time="2025-07-12T00:25:40.652024866Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:25:40.665406 env[1813]: time="2025-07-12T00:25:40.663178714Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 12 00:25:40.669052 env[1813]: time="2025-07-12T00:25:40.668953021Z" level=info msg="CreateContainer within sandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:25:40.691854 env[1813]: time="2025-07-12T00:25:40.691768390Z" level=info msg="CreateContainer within sandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\"" Jul 12 00:25:40.693147 env[1813]: time="2025-07-12T00:25:40.693081733Z" level=info msg="StartContainer for \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\"" Jul 12 00:25:40.721000 audit[5866]: USER_ACCT pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.723624 sshd[5866]: Accepted publickey for core from 147.75.109.163 port 36164 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:40.728000 audit[5866]: CRED_ACQ pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.728000 audit[5866]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff894af10 a2=3 a3=1 items=0 ppid=1 pid=5866 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.728000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:40.731924 sshd[5866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:40.742530 systemd-logind[1808]: New session 11 of user core. Jul 12 00:25:40.743550 systemd[1]: Started session-11.scope. Jul 12 00:25:40.772000 audit[5866]: USER_START pid=5866 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.775000 audit[5917]: CRED_ACQ pid=5917 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.799882 systemd[1]: Started cri-containerd-89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e.scope. Jul 12 00:25:40.805146 kubelet[2909]: I0712 00:25:40.805029 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5864457bbf-w7sk8" podStartSLOduration=34.52156773 podStartE2EDuration="46.80498302s" podCreationTimestamp="2025-07-12 00:24:54 +0000 UTC" firstStartedPulling="2025-07-12 00:25:26.569300358 +0000 UTC m=+64.283409689" lastFinishedPulling="2025-07-12 00:25:38.852715636 +0000 UTC m=+76.566824979" observedRunningTime="2025-07-12 00:25:40.42394661 +0000 UTC m=+78.138055953" watchObservedRunningTime="2025-07-12 00:25:40.80498302 +0000 UTC m=+78.519092375" Jul 12 00:25:40.874464 systemd[1]: run-containerd-runc-k8s.io-c732817a77bd193a714f843bddb49769faf5c9dba7574438742e36face0ad0ce-runc.FYcT1i.mount: Deactivated successfully. Jul 12 00:25:40.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.892000 audit: BPF prog-id=242 op=LOAD Jul 12 00:25:40.893000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.893000 audit[5906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5096 pid=5906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839653935383162353135663530396134666237616265396236646461 Jul 12 00:25:40.893000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.893000 audit[5906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5096 pid=5906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839653935383162353135663530396134666237616265396236646461 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.894000 audit: BPF prog-id=243 op=LOAD Jul 12 00:25:40.894000 audit[5906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5096 pid=5906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839653935383162353135663530396134666237616265396236646461 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.896000 audit: BPF prog-id=244 op=LOAD Jul 12 00:25:40.896000 audit[5906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5096 pid=5906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839653935383162353135663530396134666237616265396236646461 Jul 12 00:25:40.907000 audit: BPF prog-id=244 op=UNLOAD Jul 12 00:25:40.907000 audit: BPF prog-id=243 op=UNLOAD Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { perfmon } for pid=5906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit[5906]: AVC avc: denied { bpf } for pid=5906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:40.908000 audit: BPF prog-id=245 op=LOAD Jul 12 00:25:40.908000 audit[5906]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5096 pid=5906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839653935383162353135663530396134666237616265396236646461 Jul 12 00:25:41.027157 env[1813]: time="2025-07-12T00:25:41.027055880Z" level=info msg="StartContainer for \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\" returns successfully" Jul 12 00:25:41.128791 sshd[5866]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:41.130000 audit[5866]: USER_END pid=5866 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.130000 audit[5866]: CRED_DISP pid=5866 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.156:22-147.75.109.163:36164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:41.137576 systemd[1]: sshd@10-172.31.27.156:22-147.75.109.163:36164.service: Deactivated successfully. Jul 12 00:25:41.139129 systemd[1]: session-11.scope: Deactivated successfully. Jul 12 00:25:41.141348 systemd-logind[1808]: Session 11 logged out. Waiting for processes to exit. Jul 12 00:25:41.146328 systemd-logind[1808]: Removed session 11. Jul 12 00:25:41.163030 systemd[1]: Started sshd@11-172.31.27.156:22-147.75.109.163:36166.service. Jul 12 00:25:41.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.156:22-147.75.109.163:36166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:41.351000 audit[5946]: USER_ACCT pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.353115 sshd[5946]: Accepted publickey for core from 147.75.109.163 port 36166 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:41.353000 audit[5946]: CRED_ACQ pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.353000 audit[5946]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc29bd90 a2=3 a3=1 items=0 ppid=1 pid=5946 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:41.353000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:41.355889 sshd[5946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:41.365781 systemd[1]: Started session-12.scope. Jul 12 00:25:41.367507 systemd-logind[1808]: New session 12 of user core. Jul 12 00:25:41.392000 audit[5946]: USER_START pid=5946 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.396000 audit[5955]: CRED_ACQ pid=5955 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.435249 env[1813]: time="2025-07-12T00:25:41.435159466Z" level=info msg="StopContainer for \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\" with timeout 30 (s)" Jul 12 00:25:41.439498 env[1813]: time="2025-07-12T00:25:41.436832442Z" level=info msg="Stop container \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\" with signal terminated" Jul 12 00:25:41.470527 kubelet[2909]: I0712 00:25:41.470365 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7c994777b8-jznt5" podStartSLOduration=43.876742845 podStartE2EDuration="57.470338312s" podCreationTimestamp="2025-07-12 00:24:44 +0000 UTC" firstStartedPulling="2025-07-12 00:25:27.062874079 +0000 UTC m=+64.776983410" lastFinishedPulling="2025-07-12 00:25:40.656469558 +0000 UTC m=+78.370578877" observedRunningTime="2025-07-12 00:25:41.468680984 +0000 UTC m=+79.182790315" watchObservedRunningTime="2025-07-12 00:25:41.470338312 +0000 UTC m=+79.184447643" Jul 12 00:25:41.475000 audit: BPF prog-id=242 op=UNLOAD Jul 12 00:25:41.476642 systemd[1]: cri-containerd-89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e.scope: Deactivated successfully. Jul 12 00:25:41.479000 audit: BPF prog-id=245 op=UNLOAD Jul 12 00:25:41.597596 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e-rootfs.mount: Deactivated successfully. Jul 12 00:25:41.621728 env[1813]: time="2025-07-12T00:25:41.621655958Z" level=info msg="shim disconnected" id=89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e Jul 12 00:25:41.622526 env[1813]: time="2025-07-12T00:25:41.622443738Z" level=warning msg="cleaning up after shim disconnected" id=89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e namespace=k8s.io Jul 12 00:25:41.622771 env[1813]: time="2025-07-12T00:25:41.622731043Z" level=info msg="cleaning up dead shim" Jul 12 00:25:41.669907 env[1813]: time="2025-07-12T00:25:41.669733123Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:25:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5982 runtime=io.containerd.runc.v2\n" Jul 12 00:25:41.675230 env[1813]: time="2025-07-12T00:25:41.675140468Z" level=info msg="StopContainer for \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\" returns successfully" Jul 12 00:25:41.676946 env[1813]: time="2025-07-12T00:25:41.676872568Z" level=info msg="StopPodSandbox for \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\"" Jul 12 00:25:41.677157 env[1813]: time="2025-07-12T00:25:41.677011721Z" level=info msg="Container to stop \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 12 00:25:41.686531 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549-shm.mount: Deactivated successfully. Jul 12 00:25:41.762000 audit[5981]: NETFILTER_CFG table=filter:129 family=2 entries=12 op=nft_register_rule pid=5981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:41.769536 systemd[1]: cri-containerd-38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549.scope: Deactivated successfully. Jul 12 00:25:41.768000 audit: BPF prog-id=205 op=UNLOAD Jul 12 00:25:41.772000 audit: BPF prog-id=208 op=UNLOAD Jul 12 00:25:41.762000 audit[5981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcd69d040 a2=0 a3=1 items=0 ppid=3055 pid=5981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:41.762000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:41.859000 audit[5981]: NETFILTER_CFG table=nat:130 family=2 entries=36 op=nft_register_rule pid=5981 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:41.859000 audit[5981]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffcd69d040 a2=0 a3=1 items=0 ppid=3055 pid=5981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:41.859000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:41.889620 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549-rootfs.mount: Deactivated successfully. Jul 12 00:25:41.908367 env[1813]: time="2025-07-12T00:25:41.908297411Z" level=info msg="shim disconnected" id=38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549 Jul 12 00:25:41.908674 env[1813]: time="2025-07-12T00:25:41.908631684Z" level=warning msg="cleaning up after shim disconnected" id=38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549 namespace=k8s.io Jul 12 00:25:41.908832 env[1813]: time="2025-07-12T00:25:41.908799493Z" level=info msg="cleaning up dead shim" Jul 12 00:25:41.946316 env[1813]: time="2025-07-12T00:25:41.945708291Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:25:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6013 runtime=io.containerd.runc.v2\n" Jul 12 00:25:41.960543 sshd[5946]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:41.963000 audit[5946]: USER_END pid=5946 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.964000 audit[5946]: CRED_DISP pid=5946 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:41.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.156:22-147.75.109.163:36166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:41.969606 systemd[1]: sshd@11-172.31.27.156:22-147.75.109.163:36166.service: Deactivated successfully. Jul 12 00:25:41.971483 systemd[1]: session-12.scope: Deactivated successfully. Jul 12 00:25:41.978157 systemd-logind[1808]: Session 12 logged out. Waiting for processes to exit. Jul 12 00:25:42.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.156:22-147.75.109.163:36168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:42.002222 systemd[1]: Started sshd@12-172.31.27.156:22-147.75.109.163:36168.service. Jul 12 00:25:42.006906 systemd-logind[1808]: Removed session 12. Jul 12 00:25:42.214713 systemd-networkd[1535]: cali5bc4eb33f56: Link DOWN Jul 12 00:25:42.214735 systemd-networkd[1535]: cali5bc4eb33f56: Lost carrier Jul 12 00:25:42.229000 audit[6029]: USER_ACCT pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.231549 sshd[6029]: Accepted publickey for core from 147.75.109.163 port 36168 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:42.232000 audit[6029]: CRED_ACQ pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.232000 audit[6029]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd99d8210 a2=3 a3=1 items=0 ppid=1 pid=6029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:42.232000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:42.235092 sshd[6029]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:42.259871 systemd[1]: Started session-13.scope. Jul 12 00:25:42.261585 systemd-logind[1808]: New session 13 of user core. Jul 12 00:25:42.282000 audit[6029]: USER_START pid=6029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.288000 audit[6052]: CRED_ACQ pid=6052 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.509709 kubelet[2909]: I0712 00:25:42.509629 2909 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:25:42.592000 audit[6066]: NETFILTER_CFG table=filter:131 family=2 entries=55 op=nft_register_rule pid=6066 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:42.645232 kernel: kauditd_printk_skb: 194 callbacks suppressed Jul 12 00:25:42.645435 kernel: audit: type=1300 audit(1752279942.592:1573): arch=c00000b7 syscall=211 success=yes exit=8928 a0=3 a1=ffffd5e581c0 a2=0 a3=ffff85cdffa8 items=0 ppid=4273 pid=6066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:42.592000 audit[6066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8928 a0=3 a1=ffffd5e581c0 a2=0 a3=ffff85cdffa8 items=0 ppid=4273 pid=6066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:42.660181 kernel: audit: type=1327 audit(1752279942.592:1573): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:42.592000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:42.679686 kernel: audit: type=1325 audit(1752279942.642:1574): table=filter:132 family=2 entries=2 op=nft_unregister_chain pid=6066 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:42.642000 audit[6066]: NETFILTER_CFG table=filter:132 family=2 entries=2 op=nft_unregister_chain pid=6066 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:42.692304 kernel: audit: type=1300 audit(1752279942.642:1574): arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd5e581c0 a2=0 a3=ffff85cdffa8 items=0 ppid=4273 pid=6066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:42.642000 audit[6066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd5e581c0 a2=0 a3=ffff85cdffa8 items=0 ppid=4273 pid=6066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:42.717380 kernel: audit: type=1327 audit(1752279942.642:1574): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:42.642000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.212 [INFO][6039] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.213 [INFO][6039] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" iface="eth0" netns="/var/run/netns/cni-0087ca24-8b53-d923-6f08-2751dc07af57" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.213 [INFO][6039] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" iface="eth0" netns="/var/run/netns/cni-0087ca24-8b53-d923-6f08-2751dc07af57" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.224 [INFO][6039] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" after=11.022733ms iface="eth0" netns="/var/run/netns/cni-0087ca24-8b53-d923-6f08-2751dc07af57" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.224 [INFO][6039] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.224 [INFO][6039] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.423 [INFO][6049] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.423 [INFO][6049] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.424 [INFO][6049] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.695 [INFO][6049] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.695 [INFO][6049] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.717 [INFO][6049] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:42.734596 env[1813]: 2025-07-12 00:25:42.722 [INFO][6039] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:25:42.744082 systemd[1]: run-netns-cni\x2d0087ca24\x2d8b53\x2dd923\x2d6f08\x2d2751dc07af57.mount: Deactivated successfully. Jul 12 00:25:42.746976 env[1813]: time="2025-07-12T00:25:42.746901658Z" level=info msg="TearDown network for sandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" successfully" Jul 12 00:25:42.747170 env[1813]: time="2025-07-12T00:25:42.747122375Z" level=info msg="StopPodSandbox for \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" returns successfully" Jul 12 00:25:42.748903 env[1813]: time="2025-07-12T00:25:42.748842623Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" Jul 12 00:25:42.755000 sshd[6029]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:42.759000 audit[6029]: USER_END pid=6029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.774961 systemd[1]: sshd@12-172.31.27.156:22-147.75.109.163:36168.service: Deactivated successfully. Jul 12 00:25:42.776437 systemd[1]: session-13.scope: Deactivated successfully. Jul 12 00:25:42.793311 kernel: audit: type=1106 audit(1752279942.759:1575): pid=6029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.793461 kernel: audit: type=1104 audit(1752279942.759:1576): pid=6029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.759000 audit[6029]: CRED_DISP pid=6029 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:42.786535 systemd-logind[1808]: Session 13 logged out. Waiting for processes to exit. Jul 12 00:25:42.797519 systemd-logind[1808]: Removed session 13. Jul 12 00:25:42.810555 kernel: audit: type=1131 audit(1752279942.774:1577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.156:22-147.75.109.163:36168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:42.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.156:22-147.75.109.163:36168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:42.944 [WARNING][6079] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0", GenerateName:"calico-apiserver-7c994777b8-", Namespace:"calico-apiserver", SelfLink:"", UID:"6252a4f0-29f6-482e-9ad2-072532702264", ResourceVersion:"1234", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c994777b8", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549", Pod:"calico-apiserver-7c994777b8-jznt5", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5bc4eb33f56", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:42.944 [INFO][6079] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:42.945 [INFO][6079] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" iface="eth0" netns="" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:42.945 [INFO][6079] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:42.945 [INFO][6079] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.009 [INFO][6088] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.009 [INFO][6088] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.009 [INFO][6088] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.025 [WARNING][6088] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.025 [INFO][6088] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.029 [INFO][6088] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:43.040028 env[1813]: 2025-07-12 00:25:43.031 [INFO][6079] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:25:43.041368 env[1813]: time="2025-07-12T00:25:43.041299243Z" level=info msg="TearDown network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" successfully" Jul 12 00:25:43.041566 env[1813]: time="2025-07-12T00:25:43.041525193Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" returns successfully" Jul 12 00:25:43.123310 kubelet[2909]: I0712 00:25:43.122784 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6252a4f0-29f6-482e-9ad2-072532702264-calico-apiserver-certs\") pod \"6252a4f0-29f6-482e-9ad2-072532702264\" (UID: \"6252a4f0-29f6-482e-9ad2-072532702264\") " Jul 12 00:25:43.124315 kubelet[2909]: I0712 00:25:43.123860 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-svkvp\" (UniqueName: \"kubernetes.io/projected/6252a4f0-29f6-482e-9ad2-072532702264-kube-api-access-svkvp\") pod \"6252a4f0-29f6-482e-9ad2-072532702264\" (UID: \"6252a4f0-29f6-482e-9ad2-072532702264\") " Jul 12 00:25:43.133000 audit[6095]: NETFILTER_CFG table=filter:133 family=2 entries=12 op=nft_register_rule pid=6095 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:43.133000 audit[6095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd11488a0 a2=0 a3=1 items=0 ppid=3055 pid=6095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:43.156155 kernel: audit: type=1325 audit(1752279943.133:1578): table=filter:133 family=2 entries=12 op=nft_register_rule pid=6095 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:43.156392 kernel: audit: type=1300 audit(1752279943.133:1578): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd11488a0 a2=0 a3=1 items=0 ppid=3055 pid=6095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:43.165896 kubelet[2909]: I0712 00:25:43.165833 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6252a4f0-29f6-482e-9ad2-072532702264-kube-api-access-svkvp" (OuterVolumeSpecName: "kube-api-access-svkvp") pod "6252a4f0-29f6-482e-9ad2-072532702264" (UID: "6252a4f0-29f6-482e-9ad2-072532702264"). InnerVolumeSpecName "kube-api-access-svkvp". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 12 00:25:43.172921 systemd[1]: var-lib-kubelet-pods-6252a4f0\x2d29f6\x2d482e\x2d9ad2\x2d072532702264-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsvkvp.mount: Deactivated successfully. Jul 12 00:25:43.173165 systemd[1]: var-lib-kubelet-pods-6252a4f0\x2d29f6\x2d482e\x2d9ad2\x2d072532702264-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 12 00:25:43.175595 kubelet[2909]: I0712 00:25:43.175518 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6252a4f0-29f6-482e-9ad2-072532702264-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "6252a4f0-29f6-482e-9ad2-072532702264" (UID: "6252a4f0-29f6-482e-9ad2-072532702264"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 12 00:25:43.133000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:43.174000 audit[6095]: NETFILTER_CFG table=nat:134 family=2 entries=36 op=nft_register_rule pid=6095 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:43.174000 audit[6095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffd11488a0 a2=0 a3=1 items=0 ppid=3055 pid=6095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:43.174000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:43.231809 kubelet[2909]: I0712 00:25:43.231727 2909 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6252a4f0-29f6-482e-9ad2-072532702264-calico-apiserver-certs\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:43.231809 kubelet[2909]: I0712 00:25:43.231797 2909 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-svkvp\" (UniqueName: \"kubernetes.io/projected/6252a4f0-29f6-482e-9ad2-072532702264-kube-api-access-svkvp\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:43.323000 audit[5699]: AVC avc: denied { watch } for pid=5699 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_25_35.3458376990/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c874,c925 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c874,c925 tclass=file permissive=0 Jul 12 00:25:43.323000 audit[5699]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001f9c960 a2=fc6 a3=0 items=0 ppid=5635 pid=5699 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c874,c925 key=(null) Jul 12 00:25:43.323000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:25:43.474274 env[1813]: time="2025-07-12T00:25:43.474169448Z" level=info msg="StopContainer for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" with timeout 30 (s)" Jul 12 00:25:43.475275 env[1813]: time="2025-07-12T00:25:43.474872906Z" level=info msg="Stop container \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" with signal terminated" Jul 12 00:25:43.541018 systemd[1]: Removed slice kubepods-besteffort-pod6252a4f0_29f6_482e_9ad2_072532702264.slice. Jul 12 00:25:43.611343 systemd[1]: cri-containerd-301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9.scope: Deactivated successfully. Jul 12 00:25:43.612135 systemd[1]: cri-containerd-301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9.scope: Consumed 1.579s CPU time. Jul 12 00:25:43.610000 audit: BPF prog-id=211 op=UNLOAD Jul 12 00:25:43.615000 audit: BPF prog-id=214 op=UNLOAD Jul 12 00:25:43.654000 audit[6106]: NETFILTER_CFG table=filter:135 family=2 entries=12 op=nft_register_rule pid=6106 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:43.654000 audit[6106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe304e610 a2=0 a3=1 items=0 ppid=3055 pid=6106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:43.654000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:43.674000 audit[6106]: NETFILTER_CFG table=nat:136 family=2 entries=40 op=nft_register_chain pid=6106 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:43.674000 audit[6106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13124 a0=3 a1=ffffe304e610 a2=0 a3=1 items=0 ppid=3055 pid=6106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:43.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:43.709728 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9-rootfs.mount: Deactivated successfully. Jul 12 00:25:43.713975 env[1813]: time="2025-07-12T00:25:43.713886652Z" level=info msg="shim disconnected" id=301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9 Jul 12 00:25:43.713975 env[1813]: time="2025-07-12T00:25:43.713964400Z" level=warning msg="cleaning up after shim disconnected" id=301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9 namespace=k8s.io Jul 12 00:25:43.714365 env[1813]: time="2025-07-12T00:25:43.713986973Z" level=info msg="cleaning up dead shim" Jul 12 00:25:43.769155 env[1813]: time="2025-07-12T00:25:43.767928708Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:25:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6118 runtime=io.containerd.runc.v2\n" Jul 12 00:25:43.876940 env[1813]: time="2025-07-12T00:25:43.876785220Z" level=info msg="StopContainer for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" returns successfully" Jul 12 00:25:43.885322 env[1813]: time="2025-07-12T00:25:43.877606831Z" level=info msg="StopPodSandbox for \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\"" Jul 12 00:25:43.885322 env[1813]: time="2025-07-12T00:25:43.877716068Z" level=info msg="Container to stop \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 12 00:25:43.884623 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad-shm.mount: Deactivated successfully. Jul 12 00:25:43.909728 systemd[1]: cri-containerd-dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad.scope: Deactivated successfully. Jul 12 00:25:43.909000 audit: BPF prog-id=145 op=UNLOAD Jul 12 00:25:43.913000 audit: BPF prog-id=148 op=UNLOAD Jul 12 00:25:43.956891 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad-rootfs.mount: Deactivated successfully. Jul 12 00:25:43.960908 env[1813]: time="2025-07-12T00:25:43.960842714Z" level=info msg="shim disconnected" id=dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad Jul 12 00:25:43.961775 env[1813]: time="2025-07-12T00:25:43.961712806Z" level=warning msg="cleaning up after shim disconnected" id=dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad namespace=k8s.io Jul 12 00:25:43.961775 env[1813]: time="2025-07-12T00:25:43.961767298Z" level=info msg="cleaning up dead shim" Jul 12 00:25:43.995173 env[1813]: time="2025-07-12T00:25:43.995078325Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:25:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6149 runtime=io.containerd.runc.v2\n" Jul 12 00:25:44.187359 systemd-networkd[1535]: calia5dbed22c2d: Link DOWN Jul 12 00:25:44.187373 systemd-networkd[1535]: calia5dbed22c2d: Lost carrier Jul 12 00:25:44.270000 audit[6193]: NETFILTER_CFG table=filter:137 family=2 entries=39 op=nft_register_rule pid=6193 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:44.270000 audit[6193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4224 a0=3 a1=ffffcd884730 a2=0 a3=ffffae893fa8 items=0 ppid=4273 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.270000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:44.271000 audit[6193]: NETFILTER_CFG table=filter:138 family=2 entries=2 op=nft_unregister_chain pid=6193 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:44.271000 audit[6193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcd884730 a2=0 a3=ffffae893fa8 items=0 ppid=4273 pid=6193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.271000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.178 [INFO][6173] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.179 [INFO][6173] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" iface="eth0" netns="/var/run/netns/cni-18e2c964-6150-0733-3d72-61b6f7dc4054" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.179 [INFO][6173] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" iface="eth0" netns="/var/run/netns/cni-18e2c964-6150-0733-3d72-61b6f7dc4054" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.195 [INFO][6173] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" after=16.391764ms iface="eth0" netns="/var/run/netns/cni-18e2c964-6150-0733-3d72-61b6f7dc4054" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.195 [INFO][6173] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.195 [INFO][6173] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.277 [INFO][6186] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.284 [INFO][6186] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.284 [INFO][6186] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.364 [INFO][6186] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.364 [INFO][6186] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.367 [INFO][6186] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:44.373488 env[1813]: 2025-07-12 00:25:44.370 [INFO][6173] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:25:44.380939 systemd[1]: run-netns-cni\x2d18e2c964\x2d6150\x2d0733\x2d3d72\x2d61b6f7dc4054.mount: Deactivated successfully. Jul 12 00:25:44.382426 env[1813]: time="2025-07-12T00:25:44.382355092Z" level=info msg="TearDown network for sandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" successfully" Jul 12 00:25:44.383380 env[1813]: time="2025-07-12T00:25:44.383325386Z" level=info msg="StopPodSandbox for \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" returns successfully" Jul 12 00:25:44.434625 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3186800168.mount: Deactivated successfully. Jul 12 00:25:44.449021 kubelet[2909]: I0712 00:25:44.448852 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-l4xrq\" (UniqueName: \"kubernetes.io/projected/974e5eee-e5f3-46db-a740-7e56db54868a-kube-api-access-l4xrq\") pod \"974e5eee-e5f3-46db-a740-7e56db54868a\" (UID: \"974e5eee-e5f3-46db-a740-7e56db54868a\") " Jul 12 00:25:44.449963 kubelet[2909]: I0712 00:25:44.449915 2909 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/974e5eee-e5f3-46db-a740-7e56db54868a-calico-apiserver-certs\") pod \"974e5eee-e5f3-46db-a740-7e56db54868a\" (UID: \"974e5eee-e5f3-46db-a740-7e56db54868a\") " Jul 12 00:25:44.452081 env[1813]: time="2025-07-12T00:25:44.451611780Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:44.464429 env[1813]: time="2025-07-12T00:25:44.461585552Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:44.482450 env[1813]: time="2025-07-12T00:25:44.470520570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:44.482450 env[1813]: time="2025-07-12T00:25:44.476002024Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:44.482450 env[1813]: time="2025-07-12T00:25:44.479140357Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 12 00:25:44.481465 systemd[1]: var-lib-kubelet-pods-974e5eee\x2de5f3\x2d46db\x2da740\x2d7e56db54868a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dl4xrq.mount: Deactivated successfully. Jul 12 00:25:44.482909 kubelet[2909]: I0712 00:25:44.475570 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/974e5eee-e5f3-46db-a740-7e56db54868a-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "974e5eee-e5f3-46db-a740-7e56db54868a" (UID: "974e5eee-e5f3-46db-a740-7e56db54868a"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 12 00:25:44.483464 kubelet[2909]: I0712 00:25:44.483406 2909 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/974e5eee-e5f3-46db-a740-7e56db54868a-kube-api-access-l4xrq" (OuterVolumeSpecName: "kube-api-access-l4xrq") pod "974e5eee-e5f3-46db-a740-7e56db54868a" (UID: "974e5eee-e5f3-46db-a740-7e56db54868a"). InnerVolumeSpecName "kube-api-access-l4xrq". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 12 00:25:44.497828 env[1813]: time="2025-07-12T00:25:44.487427464Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 12 00:25:44.497828 env[1813]: time="2025-07-12T00:25:44.490977221Z" level=info msg="CreateContainer within sandbox \"a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 12 00:25:44.501162 systemd[1]: var-lib-kubelet-pods-974e5eee\x2de5f3\x2d46db\x2da740\x2d7e56db54868a-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 12 00:25:44.520000 audit[6199]: NETFILTER_CFG table=filter:139 family=2 entries=12 op=nft_register_rule pid=6199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:44.520000 audit[6199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffeb31f3a0 a2=0 a3=1 items=0 ppid=3055 pid=6199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.520000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:44.527139 kubelet[2909]: I0712 00:25:44.527098 2909 scope.go:117] "RemoveContainer" containerID="301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9" Jul 12 00:25:44.532000 audit[6199]: NETFILTER_CFG table=nat:140 family=2 entries=40 op=nft_unregister_chain pid=6199 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:44.534806 env[1813]: time="2025-07-12T00:25:44.534727041Z" level=info msg="CreateContainer within sandbox \"a9bf3cda11cbeded6013645b4fdf8c659b24919d82320d158e80e1fe7a57c357\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"fe71290ff5395cd9a4da08a843e462eea5146696e488adbfa78c1669ce0cf199\"" Jul 12 00:25:44.532000 audit[6199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11364 a0=3 a1=ffffeb31f3a0 a2=0 a3=1 items=0 ppid=3055 pid=6199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.532000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:44.543818 env[1813]: time="2025-07-12T00:25:44.543754987Z" level=info msg="RemoveContainer for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\"" Jul 12 00:25:44.546892 env[1813]: time="2025-07-12T00:25:44.544152624Z" level=info msg="StartContainer for \"fe71290ff5395cd9a4da08a843e462eea5146696e488adbfa78c1669ce0cf199\"" Jul 12 00:25:44.553799 kubelet[2909]: I0712 00:25:44.553713 2909 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/974e5eee-e5f3-46db-a740-7e56db54868a-calico-apiserver-certs\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:44.553799 kubelet[2909]: I0712 00:25:44.553789 2909 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-l4xrq\" (UniqueName: \"kubernetes.io/projected/974e5eee-e5f3-46db-a740-7e56db54868a-kube-api-access-l4xrq\") on node \"ip-172-31-27-156\" DevicePath \"\"" Jul 12 00:25:44.557811 systemd[1]: Removed slice kubepods-besteffort-pod974e5eee_e5f3_46db_a740_7e56db54868a.slice. Jul 12 00:25:44.558057 systemd[1]: kubepods-besteffort-pod974e5eee_e5f3_46db_a740_7e56db54868a.slice: Consumed 1.652s CPU time. Jul 12 00:25:44.581015 env[1813]: time="2025-07-12T00:25:44.580915430Z" level=info msg="RemoveContainer for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" returns successfully" Jul 12 00:25:44.585522 kubelet[2909]: I0712 00:25:44.585450 2909 scope.go:117] "RemoveContainer" containerID="301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9" Jul 12 00:25:44.587410 env[1813]: time="2025-07-12T00:25:44.587106763Z" level=error msg="ContainerStatus for \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\": not found" Jul 12 00:25:44.589027 kubelet[2909]: E0712 00:25:44.588841 2909 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\": not found" containerID="301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9" Jul 12 00:25:44.589027 kubelet[2909]: I0712 00:25:44.588934 2909 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9"} err="failed to get container status \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\": rpc error: code = NotFound desc = an error occurred when try to find container \"301b6e7dad363a32b29c1c5be36ae7f3d5518e900abffb4fd173fd0ef38353b9\": not found" Jul 12 00:25:44.602014 kubelet[2909]: I0712 00:25:44.601960 2909 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6252a4f0-29f6-482e-9ad2-072532702264" path="/var/lib/kubelet/pods/6252a4f0-29f6-482e-9ad2-072532702264/volumes" Jul 12 00:25:44.603086 kubelet[2909]: I0712 00:25:44.603032 2909 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="974e5eee-e5f3-46db-a740-7e56db54868a" path="/var/lib/kubelet/pods/974e5eee-e5f3-46db-a740-7e56db54868a/volumes" Jul 12 00:25:44.625357 systemd[1]: Started cri-containerd-fe71290ff5395cd9a4da08a843e462eea5146696e488adbfa78c1669ce0cf199.scope. Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.684000 audit: BPF prog-id=246 op=LOAD Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=4385 pid=6208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665373132393066663533393563643961346461303861383433653436 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=4385 pid=6208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665373132393066663533393563643961346461303861383433653436 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.686000 audit: BPF prog-id=247 op=LOAD Jul 12 00:25:44.686000 audit[6208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=4385 pid=6208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665373132393066663533393563643961346461303861383433653436 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit: BPF prog-id=248 op=LOAD Jul 12 00:25:44.687000 audit[6208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=4385 pid=6208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665373132393066663533393563643961346461303861383433653436 Jul 12 00:25:44.687000 audit: BPF prog-id=248 op=UNLOAD Jul 12 00:25:44.687000 audit: BPF prog-id=247 op=UNLOAD Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { perfmon } for pid=6208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit[6208]: AVC avc: denied { bpf } for pid=6208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:44.687000 audit: BPF prog-id=249 op=LOAD Jul 12 00:25:44.687000 audit[6208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=4385 pid=6208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:44.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665373132393066663533393563643961346461303861383433653436 Jul 12 00:25:44.734582 env[1813]: time="2025-07-12T00:25:44.734420670Z" level=info msg="StartContainer for \"fe71290ff5395cd9a4da08a843e462eea5146696e488adbfa78c1669ce0cf199\" returns successfully" Jul 12 00:25:45.850000 audit[6242]: NETFILTER_CFG table=filter:141 family=2 entries=11 op=nft_register_rule pid=6242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:45.850000 audit[6242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff775d950 a2=0 a3=1 items=0 ppid=3055 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:45.850000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:45.856000 audit[6242]: NETFILTER_CFG table=nat:142 family=2 entries=29 op=nft_register_chain pid=6242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:45.856000 audit[6242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff775d950 a2=0 a3=1 items=0 ppid=3055 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:45.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:46.115943 env[1813]: time="2025-07-12T00:25:46.115771615Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:46.119710 env[1813]: time="2025-07-12T00:25:46.119641178Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:46.122151 env[1813]: time="2025-07-12T00:25:46.122100169Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:46.124358 env[1813]: time="2025-07-12T00:25:46.124306412Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:46.125542 env[1813]: time="2025-07-12T00:25:46.125471460Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 12 00:25:46.132948 env[1813]: time="2025-07-12T00:25:46.132876465Z" level=info msg="CreateContainer within sandbox \"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 12 00:25:46.169331 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount529210603.mount: Deactivated successfully. Jul 12 00:25:46.179401 env[1813]: time="2025-07-12T00:25:46.179314638Z" level=info msg="CreateContainer within sandbox \"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"cf8476abbce8879fbf67f7ae52d6fee9e8dbdb90c0253b4b2b4a0e557577a7b3\"" Jul 12 00:25:46.180665 env[1813]: time="2025-07-12T00:25:46.180586428Z" level=info msg="StartContainer for \"cf8476abbce8879fbf67f7ae52d6fee9e8dbdb90c0253b4b2b4a0e557577a7b3\"" Jul 12 00:25:46.248100 systemd[1]: Started cri-containerd-cf8476abbce8879fbf67f7ae52d6fee9e8dbdb90c0253b4b2b4a0e557577a7b3.scope. Jul 12 00:25:46.295000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.295000 audit[6252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5168 pid=6252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:46.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366383437366162626365383837396662663637663761653532643666 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.296000 audit: BPF prog-id=250 op=LOAD Jul 12 00:25:46.296000 audit[6252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5168 pid=6252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:46.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366383437366162626365383837396662663637663761653532643666 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.298000 audit: BPF prog-id=251 op=LOAD Jul 12 00:25:46.298000 audit[6252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5168 pid=6252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:46.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366383437366162626365383837396662663637663761653532643666 Jul 12 00:25:46.299000 audit: BPF prog-id=251 op=UNLOAD Jul 12 00:25:46.300000 audit: BPF prog-id=250 op=UNLOAD Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { perfmon } for pid=6252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit[6252]: AVC avc: denied { bpf } for pid=6252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:46.300000 audit: BPF prog-id=252 op=LOAD Jul 12 00:25:46.300000 audit[6252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5168 pid=6252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:46.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366383437366162626365383837396662663637663761653532643666 Jul 12 00:25:46.338514 env[1813]: time="2025-07-12T00:25:46.338381063Z" level=info msg="StartContainer for \"cf8476abbce8879fbf67f7ae52d6fee9e8dbdb90c0253b4b2b4a0e557577a7b3\" returns successfully" Jul 12 00:25:46.381179 systemd[1]: run-containerd-runc-k8s.io-cf8476abbce8879fbf67f7ae52d6fee9e8dbdb90c0253b4b2b4a0e557577a7b3-runc.SWPYwm.mount: Deactivated successfully. Jul 12 00:25:46.585206 kubelet[2909]: I0712 00:25:46.585089 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-nsj26" podStartSLOduration=33.208021318 podStartE2EDuration="52.585066032s" podCreationTimestamp="2025-07-12 00:24:54 +0000 UTC" firstStartedPulling="2025-07-12 00:25:26.75063395 +0000 UTC m=+64.464743281" lastFinishedPulling="2025-07-12 00:25:46.127678676 +0000 UTC m=+83.841787995" observedRunningTime="2025-07-12 00:25:46.585010747 +0000 UTC m=+84.299120102" watchObservedRunningTime="2025-07-12 00:25:46.585066032 +0000 UTC m=+84.299175447" Jul 12 00:25:46.585932 kubelet[2909]: I0712 00:25:46.585829 2909 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7db5458c9c-xlrx4" podStartSLOduration=3.520198836 podStartE2EDuration="27.585810906s" podCreationTimestamp="2025-07-12 00:25:19 +0000 UTC" firstStartedPulling="2025-07-12 00:25:20.419797981 +0000 UTC m=+58.133907312" lastFinishedPulling="2025-07-12 00:25:44.485410039 +0000 UTC m=+82.199519382" observedRunningTime="2025-07-12 00:25:45.574276518 +0000 UTC m=+83.288385885" watchObservedRunningTime="2025-07-12 00:25:46.585810906 +0000 UTC m=+84.299920237" Jul 12 00:25:46.798953 kubelet[2909]: I0712 00:25:46.798907 2909 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 12 00:25:46.799174 kubelet[2909]: I0712 00:25:46.798964 2909 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 12 00:25:47.786595 systemd[1]: Started sshd@13-172.31.27.156:22-147.75.109.163:55484.service. Jul 12 00:25:47.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.156:22-147.75.109.163:55484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:47.789925 kernel: kauditd_printk_skb: 135 callbacks suppressed Jul 12 00:25:47.790091 kernel: audit: type=1130 audit(1752279947.786:1617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.156:22-147.75.109.163:55484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:47.984000 audit[6283]: USER_ACCT pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:47.986070 sshd[6283]: Accepted publickey for core from 147.75.109.163 port 55484 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:47.990139 sshd[6283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:47.987000 audit[6283]: CRED_ACQ pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.006344 kernel: audit: type=1101 audit(1752279947.984:1618): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.006545 kernel: audit: type=1103 audit(1752279947.987:1619): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.014823 kernel: audit: type=1006 audit(1752279947.987:1620): pid=6283 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 12 00:25:48.014973 kernel: audit: type=1300 audit(1752279947.987:1620): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbcea270 a2=3 a3=1 items=0 ppid=1 pid=6283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:47.987000 audit[6283]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbcea270 a2=3 a3=1 items=0 ppid=1 pid=6283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:48.018151 systemd[1]: Started session-14.scope. Jul 12 00:25:48.021304 systemd-logind[1808]: New session 14 of user core. Jul 12 00:25:47.987000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:48.029712 kernel: audit: type=1327 audit(1752279947.987:1620): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:48.043000 audit[6283]: USER_START pid=6283 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.047000 audit[6285]: CRED_ACQ pid=6285 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.069225 kernel: audit: type=1105 audit(1752279948.043:1621): pid=6283 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.069400 kernel: audit: type=1103 audit(1752279948.047:1622): pid=6285 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.392590 sshd[6283]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:48.394000 audit[6283]: USER_END pid=6283 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.398824 systemd[1]: session-14.scope: Deactivated successfully. Jul 12 00:25:48.400397 systemd[1]: sshd@13-172.31.27.156:22-147.75.109.163:55484.service: Deactivated successfully. Jul 12 00:25:48.394000 audit[6283]: CRED_DISP pid=6283 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.408703 systemd-logind[1808]: Session 14 logged out. Waiting for processes to exit. Jul 12 00:25:48.418342 kernel: audit: type=1106 audit(1752279948.394:1623): pid=6283 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.418520 kernel: audit: type=1104 audit(1752279948.394:1624): pid=6283 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.156:22-147.75.109.163:55484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:48.421585 systemd-logind[1808]: Removed session 14. Jul 12 00:25:53.421749 systemd[1]: Started sshd@14-172.31.27.156:22-147.75.109.163:55496.service. Jul 12 00:25:53.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.156:22-147.75.109.163:55496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:53.425133 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:25:53.425284 kernel: audit: type=1130 audit(1752279953.421:1626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.156:22-147.75.109.163:55496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:53.603000 audit[6323]: USER_ACCT pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.611399 sshd[6323]: Accepted publickey for core from 147.75.109.163 port 55496 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:53.610000 audit[6323]: CRED_ACQ pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.615931 sshd[6323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:53.625274 kernel: audit: type=1101 audit(1752279953.603:1627): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.625415 kernel: audit: type=1103 audit(1752279953.610:1628): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.631571 kernel: audit: type=1006 audit(1752279953.610:1629): pid=6323 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 12 00:25:53.637874 systemd[1]: Started session-15.scope. Jul 12 00:25:53.610000 audit[6323]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc0ad270 a2=3 a3=1 items=0 ppid=1 pid=6323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:53.640378 systemd-logind[1808]: New session 15 of user core. Jul 12 00:25:53.649516 kernel: audit: type=1300 audit(1752279953.610:1629): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc0ad270 a2=3 a3=1 items=0 ppid=1 pid=6323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:53.610000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:53.654520 kernel: audit: type=1327 audit(1752279953.610:1629): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:53.657000 audit[6323]: USER_START pid=6323 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.671615 kernel: audit: type=1105 audit(1752279953.657:1630): pid=6323 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.671768 kernel: audit: type=1103 audit(1752279953.670:1631): pid=6325 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.670000 audit[6325]: CRED_ACQ pid=6325 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.935932 sshd[6323]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:53.936000 audit[6323]: USER_END pid=6323 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.936000 audit[6323]: CRED_DISP pid=6323 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.950393 systemd[1]: sshd@14-172.31.27.156:22-147.75.109.163:55496.service: Deactivated successfully. Jul 12 00:25:53.951709 systemd[1]: session-15.scope: Deactivated successfully. Jul 12 00:25:53.959228 kernel: audit: type=1106 audit(1752279953.936:1632): pid=6323 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.959376 kernel: audit: type=1104 audit(1752279953.936:1633): pid=6323 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:53.959598 systemd-logind[1808]: Session 15 logged out. Waiting for processes to exit. Jul 12 00:25:53.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.156:22-147.75.109.163:55496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:53.961402 systemd-logind[1808]: Removed session 15. Jul 12 00:25:58.974859 systemd[1]: Started sshd@15-172.31.27.156:22-147.75.109.163:59104.service. Jul 12 00:25:58.988499 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:25:58.988673 kernel: audit: type=1130 audit(1752279958.975:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.156:22-147.75.109.163:59104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:58.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.156:22-147.75.109.163:59104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:59.174000 audit[6339]: USER_ACCT pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.186691 sshd[6339]: Accepted publickey for core from 147.75.109.163 port 59104 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:59.188000 audit[6339]: CRED_ACQ pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.199966 kernel: audit: type=1101 audit(1752279959.174:1636): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.200125 kernel: audit: type=1103 audit(1752279959.188:1637): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.190787 sshd[6339]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:59.210463 kernel: audit: type=1006 audit(1752279959.188:1638): pid=6339 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 12 00:25:59.209497 systemd[1]: Started session-16.scope. Jul 12 00:25:59.209725 systemd-logind[1808]: New session 16 of user core. Jul 12 00:25:59.188000 audit[6339]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffde8a810 a2=3 a3=1 items=0 ppid=1 pid=6339 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:59.188000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:59.228235 kernel: audit: type=1300 audit(1752279959.188:1638): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffde8a810 a2=3 a3=1 items=0 ppid=1 pid=6339 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:59.228398 kernel: audit: type=1327 audit(1752279959.188:1638): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:59.236000 audit[6339]: USER_START pid=6339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.251000 audit[6341]: CRED_ACQ pid=6341 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.266089 kernel: audit: type=1105 audit(1752279959.236:1639): pid=6339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.266258 kernel: audit: type=1103 audit(1752279959.251:1640): pid=6341 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.602796 sshd[6339]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:59.604000 audit[6339]: USER_END pid=6339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.608720 systemd[1]: session-16.scope: Deactivated successfully. Jul 12 00:25:59.610663 systemd[1]: sshd@15-172.31.27.156:22-147.75.109.163:59104.service: Deactivated successfully. Jul 12 00:25:59.604000 audit[6339]: CRED_DISP pid=6339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.619000 systemd-logind[1808]: Session 16 logged out. Waiting for processes to exit. Jul 12 00:25:59.628587 kernel: audit: type=1106 audit(1752279959.604:1641): pid=6339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.628758 kernel: audit: type=1104 audit(1752279959.604:1642): pid=6339 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:59.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.156:22-147.75.109.163:59104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:59.631798 systemd-logind[1808]: Removed session 16. Jul 12 00:26:04.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.156:22-147.75.109.163:59112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:04.633680 systemd[1]: Started sshd@16-172.31.27.156:22-147.75.109.163:59112.service. Jul 12 00:26:04.636063 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:26:04.636173 kernel: audit: type=1130 audit(1752279964.632:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.156:22-147.75.109.163:59112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:04.817000 audit[6354]: USER_ACCT pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.821349 sshd[6354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:04.822989 sshd[6354]: Accepted publickey for core from 147.75.109.163 port 59112 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:04.817000 audit[6354]: CRED_ACQ pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.839374 kernel: audit: type=1101 audit(1752279964.817:1645): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.839730 kernel: audit: type=1103 audit(1752279964.817:1646): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.845973 kernel: audit: type=1006 audit(1752279964.817:1647): pid=6354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 12 00:26:04.817000 audit[6354]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf6861e0 a2=3 a3=1 items=0 ppid=1 pid=6354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:04.862232 kernel: audit: type=1300 audit(1752279964.817:1647): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf6861e0 a2=3 a3=1 items=0 ppid=1 pid=6354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:04.862362 kernel: audit: type=1327 audit(1752279964.817:1647): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:04.817000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:04.864915 systemd-logind[1808]: New session 17 of user core. Jul 12 00:26:04.865033 systemd[1]: Started session-17.scope. Jul 12 00:26:04.875000 audit[6354]: USER_START pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.890120 kernel: audit: type=1105 audit(1752279964.875:1648): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.890400 kernel: audit: type=1103 audit(1752279964.887:1649): pid=6356 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:04.887000 audit[6356]: CRED_ACQ pid=6356 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.144967 sshd[6354]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:05.147000 audit[6354]: USER_END pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.161157 systemd[1]: sshd@16-172.31.27.156:22-147.75.109.163:59112.service: Deactivated successfully. Jul 12 00:26:05.162532 systemd[1]: session-17.scope: Deactivated successfully. Jul 12 00:26:05.147000 audit[6354]: CRED_DISP pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.175158 kernel: audit: type=1106 audit(1752279965.147:1650): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.175323 kernel: audit: type=1104 audit(1752279965.147:1651): pid=6354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.174228 systemd-logind[1808]: Session 17 logged out. Waiting for processes to exit. Jul 12 00:26:05.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.156:22-147.75.109.163:59112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:05.178567 systemd[1]: Started sshd@17-172.31.27.156:22-147.75.109.163:59120.service. Jul 12 00:26:05.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.156:22-147.75.109.163:59120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:05.188742 systemd-logind[1808]: Removed session 17. Jul 12 00:26:05.350000 audit[6366]: USER_ACCT pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.352374 sshd[6366]: Accepted publickey for core from 147.75.109.163 port 59120 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:05.352000 audit[6366]: CRED_ACQ pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.353000 audit[6366]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6db6fd0 a2=3 a3=1 items=0 ppid=1 pid=6366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:05.353000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:05.355097 sshd[6366]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:05.363400 systemd-logind[1808]: New session 18 of user core. Jul 12 00:26:05.364708 systemd[1]: Started session-18.scope. Jul 12 00:26:05.373000 audit[6366]: USER_START pid=6366 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:05.376000 audit[6368]: CRED_ACQ pid=6368 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.001614 sshd[6366]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:06.003000 audit[6366]: USER_END pid=6366 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.003000 audit[6366]: CRED_DISP pid=6366 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.007747 systemd-logind[1808]: Session 18 logged out. Waiting for processes to exit. Jul 12 00:26:06.009222 systemd[1]: sshd@17-172.31.27.156:22-147.75.109.163:59120.service: Deactivated successfully. Jul 12 00:26:06.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.156:22-147.75.109.163:59120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:06.010889 systemd[1]: session-18.scope: Deactivated successfully. Jul 12 00:26:06.012693 systemd-logind[1808]: Removed session 18. Jul 12 00:26:06.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.156:22-147.75.109.163:50732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:06.030616 systemd[1]: Started sshd@18-172.31.27.156:22-147.75.109.163:50732.service. Jul 12 00:26:06.217000 audit[6376]: USER_ACCT pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.219530 sshd[6376]: Accepted publickey for core from 147.75.109.163 port 50732 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:06.220000 audit[6376]: CRED_ACQ pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.220000 audit[6376]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc288e690 a2=3 a3=1 items=0 ppid=1 pid=6376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:06.220000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:06.223434 sshd[6376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:06.233795 systemd-logind[1808]: New session 19 of user core. Jul 12 00:26:06.234889 systemd[1]: Started session-19.scope. Jul 12 00:26:06.246000 audit[6376]: USER_START pid=6376 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.249000 audit[6378]: CRED_ACQ pid=6378 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:07.711000 audit[6389]: NETFILTER_CFG table=filter:143 family=2 entries=22 op=nft_register_rule pid=6389 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:07.713877 sshd[6376]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:07.711000 audit[6389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffca877050 a2=0 a3=1 items=0 ppid=3055 pid=6389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:07.711000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:07.715000 audit[6376]: USER_END pid=6376 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:07.716000 audit[6376]: CRED_DISP pid=6376 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:07.720233 systemd-logind[1808]: Session 19 logged out. Waiting for processes to exit. Jul 12 00:26:07.721657 systemd[1]: sshd@18-172.31.27.156:22-147.75.109.163:50732.service: Deactivated successfully. Jul 12 00:26:07.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.156:22-147.75.109.163:50732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:07.723885 systemd[1]: session-19.scope: Deactivated successfully. Jul 12 00:26:07.723000 audit[6389]: NETFILTER_CFG table=nat:144 family=2 entries=24 op=nft_register_rule pid=6389 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:07.723000 audit[6389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffca877050 a2=0 a3=1 items=0 ppid=3055 pid=6389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:07.723000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:07.726186 systemd-logind[1808]: Removed session 19. Jul 12 00:26:07.748581 systemd[1]: Started sshd@19-172.31.27.156:22-147.75.109.163:50734.service. Jul 12 00:26:07.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.156:22-147.75.109.163:50734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:07.797000 audit[6395]: NETFILTER_CFG table=filter:145 family=2 entries=34 op=nft_register_rule pid=6395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:07.797000 audit[6395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffc8cea840 a2=0 a3=1 items=0 ppid=3055 pid=6395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:07.797000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:07.803000 audit[6395]: NETFILTER_CFG table=nat:146 family=2 entries=24 op=nft_register_rule pid=6395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:07.803000 audit[6395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffc8cea840 a2=0 a3=1 items=0 ppid=3055 pid=6395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:07.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:07.926000 audit[6393]: USER_ACCT pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:07.927879 sshd[6393]: Accepted publickey for core from 147.75.109.163 port 50734 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:07.928000 audit[6393]: CRED_ACQ pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:07.929000 audit[6393]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd7a4d40 a2=3 a3=1 items=0 ppid=1 pid=6393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:07.929000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:07.931749 sshd[6393]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:07.941234 systemd[1]: Started session-20.scope. Jul 12 00:26:07.942328 systemd-logind[1808]: New session 20 of user core. Jul 12 00:26:07.953000 audit[6393]: USER_START pid=6393 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:07.955000 audit[6396]: CRED_ACQ pid=6396 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.556555 sshd[6393]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:08.559000 audit[6393]: USER_END pid=6393 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.559000 audit[6393]: CRED_DISP pid=6393 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.156:22-147.75.109.163:50734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:08.564542 systemd[1]: sshd@19-172.31.27.156:22-147.75.109.163:50734.service: Deactivated successfully. Jul 12 00:26:08.567025 systemd[1]: session-20.scope: Deactivated successfully. Jul 12 00:26:08.569668 systemd-logind[1808]: Session 20 logged out. Waiting for processes to exit. Jul 12 00:26:08.572433 systemd-logind[1808]: Removed session 20. Jul 12 00:26:08.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.156:22-147.75.109.163:50742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:08.589461 systemd[1]: Started sshd@20-172.31.27.156:22-147.75.109.163:50742.service. Jul 12 00:26:08.758000 audit[6404]: USER_ACCT pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.759697 sshd[6404]: Accepted publickey for core from 147.75.109.163 port 50742 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:08.760000 audit[6404]: CRED_ACQ pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.760000 audit[6404]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff124a9c0 a2=3 a3=1 items=0 ppid=1 pid=6404 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:08.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:08.762570 sshd[6404]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:08.774486 systemd-logind[1808]: New session 21 of user core. Jul 12 00:26:08.775491 systemd[1]: Started session-21.scope. Jul 12 00:26:08.785000 audit[6404]: USER_START pid=6404 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.788000 audit[6412]: CRED_ACQ pid=6412 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:08.853999 systemd[1]: run-containerd-runc-k8s.io-6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371-runc.uui6Sg.mount: Deactivated successfully. Jul 12 00:26:09.087000 audit[6440]: NETFILTER_CFG table=filter:147 family=2 entries=33 op=nft_register_rule pid=6440 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:09.087000 audit[6440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffddbbe700 a2=0 a3=1 items=0 ppid=3055 pid=6440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:09.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:09.096000 audit[6440]: NETFILTER_CFG table=nat:148 family=2 entries=31 op=nft_register_chain pid=6440 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:09.096000 audit[6440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffddbbe700 a2=0 a3=1 items=0 ppid=3055 pid=6440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:09.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:09.106930 sshd[6404]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:09.108000 audit[6404]: USER_END pid=6404 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:09.108000 audit[6404]: CRED_DISP pid=6404 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:09.112933 systemd[1]: sshd@20-172.31.27.156:22-147.75.109.163:50742.service: Deactivated successfully. Jul 12 00:26:09.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.156:22-147.75.109.163:50742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:09.114542 systemd[1]: session-21.scope: Deactivated successfully. Jul 12 00:26:09.115892 systemd-logind[1808]: Session 21 logged out. Waiting for processes to exit. Jul 12 00:26:09.118536 systemd-logind[1808]: Removed session 21. Jul 12 00:26:10.429699 systemd[1]: run-containerd-runc-k8s.io-4dffc875b517cacf94a3df56d9979d1cac506d86049d22752b4b86c23b202d3e-runc.LM5YWz.mount: Deactivated successfully. Jul 12 00:26:14.150060 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 12 00:26:14.150262 kernel: audit: type=1130 audit(1752279974.138:1695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.156:22-147.75.109.163:50758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:14.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.156:22-147.75.109.163:50758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:14.138405 systemd[1]: Started sshd@21-172.31.27.156:22-147.75.109.163:50758.service. Jul 12 00:26:14.319000 audit[6463]: USER_ACCT pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.320483 sshd[6463]: Accepted publickey for core from 147.75.109.163 port 50758 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:14.325270 sshd[6463]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:14.324000 audit[6463]: CRED_ACQ pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.340130 kernel: audit: type=1101 audit(1752279974.319:1696): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.340320 kernel: audit: type=1103 audit(1752279974.324:1697): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.346896 kernel: audit: type=1006 audit(1752279974.324:1698): pid=6463 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 12 00:26:14.324000 audit[6463]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5cc2890 a2=3 a3=1 items=0 ppid=1 pid=6463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:14.358467 kernel: audit: type=1300 audit(1752279974.324:1698): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5cc2890 a2=3 a3=1 items=0 ppid=1 pid=6463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:14.358617 kernel: audit: type=1327 audit(1752279974.324:1698): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:14.324000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:14.366038 systemd-logind[1808]: New session 22 of user core. Jul 12 00:26:14.367413 systemd[1]: Started session-22.scope. Jul 12 00:26:14.382000 audit[6463]: USER_START pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.383000 audit[6465]: CRED_ACQ pid=6465 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.407490 kernel: audit: type=1105 audit(1752279974.382:1699): pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.407681 kernel: audit: type=1103 audit(1752279974.383:1700): pid=6465 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.632795 sshd[6463]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:14.639000 audit[6463]: USER_END pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.644053 systemd-logind[1808]: Session 22 logged out. Waiting for processes to exit. Jul 12 00:26:14.646881 systemd[1]: session-22.scope: Deactivated successfully. Jul 12 00:26:14.648996 systemd[1]: sshd@21-172.31.27.156:22-147.75.109.163:50758.service: Deactivated successfully. Jul 12 00:26:14.652254 systemd-logind[1808]: Removed session 22. Jul 12 00:26:14.641000 audit[6463]: CRED_DISP pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.663884 kernel: audit: type=1106 audit(1752279974.639:1701): pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.664057 kernel: audit: type=1104 audit(1752279974.641:1702): pid=6463 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:14.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.156:22-147.75.109.163:50758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:16.360000 audit[6475]: NETFILTER_CFG table=filter:149 family=2 entries=20 op=nft_register_rule pid=6475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:16.360000 audit[6475]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff63bc480 a2=0 a3=1 items=0 ppid=3055 pid=6475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:16.360000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:16.372000 audit[6475]: NETFILTER_CFG table=nat:150 family=2 entries=110 op=nft_register_chain pid=6475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:16.372000 audit[6475]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffff63bc480 a2=0 a3=1 items=0 ppid=3055 pid=6475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:16.372000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:18.228000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:18.228000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4007e27800 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:26:18.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:26:18.229000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:18.229000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4009c5cf90 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:26:18.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:26:18.230000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7346 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:18.230000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4007e27980 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:26:18.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:26:18.241000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:18.241000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4003e42440 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:26:18.241000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:26:18.396000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:18.396000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4007e279e0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:26:18.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:26:18.474000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:18.474000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4007f098c0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:26:18.474000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:26:19.338000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:19.341611 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 12 00:26:19.341708 kernel: audit: type=1400 audit(1752279979.338:1712): avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:19.338000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:19.362487 kernel: audit: type=1400 audit(1752279979.338:1713): avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:19.338000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d4fb40 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:19.376296 kernel: audit: type=1300 audit(1752279979.338:1713): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d4fb40 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:19.338000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:19.387398 kernel: audit: type=1327 audit(1752279979.338:1713): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:19.338000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001153aa0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:19.400555 kernel: audit: type=1300 audit(1752279979.338:1712): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001153aa0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:19.338000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:19.411944 kernel: audit: type=1327 audit(1752279979.338:1712): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:19.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.156:22-147.75.109.163:56158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:19.666711 systemd[1]: Started sshd@22-172.31.27.156:22-147.75.109.163:56158.service. Jul 12 00:26:19.677337 kernel: audit: type=1130 audit(1752279979.665:1714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.156:22-147.75.109.163:56158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:19.850000 audit[6500]: USER_ACCT pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:19.852132 sshd[6500]: Accepted publickey for core from 147.75.109.163 port 56158 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:19.855691 sshd[6500]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:19.853000 audit[6500]: CRED_ACQ pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:19.868817 systemd[1]: Started session-23.scope. Jul 12 00:26:19.870277 systemd-logind[1808]: New session 23 of user core. Jul 12 00:26:19.871947 kernel: audit: type=1101 audit(1752279979.850:1715): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:19.872074 kernel: audit: type=1103 audit(1752279979.853:1716): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:19.872125 kernel: audit: type=1006 audit(1752279979.853:1717): pid=6500 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 12 00:26:19.853000 audit[6500]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc53debe0 a2=3 a3=1 items=0 ppid=1 pid=6500 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:19.853000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:19.882000 audit[6500]: USER_START pid=6500 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:19.885000 audit[6502]: CRED_ACQ pid=6502 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:20.134885 sshd[6500]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:20.136000 audit[6500]: USER_END pid=6500 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:20.137000 audit[6500]: CRED_DISP pid=6500 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:20.141983 systemd-logind[1808]: Session 23 logged out. Waiting for processes to exit. Jul 12 00:26:20.144466 systemd[1]: session-23.scope: Deactivated successfully. Jul 12 00:26:20.145650 systemd[1]: sshd@22-172.31.27.156:22-147.75.109.163:56158.service: Deactivated successfully. Jul 12 00:26:20.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.156:22-147.75.109.163:56158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:20.147810 systemd-logind[1808]: Removed session 23. Jul 12 00:26:22.842000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:22.842000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d4fe80 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:22.842000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:22.843000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:22.843000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d4fea0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:22.843000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:22.846000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:22.846000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d4fee0 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:22.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:22.847000 audit[2572]: AVC avc: denied { watch } for pid=2572 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:22.847000 audit[2572]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000b41380 a2=fc6 a3=0 items=0 ppid=2412 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:26:22.847000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:25.163360 systemd[1]: Started sshd@23-172.31.27.156:22-147.75.109.163:56160.service. Jul 12 00:26:25.175573 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 12 00:26:25.175681 kernel: audit: type=1130 audit(1752279985.162:1727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.156:22-147.75.109.163:56160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:25.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.156:22-147.75.109.163:56160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:25.335000 audit[6516]: USER_ACCT pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.339874 sshd[6516]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:25.347873 sshd[6516]: Accepted publickey for core from 147.75.109.163 port 56160 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:25.335000 audit[6516]: CRED_ACQ pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.352428 kernel: audit: type=1101 audit(1752279985.335:1728): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.369126 systemd-logind[1808]: New session 24 of user core. Jul 12 00:26:25.370326 systemd[1]: Started session-24.scope. Jul 12 00:26:25.376246 kernel: audit: type=1103 audit(1752279985.335:1729): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.335000 audit[6516]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebaa0140 a2=3 a3=1 items=0 ppid=1 pid=6516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:25.402259 kernel: audit: type=1006 audit(1752279985.335:1730): pid=6516 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 12 00:26:25.402378 kernel: audit: type=1300 audit(1752279985.335:1730): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebaa0140 a2=3 a3=1 items=0 ppid=1 pid=6516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:25.335000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:25.411176 kernel: audit: type=1327 audit(1752279985.335:1730): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:25.390000 audit[6516]: USER_START pid=6516 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.390000 audit[6518]: CRED_ACQ pid=6518 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.441104 kernel: audit: type=1105 audit(1752279985.390:1731): pid=6516 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.441266 kernel: audit: type=1103 audit(1752279985.390:1732): pid=6518 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.710583 sshd[6516]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:25.711000 audit[6516]: USER_END pid=6516 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.715457 systemd[1]: session-24.scope: Deactivated successfully. Jul 12 00:26:25.716905 systemd[1]: sshd@23-172.31.27.156:22-147.75.109.163:56160.service: Deactivated successfully. Jul 12 00:26:25.711000 audit[6516]: CRED_DISP pid=6516 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.734462 kernel: audit: type=1106 audit(1752279985.711:1733): pid=6516 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.734651 kernel: audit: type=1104 audit(1752279985.711:1734): pid=6516 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:25.734589 systemd-logind[1808]: Session 24 logged out. Waiting for processes to exit. Jul 12 00:26:25.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.156:22-147.75.109.163:56160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:25.737425 systemd-logind[1808]: Removed session 24. Jul 12 00:26:27.863924 kubelet[2909]: I0712 00:26:27.863884 2909 scope.go:117] "RemoveContainer" containerID="89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e" Jul 12 00:26:27.867996 env[1813]: time="2025-07-12T00:26:27.867376207Z" level=info msg="RemoveContainer for \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\"" Jul 12 00:26:27.875445 env[1813]: time="2025-07-12T00:26:27.875383715Z" level=info msg="RemoveContainer for \"89e9581b515f509a4fb7abe9b6ddac15d0240806f0c98bc9a4e6aab014612f2e\" returns successfully" Jul 12 00:26:27.878837 env[1813]: time="2025-07-12T00:26:27.878783921Z" level=info msg="StopPodSandbox for \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\"" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:27.961 [WARNING][6535] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:27.961 [INFO][6535] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:27.961 [INFO][6535] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" iface="eth0" netns="" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:27.961 [INFO][6535] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:27.962 [INFO][6535] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.012 [INFO][6543] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.012 [INFO][6543] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.012 [INFO][6543] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.025 [WARNING][6543] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.025 [INFO][6543] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.028 [INFO][6543] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:28.034873 env[1813]: 2025-07-12 00:26:28.031 [INFO][6535] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.035912 env[1813]: time="2025-07-12T00:26:28.035857817Z" level=info msg="TearDown network for sandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" successfully" Jul 12 00:26:28.036060 env[1813]: time="2025-07-12T00:26:28.036022682Z" level=info msg="StopPodSandbox for \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" returns successfully" Jul 12 00:26:28.036993 env[1813]: time="2025-07-12T00:26:28.036937084Z" level=info msg="RemovePodSandbox for \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\"" Jul 12 00:26:28.037557 env[1813]: time="2025-07-12T00:26:28.037291931Z" level=info msg="Forcibly stopping sandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\"" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.111 [WARNING][6557] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.111 [INFO][6557] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.111 [INFO][6557] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" iface="eth0" netns="" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.112 [INFO][6557] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.112 [INFO][6557] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.166 [INFO][6564] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.166 [INFO][6564] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.166 [INFO][6564] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.181 [WARNING][6564] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.181 [INFO][6564] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" HandleID="k8s-pod-network.dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--b54fl-eth0" Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.185 [INFO][6564] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:28.190753 env[1813]: 2025-07-12 00:26:28.187 [INFO][6557] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad" Jul 12 00:26:28.190753 env[1813]: time="2025-07-12T00:26:28.190694439Z" level=info msg="TearDown network for sandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" successfully" Jul 12 00:26:28.199110 env[1813]: time="2025-07-12T00:26:28.199032162Z" level=info msg="RemovePodSandbox \"dd19fb01c367ac11782e069e00e5af3087ffe68deb516519743c4789e1cd9cad\" returns successfully" Jul 12 00:26:28.199839 env[1813]: time="2025-07-12T00:26:28.199795632Z" level=info msg="StopPodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\"" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.271 [WARNING][6578] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c427eecb-6235-4057-9d5f-e009ae4d1cfa", ResourceVersion:"1426", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f", Pod:"goldmane-768f4c5c69-rv8kz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.36.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib897efedfba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.272 [INFO][6578] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.272 [INFO][6578] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" iface="eth0" netns="" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.272 [INFO][6578] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.272 [INFO][6578] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.344 [INFO][6585] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.344 [INFO][6585] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.345 [INFO][6585] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.363 [WARNING][6585] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.364 [INFO][6585] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.367 [INFO][6585] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:28.377366 env[1813]: 2025-07-12 00:26:28.370 [INFO][6578] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.378901 env[1813]: time="2025-07-12T00:26:28.378846130Z" level=info msg="TearDown network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" successfully" Jul 12 00:26:28.379074 env[1813]: time="2025-07-12T00:26:28.379026752Z" level=info msg="StopPodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" returns successfully" Jul 12 00:26:28.381175 env[1813]: time="2025-07-12T00:26:28.381098018Z" level=info msg="RemovePodSandbox for \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\"" Jul 12 00:26:28.381413 env[1813]: time="2025-07-12T00:26:28.381164442Z" level=info msg="Forcibly stopping sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\"" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.466 [WARNING][6601] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"c427eecb-6235-4057-9d5f-e009ae4d1cfa", ResourceVersion:"1426", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"3df4177bf569a334f47d10080293928e210da64200426a26fd206ffd4f2e447f", Pod:"goldmane-768f4c5c69-rv8kz", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.36.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib897efedfba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.467 [INFO][6601] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.467 [INFO][6601] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" iface="eth0" netns="" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.467 [INFO][6601] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.467 [INFO][6601] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.515 [INFO][6608] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.517 [INFO][6608] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.518 [INFO][6608] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.539 [WARNING][6608] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.539 [INFO][6608] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" HandleID="k8s-pod-network.81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Workload="ip--172--31--27--156-k8s-goldmane--768f4c5c69--rv8kz-eth0" Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.543 [INFO][6608] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:28.549585 env[1813]: 2025-07-12 00:26:28.546 [INFO][6601] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5" Jul 12 00:26:28.550814 env[1813]: time="2025-07-12T00:26:28.550383832Z" level=info msg="TearDown network for sandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" successfully" Jul 12 00:26:28.557532 env[1813]: time="2025-07-12T00:26:28.557406642Z" level=info msg="RemovePodSandbox \"81fd71cea1e181a2d338d1595f1e377842772c43807bdaed28f5db55718da7a5\" returns successfully" Jul 12 00:26:28.558240 env[1813]: time="2025-07-12T00:26:28.558160967Z" level=info msg="StopPodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\"" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.653 [WARNING][6622] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"115e2b7e-ce17-422c-ab82-9a084dba0347", ResourceVersion:"1067", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a", Pod:"coredns-668d6bf9bc-vrkdm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif2c1b2346ed", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.654 [INFO][6622] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.654 [INFO][6622] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" iface="eth0" netns="" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.654 [INFO][6622] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.654 [INFO][6622] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.704 [INFO][6629] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.705 [INFO][6629] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.705 [INFO][6629] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.724 [WARNING][6629] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.724 [INFO][6629] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.729 [INFO][6629] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:28.734681 env[1813]: 2025-07-12 00:26:28.732 [INFO][6622] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.736140 env[1813]: time="2025-07-12T00:26:28.734732958Z" level=info msg="TearDown network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" successfully" Jul 12 00:26:28.736140 env[1813]: time="2025-07-12T00:26:28.734780060Z" level=info msg="StopPodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" returns successfully" Jul 12 00:26:28.736885 env[1813]: time="2025-07-12T00:26:28.736834201Z" level=info msg="RemovePodSandbox for \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\"" Jul 12 00:26:28.737173 env[1813]: time="2025-07-12T00:26:28.737096872Z" level=info msg="Forcibly stopping sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\"" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.817 [WARNING][6645] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"115e2b7e-ce17-422c-ab82-9a084dba0347", ResourceVersion:"1067", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"3a14205b77101f29c9d9fe65465cc7a8f34809b99d8aece6aa67bbbd8676884a", Pod:"coredns-668d6bf9bc-vrkdm", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.36.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif2c1b2346ed", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.818 [INFO][6645] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.818 [INFO][6645] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" iface="eth0" netns="" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.818 [INFO][6645] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.818 [INFO][6645] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.889 [INFO][6652] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.889 [INFO][6652] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.889 [INFO][6652] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.902 [WARNING][6652] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.902 [INFO][6652] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" HandleID="k8s-pod-network.89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Workload="ip--172--31--27--156-k8s-coredns--668d6bf9bc--vrkdm-eth0" Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.905 [INFO][6652] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:28.913063 env[1813]: 2025-07-12 00:26:28.908 [INFO][6645] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411" Jul 12 00:26:28.913063 env[1813]: time="2025-07-12T00:26:28.911766049Z" level=info msg="TearDown network for sandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" successfully" Jul 12 00:26:28.919324 env[1813]: time="2025-07-12T00:26:28.919176973Z" level=info msg="RemovePodSandbox \"89a199545d9492dbfcc2135b52dedc5660ac82b3ca6fce7d671bc46125e14411\" returns successfully" Jul 12 00:26:28.920363 env[1813]: time="2025-07-12T00:26:28.920309895Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.024 [WARNING][6666] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.025 [INFO][6666] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.025 [INFO][6666] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" iface="eth0" netns="" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.025 [INFO][6666] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.025 [INFO][6666] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.084 [INFO][6673] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.087 [INFO][6673] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.087 [INFO][6673] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.114 [WARNING][6673] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.114 [INFO][6673] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.119 [INFO][6673] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:29.126301 env[1813]: 2025-07-12 00:26:29.121 [INFO][6666] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.126301 env[1813]: time="2025-07-12T00:26:29.124403296Z" level=info msg="TearDown network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" successfully" Jul 12 00:26:29.126301 env[1813]: time="2025-07-12T00:26:29.124448419Z" level=info msg="StopPodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" returns successfully" Jul 12 00:26:29.128234 env[1813]: time="2025-07-12T00:26:29.128157224Z" level=info msg="RemovePodSandbox for \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" Jul 12 00:26:29.128411 env[1813]: time="2025-07-12T00:26:29.128241697Z" level=info msg="Forcibly stopping sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\"" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.222 [WARNING][6687] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.223 [INFO][6687] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.223 [INFO][6687] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" iface="eth0" netns="" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.223 [INFO][6687] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.223 [INFO][6687] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.278 [INFO][6694] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.279 [INFO][6694] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.280 [INFO][6694] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.316 [WARNING][6694] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.316 [INFO][6694] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" HandleID="k8s-pod-network.ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.333 [INFO][6694] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:29.339250 env[1813]: 2025-07-12 00:26:29.336 [INFO][6687] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0" Jul 12 00:26:29.340404 env[1813]: time="2025-07-12T00:26:29.340332894Z" level=info msg="TearDown network for sandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" successfully" Jul 12 00:26:29.347764 env[1813]: time="2025-07-12T00:26:29.347680242Z" level=info msg="RemovePodSandbox \"ac2df0ff2fe745a5cc6606023ce47e74da7363eed9a61c76bab3ce32838ee0a0\" returns successfully" Jul 12 00:26:29.348967 env[1813]: time="2025-07-12T00:26:29.348883777Z" level=info msg="StopPodSandbox for \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\"" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.429 [WARNING][6709] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.429 [INFO][6709] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.429 [INFO][6709] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" iface="eth0" netns="" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.430 [INFO][6709] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.430 [INFO][6709] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.473 [INFO][6716] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.473 [INFO][6716] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.473 [INFO][6716] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.496 [WARNING][6716] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.496 [INFO][6716] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.499 [INFO][6716] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:29.504675 env[1813]: 2025-07-12 00:26:29.502 [INFO][6709] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.505619 env[1813]: time="2025-07-12T00:26:29.504710417Z" level=info msg="TearDown network for sandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" successfully" Jul 12 00:26:29.505619 env[1813]: time="2025-07-12T00:26:29.504757627Z" level=info msg="StopPodSandbox for \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" returns successfully" Jul 12 00:26:29.505619 env[1813]: time="2025-07-12T00:26:29.505382550Z" level=info msg="RemovePodSandbox for \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\"" Jul 12 00:26:29.505619 env[1813]: time="2025-07-12T00:26:29.505437861Z" level=info msg="Forcibly stopping sandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\"" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.584 [WARNING][6733] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" WorkloadEndpoint="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.585 [INFO][6733] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.585 [INFO][6733] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" iface="eth0" netns="" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.585 [INFO][6733] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.585 [INFO][6733] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.642 [INFO][6740] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.643 [INFO][6740] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.643 [INFO][6740] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.663 [WARNING][6740] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.663 [INFO][6740] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" HandleID="k8s-pod-network.38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Workload="ip--172--31--27--156-k8s-calico--apiserver--7c994777b8--jznt5-eth0" Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.668 [INFO][6740] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:29.676127 env[1813]: 2025-07-12 00:26:29.671 [INFO][6733] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549" Jul 12 00:26:29.676127 env[1813]: time="2025-07-12T00:26:29.676085731Z" level=info msg="TearDown network for sandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" successfully" Jul 12 00:26:29.689380 env[1813]: time="2025-07-12T00:26:29.689302521Z" level=info msg="RemovePodSandbox \"38ce1a851d87e5acb7f274f44884087d9f7bd5e1e23781f26790ef5348936549\" returns successfully" Jul 12 00:26:29.690104 env[1813]: time="2025-07-12T00:26:29.690040982Z" level=info msg="StopPodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\"" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.789 [WARNING][6756] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0", GenerateName:"calico-kube-controllers-5864457bbf-", Namespace:"calico-system", SelfLink:"", UID:"737559a1-5637-4ede-8bf9-c2d41a47c349", ResourceVersion:"1210", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5864457bbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e", Pod:"calico-kube-controllers-5864457bbf-w7sk8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.36.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliab7dddba605", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.789 [INFO][6756] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.789 [INFO][6756] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" iface="eth0" netns="" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.789 [INFO][6756] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.789 [INFO][6756] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.843 [INFO][6763] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.843 [INFO][6763] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.843 [INFO][6763] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.857 [WARNING][6763] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.857 [INFO][6763] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.860 [INFO][6763] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:29.866584 env[1813]: 2025-07-12 00:26:29.863 [INFO][6756] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:29.867779 env[1813]: time="2025-07-12T00:26:29.867720366Z" level=info msg="TearDown network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" successfully" Jul 12 00:26:29.868077 env[1813]: time="2025-07-12T00:26:29.867999153Z" level=info msg="StopPodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" returns successfully" Jul 12 00:26:29.869360 env[1813]: time="2025-07-12T00:26:29.869307490Z" level=info msg="RemovePodSandbox for \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\"" Jul 12 00:26:29.869959 env[1813]: time="2025-07-12T00:26:29.869882394Z" level=info msg="Forcibly stopping sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\"" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.944 [WARNING][6777] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0", GenerateName:"calico-kube-controllers-5864457bbf-", Namespace:"calico-system", SelfLink:"", UID:"737559a1-5637-4ede-8bf9-c2d41a47c349", ResourceVersion:"1210", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5864457bbf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"28cdcdbce17ef6ce862f2e723093c05c8fd9a3376033eb37ad35713f0025219e", Pod:"calico-kube-controllers-5864457bbf-w7sk8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.36.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliab7dddba605", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.945 [INFO][6777] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.945 [INFO][6777] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" iface="eth0" netns="" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.945 [INFO][6777] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.945 [INFO][6777] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.993 [INFO][6784] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.994 [INFO][6784] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:29.994 [INFO][6784] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:30.007 [WARNING][6784] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:30.007 [INFO][6784] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" HandleID="k8s-pod-network.277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Workload="ip--172--31--27--156-k8s-calico--kube--controllers--5864457bbf--w7sk8-eth0" Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:30.012 [INFO][6784] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:30.017878 env[1813]: 2025-07-12 00:26:30.014 [INFO][6777] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12" Jul 12 00:26:30.020885 env[1813]: time="2025-07-12T00:26:30.020814679Z" level=info msg="TearDown network for sandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" successfully" Jul 12 00:26:30.028529 env[1813]: time="2025-07-12T00:26:30.028439822Z" level=info msg="RemovePodSandbox \"277c6691b0e82223f3a34fee9bd8df43b81522edbd429c1299492ed5766fcc12\" returns successfully" Jul 12 00:26:30.029624 env[1813]: time="2025-07-12T00:26:30.029496541Z" level=info msg="StopPodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\"" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.124 [WARNING][6799] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5fa5afc-e8d7-456a-856b-28fa80629c7d", ResourceVersion:"1305", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38", Pod:"csi-node-driver-nsj26", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.36.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicf07c77e8c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.124 [INFO][6799] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.124 [INFO][6799] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" iface="eth0" netns="" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.124 [INFO][6799] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.124 [INFO][6799] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.179 [INFO][6806] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.183 [INFO][6806] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.183 [INFO][6806] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.198 [WARNING][6806] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.198 [INFO][6806] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.201 [INFO][6806] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:30.206381 env[1813]: 2025-07-12 00:26:30.203 [INFO][6799] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.207534 env[1813]: time="2025-07-12T00:26:30.206422362Z" level=info msg="TearDown network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" successfully" Jul 12 00:26:30.207534 env[1813]: time="2025-07-12T00:26:30.206486229Z" level=info msg="StopPodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" returns successfully" Jul 12 00:26:30.208774 env[1813]: time="2025-07-12T00:26:30.208710373Z" level=info msg="RemovePodSandbox for \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\"" Jul 12 00:26:30.209092 env[1813]: time="2025-07-12T00:26:30.209006094Z" level=info msg="Forcibly stopping sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\"" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.312 [WARNING][6821] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5fa5afc-e8d7-456a-856b-28fa80629c7d", ResourceVersion:"1305", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"6327f128979d6ab449e8606468a93215572fa8dfccd84f344a4a598260a0db38", Pod:"csi-node-driver-nsj26", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.36.201/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calicf07c77e8c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.314 [INFO][6821] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.314 [INFO][6821] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" iface="eth0" netns="" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.314 [INFO][6821] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.314 [INFO][6821] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.375 [INFO][6828] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.375 [INFO][6828] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.375 [INFO][6828] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.391 [WARNING][6828] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.391 [INFO][6828] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" HandleID="k8s-pod-network.20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Workload="ip--172--31--27--156-k8s-csi--node--driver--nsj26-eth0" Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.396 [INFO][6828] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:30.403543 env[1813]: 2025-07-12 00:26:30.398 [INFO][6821] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b" Jul 12 00:26:30.403543 env[1813]: time="2025-07-12T00:26:30.401842489Z" level=info msg="TearDown network for sandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" successfully" Jul 12 00:26:30.409479 env[1813]: time="2025-07-12T00:26:30.409371938Z" level=info msg="RemovePodSandbox \"20627a4ba6d035f87b336b75a06d2a60d055b7f501af5bb14d2893273cf0fd0b\" returns successfully" Jul 12 00:26:30.410718 env[1813]: time="2025-07-12T00:26:30.410666846Z" level=info msg="StopPodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\"" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.491 [WARNING][6842] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0", GenerateName:"calico-apiserver-c699c5847-", Namespace:"calico-apiserver", SelfLink:"", UID:"1311ce9e-8b34-448a-adb1-36c3adf1e1ff", ResourceVersion:"1135", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c699c5847", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc", Pod:"calico-apiserver-c699c5847-hd8v7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif22b65d7510", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.491 [INFO][6842] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.492 [INFO][6842] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" iface="eth0" netns="" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.492 [INFO][6842] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.492 [INFO][6842] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.554 [INFO][6849] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.554 [INFO][6849] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.554 [INFO][6849] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.569 [WARNING][6849] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.569 [INFO][6849] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.572 [INFO][6849] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:30.577999 env[1813]: 2025-07-12 00:26:30.575 [INFO][6842] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.580334 env[1813]: time="2025-07-12T00:26:30.578038693Z" level=info msg="TearDown network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" successfully" Jul 12 00:26:30.580334 env[1813]: time="2025-07-12T00:26:30.578085159Z" level=info msg="StopPodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" returns successfully" Jul 12 00:26:30.581781 env[1813]: time="2025-07-12T00:26:30.581698213Z" level=info msg="RemovePodSandbox for \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\"" Jul 12 00:26:30.582112 env[1813]: time="2025-07-12T00:26:30.582030956Z" level=info msg="Forcibly stopping sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\"" Jul 12 00:26:30.743985 systemd[1]: Started sshd@24-172.31.27.156:22-147.75.109.163:57392.service. Jul 12 00:26:30.758928 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:26:30.759025 kernel: audit: type=1130 audit(1752279990.743:1736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.156:22-147.75.109.163:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:30.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.156:22-147.75.109.163:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.681 [WARNING][6865] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0", GenerateName:"calico-apiserver-c699c5847-", Namespace:"calico-apiserver", SelfLink:"", UID:"1311ce9e-8b34-448a-adb1-36c3adf1e1ff", ResourceVersion:"1135", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 50, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c699c5847", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-156", ContainerID:"f988dc5b244d49ce489e27a6b576c1b1253449279840561b1647b973599fdfdc", Pod:"calico-apiserver-c699c5847-hd8v7", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.36.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif22b65d7510", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.682 [INFO][6865] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.682 [INFO][6865] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" iface="eth0" netns="" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.682 [INFO][6865] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.682 [INFO][6865] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.794 [INFO][6872] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.797 [INFO][6872] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.797 [INFO][6872] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.815 [WARNING][6872] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.815 [INFO][6872] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" HandleID="k8s-pod-network.58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Workload="ip--172--31--27--156-k8s-calico--apiserver--c699c5847--hd8v7-eth0" Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.819 [INFO][6872] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:26:30.830130 env[1813]: 2025-07-12 00:26:30.827 [INFO][6865] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49" Jul 12 00:26:30.831125 env[1813]: time="2025-07-12T00:26:30.830176979Z" level=info msg="TearDown network for sandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" successfully" Jul 12 00:26:30.849747 env[1813]: time="2025-07-12T00:26:30.849467434Z" level=info msg="RemovePodSandbox \"58d06fe2caf6309d86ffc277bb2b1cc5aca11a3db443a99f0979c07795f6ae49\" returns successfully" Jul 12 00:26:30.955560 sshd[6878]: Accepted publickey for core from 147.75.109.163 port 57392 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:30.954000 audit[6878]: USER_ACCT pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:30.968452 sshd[6878]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:30.965000 audit[6878]: CRED_ACQ pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:30.984148 kernel: audit: type=1101 audit(1752279990.954:1737): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:30.984334 kernel: audit: type=1103 audit(1752279990.965:1738): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:30.991239 systemd-logind[1808]: New session 25 of user core. Jul 12 00:26:30.991995 systemd[1]: Started session-25.scope. Jul 12 00:26:31.002270 kernel: audit: type=1006 audit(1752279990.966:1739): pid=6878 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 12 00:26:30.966000 audit[6878]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4865940 a2=3 a3=1 items=0 ppid=1 pid=6878 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:30.966000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:31.032605 kernel: audit: type=1300 audit(1752279990.966:1739): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4865940 a2=3 a3=1 items=0 ppid=1 pid=6878 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:31.032742 kernel: audit: type=1327 audit(1752279990.966:1739): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:31.025000 audit[6878]: USER_START pid=6878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.046103 kernel: audit: type=1105 audit(1752279991.025:1740): pid=6878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.032000 audit[6881]: CRED_ACQ pid=6881 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.055947 kernel: audit: type=1103 audit(1752279991.032:1741): pid=6881 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.331788 sshd[6878]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:31.333000 audit[6878]: USER_END pid=6878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.340845 systemd[1]: sshd@24-172.31.27.156:22-147.75.109.163:57392.service: Deactivated successfully. Jul 12 00:26:31.342871 systemd[1]: session-25.scope: Deactivated successfully. Jul 12 00:26:31.350513 systemd-logind[1808]: Session 25 logged out. Waiting for processes to exit. Jul 12 00:26:31.337000 audit[6878]: CRED_DISP pid=6878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.361523 kernel: audit: type=1106 audit(1752279991.333:1742): pid=6878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.361709 kernel: audit: type=1104 audit(1752279991.337:1743): pid=6878 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:31.362475 systemd-logind[1808]: Removed session 25. Jul 12 00:26:31.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.156:22-147.75.109.163:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:34.869000 audit[5512]: AVC avc: denied { watch } for pid=5512 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_25_06.1408028503/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c501 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c317,c501 tclass=file permissive=0 Jul 12 00:26:34.869000 audit[5512]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40006f8920 a2=fc6 a3=0 items=0 ppid=4670 pid=5512 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c501 key=(null) Jul 12 00:26:34.869000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:26:36.365101 systemd[1]: Started sshd@25-172.31.27.156:22-147.75.109.163:43352.service. Jul 12 00:26:36.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.156:22-147.75.109.163:43352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:36.368249 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 12 00:26:36.368401 kernel: audit: type=1130 audit(1752279996.365:1746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.156:22-147.75.109.163:43352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:36.567000 audit[6890]: USER_ACCT pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.571474 sshd[6890]: Accepted publickey for core from 147.75.109.163 port 43352 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:36.574650 sshd[6890]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:36.573000 audit[6890]: CRED_ACQ pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.588552 kernel: audit: type=1101 audit(1752279996.567:1747): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.588717 kernel: audit: type=1103 audit(1752279996.573:1748): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.599927 kernel: audit: type=1006 audit(1752279996.573:1749): pid=6890 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 12 00:26:36.573000 audit[6890]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9838350 a2=3 a3=1 items=0 ppid=1 pid=6890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:36.615714 kernel: audit: type=1300 audit(1752279996.573:1749): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9838350 a2=3 a3=1 items=0 ppid=1 pid=6890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:36.616316 systemd-logind[1808]: New session 26 of user core. Jul 12 00:26:36.621565 systemd[1]: Started session-26.scope. Jul 12 00:26:36.573000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:36.626295 kernel: audit: type=1327 audit(1752279996.573:1749): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:36.639000 audit[6890]: USER_START pid=6890 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.671419 kernel: audit: type=1105 audit(1752279996.639:1750): pid=6890 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.671541 kernel: audit: type=1103 audit(1752279996.653:1751): pid=6897 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.653000 audit[6897]: CRED_ACQ pid=6897 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.687488 systemd[1]: run-containerd-runc-k8s.io-6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371-runc.3xTZDX.mount: Deactivated successfully. Jul 12 00:26:36.965285 sshd[6890]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:36.966000 audit[6890]: USER_END pid=6890 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.978000 audit[6890]: CRED_DISP pid=6890 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.983358 kernel: audit: type=1106 audit(1752279996.966:1752): pid=6890 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:36.983271 systemd[1]: sshd@25-172.31.27.156:22-147.75.109.163:43352.service: Deactivated successfully. Jul 12 00:26:36.984643 systemd[1]: session-26.scope: Deactivated successfully. Jul 12 00:26:36.985901 systemd-logind[1808]: Session 26 logged out. Waiting for processes to exit. Jul 12 00:26:36.987700 systemd-logind[1808]: Removed session 26. Jul 12 00:26:36.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.156:22-147.75.109.163:43352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:37.002229 kernel: audit: type=1104 audit(1752279996.978:1753): pid=6890 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:38.874350 systemd[1]: run-containerd-runc-k8s.io-6a33718e5bcb098f8dd989fa8b020180fd939a1016d411b01848d73fb03c1371-runc.HTxALR.mount: Deactivated successfully. Jul 12 00:26:41.996743 systemd[1]: Started sshd@26-172.31.27.156:22-147.75.109.163:43366.service. Jul 12 00:26:42.003835 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:26:42.004016 kernel: audit: type=1130 audit(1752280001.997:1755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.156:22-147.75.109.163:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:41.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.156:22-147.75.109.163:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:42.190000 audit[6979]: USER_ACCT pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.195565 sshd[6979]: Accepted publickey for core from 147.75.109.163 port 43366 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:42.199665 sshd[6979]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:42.196000 audit[6979]: CRED_ACQ pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.214204 kernel: audit: type=1101 audit(1752280002.190:1756): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.214392 kernel: audit: type=1103 audit(1752280002.196:1757): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.222303 systemd-logind[1808]: New session 27 of user core. Jul 12 00:26:42.225021 kernel: audit: type=1006 audit(1752280002.197:1758): pid=6979 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 12 00:26:42.223843 systemd[1]: Started session-27.scope. Jul 12 00:26:42.197000 audit[6979]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd11f0600 a2=3 a3=1 items=0 ppid=1 pid=6979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:42.239957 kernel: audit: type=1300 audit(1752280002.197:1758): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd11f0600 a2=3 a3=1 items=0 ppid=1 pid=6979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:42.197000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:42.244444 kernel: audit: type=1327 audit(1752280002.197:1758): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:42.258000 audit[6979]: USER_START pid=6979 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.272000 audit[6981]: CRED_ACQ pid=6981 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.290786 kernel: audit: type=1105 audit(1752280002.258:1759): pid=6979 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.290966 kernel: audit: type=1103 audit(1752280002.272:1760): pid=6981 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.586528 sshd[6979]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:42.589000 audit[6979]: USER_END pid=6979 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.593884 systemd[1]: session-27.scope: Deactivated successfully. Jul 12 00:26:42.599390 systemd[1]: sshd@26-172.31.27.156:22-147.75.109.163:43366.service: Deactivated successfully. Jul 12 00:26:42.605570 systemd-logind[1808]: Session 27 logged out. Waiting for processes to exit. Jul 12 00:26:42.589000 audit[6979]: CRED_DISP pid=6979 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.616414 kernel: audit: type=1106 audit(1752280002.589:1761): pid=6979 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.616545 kernel: audit: type=1104 audit(1752280002.589:1762): pid=6979 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:42.616834 systemd-logind[1808]: Removed session 27. Jul 12 00:26:42.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.156:22-147.75.109.163:43366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:43.326000 audit[5699]: AVC avc: denied { watch } for pid=5699 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_25_35.3458376990/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c874,c925 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c874,c925 tclass=file permissive=0 Jul 12 00:26:43.326000 audit[5699]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001f9dc60 a2=fc6 a3=0 items=0 ppid=5635 pid=5699 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c874,c925 key=(null) Jul 12 00:26:43.326000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:26:47.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.156:22-147.75.109.163:39648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:47.624280 systemd[1]: Started sshd@27-172.31.27.156:22-147.75.109.163:39648.service. Jul 12 00:26:47.627314 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 12 00:26:47.627444 kernel: audit: type=1130 audit(1752280007.623:1765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.156:22-147.75.109.163:39648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:47.793129 sshd[6991]: Accepted publickey for core from 147.75.109.163 port 39648 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:47.791000 audit[6991]: USER_ACCT pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.807129 sshd[6991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:47.805000 audit[6991]: CRED_ACQ pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.818696 kernel: audit: type=1101 audit(1752280007.791:1766): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.818858 kernel: audit: type=1103 audit(1752280007.805:1767): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.826680 kernel: audit: type=1006 audit(1752280007.805:1768): pid=6991 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Jul 12 00:26:47.805000 audit[6991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe527aff0 a2=3 a3=1 items=0 ppid=1 pid=6991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:47.838886 kernel: audit: type=1300 audit(1752280007.805:1768): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe527aff0 a2=3 a3=1 items=0 ppid=1 pid=6991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:47.805000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:47.845695 systemd-logind[1808]: New session 28 of user core. Jul 12 00:26:47.847127 systemd[1]: Started session-28.scope. Jul 12 00:26:47.853293 kernel: audit: type=1327 audit(1752280007.805:1768): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:47.861000 audit[6991]: USER_START pid=6991 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.898529 kernel: audit: type=1105 audit(1752280007.861:1769): pid=6991 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.898691 kernel: audit: type=1103 audit(1752280007.877:1770): pid=6993 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:47.877000 audit[6993]: CRED_ACQ pid=6993 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:48.174688 sshd[6991]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:48.177000 audit[6991]: USER_END pid=6991 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:48.193734 systemd[1]: sshd@27-172.31.27.156:22-147.75.109.163:39648.service: Deactivated successfully. Jul 12 00:26:48.195186 systemd[1]: session-28.scope: Deactivated successfully. Jul 12 00:26:48.195300 systemd-logind[1808]: Session 28 logged out. Waiting for processes to exit. Jul 12 00:26:48.198789 systemd-logind[1808]: Removed session 28. Jul 12 00:26:48.177000 audit[6991]: CRED_DISP pid=6991 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:48.213444 kernel: audit: type=1106 audit(1752280008.177:1771): pid=6991 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:48.213588 kernel: audit: type=1104 audit(1752280008.177:1772): pid=6991 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:48.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.156:22-147.75.109.163:39648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:49.031126 systemd[1]: run-containerd-runc-k8s.io-5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344-runc.DHXSLj.mount: Deactivated successfully. Jul 12 00:27:01.598599 systemd[1]: cri-containerd-146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c.scope: Deactivated successfully. Jul 12 00:27:01.599161 systemd[1]: cri-containerd-146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c.scope: Consumed 6.470s CPU time. Jul 12 00:27:01.602000 audit: BPF prog-id=79 op=UNLOAD Jul 12 00:27:01.605268 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:27:01.605415 kernel: audit: type=1334 audit(1752280021.602:1774): prog-id=79 op=UNLOAD Jul 12 00:27:01.602000 audit: BPF prog-id=89 op=UNLOAD Jul 12 00:27:01.611332 kernel: audit: type=1334 audit(1752280021.602:1775): prog-id=89 op=UNLOAD Jul 12 00:27:01.654530 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c-rootfs.mount: Deactivated successfully. Jul 12 00:27:01.656257 env[1813]: time="2025-07-12T00:27:01.656015851Z" level=info msg="shim disconnected" id=146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c Jul 12 00:27:01.656257 env[1813]: time="2025-07-12T00:27:01.656096677Z" level=warning msg="cleaning up after shim disconnected" id=146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c namespace=k8s.io Jul 12 00:27:01.656257 env[1813]: time="2025-07-12T00:27:01.656119814Z" level=info msg="cleaning up dead shim" Jul 12 00:27:01.674488 env[1813]: time="2025-07-12T00:27:01.674397497Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:27:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7057 runtime=io.containerd.runc.v2\n" Jul 12 00:27:01.704000 audit: BPF prog-id=120 op=UNLOAD Jul 12 00:27:01.705112 systemd[1]: cri-containerd-4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b.scope: Deactivated successfully. Jul 12 00:27:01.705762 systemd[1]: cri-containerd-4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b.scope: Consumed 27.298s CPU time. Jul 12 00:27:01.709835 kernel: audit: type=1334 audit(1752280021.704:1776): prog-id=120 op=UNLOAD Jul 12 00:27:01.709999 kernel: audit: type=1334 audit(1752280021.708:1777): prog-id=123 op=UNLOAD Jul 12 00:27:01.708000 audit: BPF prog-id=123 op=UNLOAD Jul 12 00:27:01.749829 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b-rootfs.mount: Deactivated successfully. Jul 12 00:27:01.753737 env[1813]: time="2025-07-12T00:27:01.753677768Z" level=info msg="shim disconnected" id=4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b Jul 12 00:27:01.754221 env[1813]: time="2025-07-12T00:27:01.754147730Z" level=warning msg="cleaning up after shim disconnected" id=4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b namespace=k8s.io Jul 12 00:27:01.754398 env[1813]: time="2025-07-12T00:27:01.754366036Z" level=info msg="cleaning up dead shim" Jul 12 00:27:01.770989 env[1813]: time="2025-07-12T00:27:01.770931305Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:27:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7084 runtime=io.containerd.runc.v2\n" Jul 12 00:27:01.928086 kubelet[2909]: I0712 00:27:01.926337 2909 scope.go:117] "RemoveContainer" containerID="146632f1ca0ec0e139121a48bfbfbd01e36b092416a9a43cbb3209a25411638c" Jul 12 00:27:01.931883 env[1813]: time="2025-07-12T00:27:01.931816348Z" level=info msg="CreateContainer within sandbox \"abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 12 00:27:01.933618 kubelet[2909]: I0712 00:27:01.933580 2909 scope.go:117] "RemoveContainer" containerID="4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b" Jul 12 00:27:01.937594 env[1813]: time="2025-07-12T00:27:01.937536889Z" level=info msg="CreateContainer within sandbox \"9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 12 00:27:01.976834 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount529437167.mount: Deactivated successfully. Jul 12 00:27:01.986988 env[1813]: time="2025-07-12T00:27:01.986876224Z" level=info msg="CreateContainer within sandbox \"9adfe2cfbe3fe720dc15da962ac4e66d933100c40005a8f107e7389dbd414880\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9\"" Jul 12 00:27:01.988045 env[1813]: time="2025-07-12T00:27:01.987999293Z" level=info msg="StartContainer for \"959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9\"" Jul 12 00:27:01.989562 env[1813]: time="2025-07-12T00:27:01.989488829Z" level=info msg="CreateContainer within sandbox \"abd6c1317fb50de1098fdfda143a4c49dcbbda927588611d12bcbab340530b47\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"a20e23c0aa514abf368942a1798c70f9bad2d1e2cec1007d841ff53770478873\"" Jul 12 00:27:01.991016 env[1813]: time="2025-07-12T00:27:01.990925946Z" level=info msg="StartContainer for \"a20e23c0aa514abf368942a1798c70f9bad2d1e2cec1007d841ff53770478873\"" Jul 12 00:27:02.020365 systemd[1]: Started cri-containerd-959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9.scope. Jul 12 00:27:02.050874 systemd[1]: Started cri-containerd-a20e23c0aa514abf368942a1798c70f9bad2d1e2cec1007d841ff53770478873.scope. Jul 12 00:27:02.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108873 kernel: audit: type=1400 audit(1752280022.083:1778): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.109298 kernel: audit: type=1400 audit(1752280022.091:1779): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.109404 kernel: audit: type=1400 audit(1752280022.091:1780): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.109460 kernel: audit: type=1400 audit(1752280022.091:1781): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121399 kernel: audit: type=1400 audit(1752280022.091:1782): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.134160 kernel: audit: type=1400 audit(1752280022.091:1783): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.091000 audit: BPF prog-id=253 op=LOAD Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2959 pid=7106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:02.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396164393833363966373537633861373361656332343765663263 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2959 pid=7106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:02.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396164393833363966373537633861373361656332343765663263 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.092000 audit: BPF prog-id=254 op=LOAD Jul 12 00:27:02.092000 audit[7106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2959 pid=7106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:02.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396164393833363966373537633861373361656332343765663263 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.108000 audit: BPF prog-id=255 op=LOAD Jul 12 00:27:02.108000 audit[7106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2959 pid=7106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:02.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396164393833363966373537633861373361656332343765663263 Jul 12 00:27:02.120000 audit: BPF prog-id=255 op=UNLOAD Jul 12 00:27:02.120000 audit: BPF prog-id=254 op=UNLOAD Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { perfmon } for pid=7106 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit[7106]: AVC avc: denied { bpf } for pid=7106 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.121000 audit: BPF prog-id=256 op=LOAD Jul 12 00:27:02.121000 audit[7106]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2959 pid=7106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:02.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396164393833363966373537633861373361656332343765663263 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:02.203039 env[1813]: time="2025-07-12T00:27:02.202895809Z" level=info msg="StartContainer for \"959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9\" returns successfully" Jul 12 00:27:02.221923 env[1813]: time="2025-07-12T00:27:02.221838686Z" level=info msg="StartContainer for \"a20e23c0aa514abf368942a1798c70f9bad2d1e2cec1007d841ff53770478873\" returns successfully" Jul 12 00:27:05.501000 audit[7141]: AVC avc: denied { watch } for pid=7141 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:05.501000 audit[7141]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000c641b0 a2=fc6 a3=0 items=0 ppid=2412 pid=7141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:27:05.501000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:27:05.502000 audit[7141]: AVC avc: denied { watch } for pid=7141 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:05.502000 audit[7141]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000483640 a2=fc6 a3=0 items=0 ppid=2412 pid=7141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c177,c461 key=(null) Jul 12 00:27:05.502000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:27:06.152576 kubelet[2909]: E0712 00:27:06.152503 2909 controller.go:195] "Failed to update lease" err="Put \"https://172.31.27.156:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-156?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 12 00:27:07.359011 systemd[1]: cri-containerd-8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6.scope: Deactivated successfully. Jul 12 00:27:07.359650 systemd[1]: cri-containerd-8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6.scope: Consumed 5.392s CPU time. Jul 12 00:27:07.369255 kernel: kauditd_printk_skb: 180 callbacks suppressed Jul 12 00:27:07.369421 kernel: audit: type=1334 audit(1752280027.363:1807): prog-id=87 op=UNLOAD Jul 12 00:27:07.363000 audit: BPF prog-id=87 op=UNLOAD Jul 12 00:27:07.363000 audit: BPF prog-id=101 op=UNLOAD Jul 12 00:27:07.372761 kernel: audit: type=1334 audit(1752280027.363:1808): prog-id=101 op=UNLOAD Jul 12 00:27:07.401163 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6-rootfs.mount: Deactivated successfully. Jul 12 00:27:07.402951 env[1813]: time="2025-07-12T00:27:07.402874264Z" level=info msg="shim disconnected" id=8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6 Jul 12 00:27:07.403603 env[1813]: time="2025-07-12T00:27:07.402947612Z" level=warning msg="cleaning up after shim disconnected" id=8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6 namespace=k8s.io Jul 12 00:27:07.403603 env[1813]: time="2025-07-12T00:27:07.402970906Z" level=info msg="cleaning up dead shim" Jul 12 00:27:07.418542 env[1813]: time="2025-07-12T00:27:07.418465767Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:27:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7191 runtime=io.containerd.runc.v2\n" Jul 12 00:27:07.962077 kubelet[2909]: I0712 00:27:07.962025 2909 scope.go:117] "RemoveContainer" containerID="8cf52d2edb61034eb7d2ff4efa3cc710336b1baf91550ccb8f21870eab2e41e6" Jul 12 00:27:07.965873 env[1813]: time="2025-07-12T00:27:07.965809949Z" level=info msg="CreateContainer within sandbox \"75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 12 00:27:07.997329 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount757962176.mount: Deactivated successfully. Jul 12 00:27:08.008105 env[1813]: time="2025-07-12T00:27:08.008036404Z" level=info msg="CreateContainer within sandbox \"75094b484cb972a9fd39a8bc55f7fe544cf332e4af54db6c7cae3c076e4b475a\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"c1457334d3c3fa773aac0ae2c5a4585609eb7b7283a4c401ef239cb1e525367d\"" Jul 12 00:27:08.009293 env[1813]: time="2025-07-12T00:27:08.009151241Z" level=info msg="StartContainer for \"c1457334d3c3fa773aac0ae2c5a4585609eb7b7283a4c401ef239cb1e525367d\"" Jul 12 00:27:08.049387 systemd[1]: Started cri-containerd-c1457334d3c3fa773aac0ae2c5a4585609eb7b7283a4c401ef239cb1e525367d.scope. Jul 12 00:27:08.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104360 kernel: audit: type=1400 audit(1752280028.095:1809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112336 kernel: audit: type=1400 audit(1752280028.098:1810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.128256 kernel: audit: type=1400 audit(1752280028.098:1811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.128388 kernel: audit: type=1400 audit(1752280028.098:1812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.136912 kernel: audit: type=1400 audit(1752280028.098:1813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.145027 kernel: audit: type=1400 audit(1752280028.098:1814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.153345 kernel: audit: type=1400 audit(1752280028.098:1815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.163151 kernel: audit: type=1400 audit(1752280028.098:1816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.103000 audit: BPF prog-id=261 op=LOAD Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2428 pid=7213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:08.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343537333334643363336661373733616163306165326335613435 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2428 pid=7213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:08.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343537333334643363336661373733616163306165326335613435 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.104000 audit: BPF prog-id=262 op=LOAD Jul 12 00:27:08.104000 audit[7213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2428 pid=7213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:08.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343537333334643363336661373733616163306165326335613435 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit: BPF prog-id=263 op=LOAD Jul 12 00:27:08.112000 audit[7213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2428 pid=7213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:08.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343537333334643363336661373733616163306165326335613435 Jul 12 00:27:08.112000 audit: BPF prog-id=263 op=UNLOAD Jul 12 00:27:08.112000 audit: BPF prog-id=262 op=UNLOAD Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { perfmon } for pid=7213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit[7213]: AVC avc: denied { bpf } for pid=7213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:27:08.112000 audit: BPF prog-id=264 op=LOAD Jul 12 00:27:08.112000 audit[7213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2428 pid=7213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:27:08.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343537333334643363336661373733616163306165326335613435 Jul 12 00:27:08.189548 env[1813]: time="2025-07-12T00:27:08.189375464Z" level=info msg="StartContainer for \"c1457334d3c3fa773aac0ae2c5a4585609eb7b7283a4c401ef239cb1e525367d\" returns successfully" Jul 12 00:27:10.433917 systemd[1]: run-containerd-runc-k8s.io-4dffc875b517cacf94a3df56d9979d1cac506d86049d22752b4b86c23b202d3e-runc.TvPQX9.mount: Deactivated successfully. Jul 12 00:27:13.745371 systemd[1]: cri-containerd-959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9.scope: Deactivated successfully. Jul 12 00:27:13.744000 audit: BPF prog-id=253 op=UNLOAD Jul 12 00:27:13.748470 kernel: kauditd_printk_skb: 49 callbacks suppressed Jul 12 00:27:13.748620 kernel: audit: type=1334 audit(1752280033.744:1827): prog-id=253 op=UNLOAD Jul 12 00:27:13.750000 audit: BPF prog-id=256 op=UNLOAD Jul 12 00:27:13.755630 kernel: audit: type=1334 audit(1752280033.750:1828): prog-id=256 op=UNLOAD Jul 12 00:27:13.791257 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9-rootfs.mount: Deactivated successfully. Jul 12 00:27:13.808410 env[1813]: time="2025-07-12T00:27:13.808338397Z" level=info msg="shim disconnected" id=959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9 Jul 12 00:27:13.809305 env[1813]: time="2025-07-12T00:27:13.809137482Z" level=warning msg="cleaning up after shim disconnected" id=959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9 namespace=k8s.io Jul 12 00:27:13.809482 env[1813]: time="2025-07-12T00:27:13.809451951Z" level=info msg="cleaning up dead shim" Jul 12 00:27:13.823604 env[1813]: time="2025-07-12T00:27:13.823544927Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:27:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7296 runtime=io.containerd.runc.v2\n" Jul 12 00:27:13.983493 kubelet[2909]: I0712 00:27:13.983448 2909 scope.go:117] "RemoveContainer" containerID="4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b" Jul 12 00:27:13.984113 kubelet[2909]: I0712 00:27:13.983958 2909 scope.go:117] "RemoveContainer" containerID="959ad98369f757c8a73aec247ef2c7929ffb4ea4cb472df1808b42bf7ee3cdb9" Jul 12 00:27:13.984223 kubelet[2909]: E0712 00:27:13.984166 2909 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-747864d56d-6fp8k_tigera-operator(13086ddd-bef0-4b6c-bc96-091c9fb1a562)\"" pod="tigera-operator/tigera-operator-747864d56d-6fp8k" podUID="13086ddd-bef0-4b6c-bc96-091c9fb1a562" Jul 12 00:27:13.986557 env[1813]: time="2025-07-12T00:27:13.986479019Z" level=info msg="RemoveContainer for \"4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b\"" Jul 12 00:27:13.994186 env[1813]: time="2025-07-12T00:27:13.994103640Z" level=info msg="RemoveContainer for \"4e210c57e8739a38d2bca80cded3b49ce7cd130fc607aaa2a2085dac5af91d0b\" returns successfully" Jul 12 00:27:14.389395 update_engine[1809]: I0712 00:27:14.389319 1809 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 12 00:27:14.389395 update_engine[1809]: I0712 00:27:14.389393 1809 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 12 00:27:14.392466 update_engine[1809]: I0712 00:27:14.392410 1809 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 12 00:27:14.393555 update_engine[1809]: I0712 00:27:14.393505 1809 omaha_request_params.cc:62] Current group set to lts Jul 12 00:27:14.394967 update_engine[1809]: I0712 00:27:14.394747 1809 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 12 00:27:14.394967 update_engine[1809]: I0712 00:27:14.394776 1809 update_attempter.cc:643] Scheduling an action processor start. Jul 12 00:27:14.394967 update_engine[1809]: I0712 00:27:14.394809 1809 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 12 00:27:14.394967 update_engine[1809]: I0712 00:27:14.394873 1809 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 12 00:27:14.395978 update_engine[1809]: I0712 00:27:14.395951 1809 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 12 00:27:14.395978 update_engine[1809]: I0712 00:27:14.395972 1809 omaha_request_action.cc:271] Request: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.395978 update_engine[1809]: Jul 12 00:27:14.397541 update_engine[1809]: I0712 00:27:14.395984 1809 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 12 00:27:14.397680 locksmithd[1875]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 12 00:27:14.404778 update_engine[1809]: I0712 00:27:14.404716 1809 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 12 00:27:14.405272 update_engine[1809]: I0712 00:27:14.405222 1809 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Jul 12 00:27:14.446351 update_engine[1809]: E0712 00:27:14.446285 1809 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 12 00:27:14.446535 update_engine[1809]: I0712 00:27:14.446451 1809 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 12 00:27:16.153428 kubelet[2909]: E0712 00:27:16.153346 2909 controller.go:195] "Failed to update lease" err="Put \"https://172.31.27.156:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-156?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 12 00:27:18.229000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.229000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.251426 kernel: audit: type=1400 audit(1752280038.229:1830): avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.251628 kernel: audit: type=1400 audit(1752280038.229:1829): avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.251701 kernel: audit: type=1300 audit(1752280038.229:1829): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4009e53290 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.229000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4009e53290 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.274396 kernel: audit: type=1327 audit(1752280038.229:1829): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.274499 kernel: audit: type=1300 audit(1752280038.229:1830): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40073dc5d0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.229000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40073dc5d0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.297177 kernel: audit: type=1327 audit(1752280038.229:1830): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.297375 kernel: audit: type=1400 audit(1752280038.229:1831): avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7346 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.229000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7346 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.229000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40073dc690 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.319091 kernel: audit: type=1300 audit(1752280038.229:1831): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40073dc690 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.240000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.240000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4009794b80 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.240000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.397000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.397000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40073dcde0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:18.475000 audit[2596]: AVC avc: denied { watch } for pid=2596 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7344 scontext=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:27:18.475000 audit[2596]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4009794bc0 a2=fc6 a3=0 items=0 ppid=2454 pid=2596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c402,c988 key=(null) Jul 12 00:27:18.475000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313536002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Jul 12 00:27:19.002505 systemd[1]: run-containerd-runc-k8s.io-5224fee6dc506b14fd485f990da4661413dc820976df356f8ca3aa10e42cc344-runc.Nv4oJg.mount: Deactivated successfully.