Jul 12 00:23:01.978447 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Jul 12 00:23:01.978483 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Jul 11 23:15:18 -00 2025 Jul 12 00:23:01.978507 kernel: efi: EFI v2.70 by EDK II Jul 12 00:23:01.978522 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Jul 12 00:23:01.978536 kernel: ACPI: Early table checksum verification disabled Jul 12 00:23:01.978550 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Jul 12 00:23:01.978565 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Jul 12 00:23:01.978580 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Jul 12 00:23:01.978593 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Jul 12 00:23:01.978607 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Jul 12 00:23:01.978625 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Jul 12 00:23:01.978638 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Jul 12 00:23:01.978652 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Jul 12 00:23:01.978666 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Jul 12 00:23:01.978682 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Jul 12 00:23:01.978700 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Jul 12 00:23:01.978715 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Jul 12 00:23:01.978729 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Jul 12 00:23:01.978743 kernel: printk: bootconsole [uart0] enabled Jul 12 00:23:01.978757 kernel: NUMA: Failed to initialise from firmware Jul 12 00:23:01.978772 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Jul 12 00:23:01.978787 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Jul 12 00:23:01.978801 kernel: Zone ranges: Jul 12 00:23:01.978815 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Jul 12 00:23:01.978829 kernel: DMA32 empty Jul 12 00:23:01.978843 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Jul 12 00:23:01.978861 kernel: Movable zone start for each node Jul 12 00:23:01.978875 kernel: Early memory node ranges Jul 12 00:23:01.978889 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Jul 12 00:23:01.978904 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Jul 12 00:23:01.978918 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Jul 12 00:23:01.978932 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Jul 12 00:23:01.983975 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Jul 12 00:23:01.984001 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Jul 12 00:23:01.984017 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Jul 12 00:23:01.984032 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Jul 12 00:23:01.984047 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Jul 12 00:23:01.984062 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Jul 12 00:23:01.984083 kernel: psci: probing for conduit method from ACPI. Jul 12 00:23:01.984098 kernel: psci: PSCIv1.0 detected in firmware. Jul 12 00:23:01.984119 kernel: psci: Using standard PSCI v0.2 function IDs Jul 12 00:23:01.984135 kernel: psci: Trusted OS migration not required Jul 12 00:23:01.984149 kernel: psci: SMC Calling Convention v1.1 Jul 12 00:23:01.984169 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Jul 12 00:23:01.984184 kernel: ACPI: SRAT not present Jul 12 00:23:01.984200 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 12 00:23:01.984215 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 12 00:23:01.984231 kernel: pcpu-alloc: [0] 0 [0] 1 Jul 12 00:23:01.984246 kernel: Detected PIPT I-cache on CPU0 Jul 12 00:23:01.984261 kernel: CPU features: detected: GIC system register CPU interface Jul 12 00:23:01.984276 kernel: CPU features: detected: Spectre-v2 Jul 12 00:23:01.984291 kernel: CPU features: detected: Spectre-v3a Jul 12 00:23:01.984306 kernel: CPU features: detected: Spectre-BHB Jul 12 00:23:01.984321 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 12 00:23:01.984339 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 12 00:23:01.984355 kernel: CPU features: detected: ARM erratum 1742098 Jul 12 00:23:01.984370 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Jul 12 00:23:01.984385 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Jul 12 00:23:01.984400 kernel: Policy zone: Normal Jul 12 00:23:01.984417 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:23:01.984434 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 12 00:23:01.984449 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 12 00:23:01.984464 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 12 00:23:01.984479 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 12 00:23:01.984498 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Jul 12 00:23:01.984514 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Jul 12 00:23:01.984530 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 12 00:23:01.984544 kernel: trace event string verifier disabled Jul 12 00:23:01.984559 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 12 00:23:01.984575 kernel: rcu: RCU event tracing is enabled. Jul 12 00:23:01.984590 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 12 00:23:01.984605 kernel: Trampoline variant of Tasks RCU enabled. Jul 12 00:23:01.984621 kernel: Tracing variant of Tasks RCU enabled. Jul 12 00:23:01.984636 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 12 00:23:01.984651 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 12 00:23:01.984665 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 12 00:23:01.984684 kernel: GICv3: 96 SPIs implemented Jul 12 00:23:01.984699 kernel: GICv3: 0 Extended SPIs implemented Jul 12 00:23:01.984714 kernel: GICv3: Distributor has no Range Selector support Jul 12 00:23:01.984728 kernel: Root IRQ handler: gic_handle_irq Jul 12 00:23:01.984743 kernel: GICv3: 16 PPIs implemented Jul 12 00:23:01.984758 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Jul 12 00:23:01.984773 kernel: ACPI: SRAT not present Jul 12 00:23:01.984787 kernel: ITS [mem 0x10080000-0x1009ffff] Jul 12 00:23:01.984802 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Jul 12 00:23:01.984818 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Jul 12 00:23:01.984833 kernel: GICv3: using LPI property table @0x00000004000b0000 Jul 12 00:23:01.984852 kernel: ITS: Using hypervisor restricted LPI range [128] Jul 12 00:23:01.984867 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Jul 12 00:23:01.984882 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Jul 12 00:23:01.984897 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Jul 12 00:23:01.984913 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Jul 12 00:23:01.984928 kernel: Console: colour dummy device 80x25 Jul 12 00:23:01.984943 kernel: printk: console [tty1] enabled Jul 12 00:23:01.984979 kernel: ACPI: Core revision 20210730 Jul 12 00:23:01.984996 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Jul 12 00:23:01.985012 kernel: pid_max: default: 32768 minimum: 301 Jul 12 00:23:01.985032 kernel: LSM: Security Framework initializing Jul 12 00:23:01.985048 kernel: SELinux: Initializing. Jul 12 00:23:01.985063 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:23:01.985079 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:23:01.985094 kernel: rcu: Hierarchical SRCU implementation. Jul 12 00:23:01.985109 kernel: Platform MSI: ITS@0x10080000 domain created Jul 12 00:23:01.985125 kernel: PCI/MSI: ITS@0x10080000 domain created Jul 12 00:23:01.985140 kernel: Remapping and enabling EFI services. Jul 12 00:23:01.985155 kernel: smp: Bringing up secondary CPUs ... Jul 12 00:23:01.985170 kernel: Detected PIPT I-cache on CPU1 Jul 12 00:23:01.985190 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Jul 12 00:23:01.985206 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Jul 12 00:23:01.985221 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Jul 12 00:23:01.985236 kernel: smp: Brought up 1 node, 2 CPUs Jul 12 00:23:01.985252 kernel: SMP: Total of 2 processors activated. Jul 12 00:23:01.985267 kernel: CPU features: detected: 32-bit EL0 Support Jul 12 00:23:01.985283 kernel: CPU features: detected: 32-bit EL1 Support Jul 12 00:23:01.985298 kernel: CPU features: detected: CRC32 instructions Jul 12 00:23:01.985313 kernel: CPU: All CPU(s) started at EL1 Jul 12 00:23:01.985333 kernel: alternatives: patching kernel code Jul 12 00:23:01.985348 kernel: devtmpfs: initialized Jul 12 00:23:01.985374 kernel: KASLR disabled due to lack of seed Jul 12 00:23:01.985393 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 12 00:23:01.985410 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 12 00:23:01.985426 kernel: pinctrl core: initialized pinctrl subsystem Jul 12 00:23:01.985442 kernel: SMBIOS 3.0.0 present. Jul 12 00:23:01.985458 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Jul 12 00:23:01.985474 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 12 00:23:01.985490 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 12 00:23:01.985506 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 12 00:23:01.985527 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 12 00:23:01.985543 kernel: audit: initializing netlink subsys (disabled) Jul 12 00:23:01.985559 kernel: audit: type=2000 audit(0.298:1): state=initialized audit_enabled=0 res=1 Jul 12 00:23:01.985575 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 12 00:23:01.985591 kernel: cpuidle: using governor menu Jul 12 00:23:01.985611 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 12 00:23:01.985628 kernel: ASID allocator initialised with 32768 entries Jul 12 00:23:01.985643 kernel: ACPI: bus type PCI registered Jul 12 00:23:01.985660 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 12 00:23:01.985675 kernel: Serial: AMBA PL011 UART driver Jul 12 00:23:01.985691 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 12 00:23:01.985708 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 12 00:23:01.985724 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 12 00:23:01.985740 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 12 00:23:01.985760 kernel: cryptd: max_cpu_qlen set to 1000 Jul 12 00:23:01.985776 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 12 00:23:01.985792 kernel: ACPI: Added _OSI(Module Device) Jul 12 00:23:01.985808 kernel: ACPI: Added _OSI(Processor Device) Jul 12 00:23:01.985824 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 12 00:23:01.985840 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 12 00:23:01.985856 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 12 00:23:01.985885 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 12 00:23:01.985923 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 12 00:23:01.985942 kernel: ACPI: Interpreter enabled Jul 12 00:23:01.986018 kernel: ACPI: Using GIC for interrupt routing Jul 12 00:23:01.986035 kernel: ACPI: MCFG table detected, 1 entries Jul 12 00:23:01.986051 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Jul 12 00:23:01.989988 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 12 00:23:01.999216 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 12 00:23:01.999427 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 12 00:23:01.999642 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Jul 12 00:23:01.999842 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Jul 12 00:23:01.999866 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Jul 12 00:23:01.999884 kernel: acpiphp: Slot [1] registered Jul 12 00:23:01.999901 kernel: acpiphp: Slot [2] registered Jul 12 00:23:01.999917 kernel: acpiphp: Slot [3] registered Jul 12 00:23:01.999933 kernel: acpiphp: Slot [4] registered Jul 12 00:23:01.999979 kernel: acpiphp: Slot [5] registered Jul 12 00:23:02.000000 kernel: acpiphp: Slot [6] registered Jul 12 00:23:02.000017 kernel: acpiphp: Slot [7] registered Jul 12 00:23:02.000039 kernel: acpiphp: Slot [8] registered Jul 12 00:23:02.000055 kernel: acpiphp: Slot [9] registered Jul 12 00:23:02.000071 kernel: acpiphp: Slot [10] registered Jul 12 00:23:02.000087 kernel: acpiphp: Slot [11] registered Jul 12 00:23:02.000103 kernel: acpiphp: Slot [12] registered Jul 12 00:23:02.000119 kernel: acpiphp: Slot [13] registered Jul 12 00:23:02.000135 kernel: acpiphp: Slot [14] registered Jul 12 00:23:02.000151 kernel: acpiphp: Slot [15] registered Jul 12 00:23:02.000167 kernel: acpiphp: Slot [16] registered Jul 12 00:23:02.000187 kernel: acpiphp: Slot [17] registered Jul 12 00:23:02.000203 kernel: acpiphp: Slot [18] registered Jul 12 00:23:02.000219 kernel: acpiphp: Slot [19] registered Jul 12 00:23:02.000235 kernel: acpiphp: Slot [20] registered Jul 12 00:23:02.000250 kernel: acpiphp: Slot [21] registered Jul 12 00:23:02.000266 kernel: acpiphp: Slot [22] registered Jul 12 00:23:02.000282 kernel: acpiphp: Slot [23] registered Jul 12 00:23:02.000298 kernel: acpiphp: Slot [24] registered Jul 12 00:23:02.000314 kernel: acpiphp: Slot [25] registered Jul 12 00:23:02.000329 kernel: acpiphp: Slot [26] registered Jul 12 00:23:02.000350 kernel: acpiphp: Slot [27] registered Jul 12 00:23:02.000366 kernel: acpiphp: Slot [28] registered Jul 12 00:23:02.000381 kernel: acpiphp: Slot [29] registered Jul 12 00:23:02.000397 kernel: acpiphp: Slot [30] registered Jul 12 00:23:02.000413 kernel: acpiphp: Slot [31] registered Jul 12 00:23:02.000429 kernel: PCI host bridge to bus 0000:00 Jul 12 00:23:02.000623 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Jul 12 00:23:02.000796 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 12 00:23:02.000990 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Jul 12 00:23:02.001164 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Jul 12 00:23:02.001387 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Jul 12 00:23:02.001593 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Jul 12 00:23:02.001785 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Jul 12 00:23:02.002006 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Jul 12 00:23:02.002210 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Jul 12 00:23:02.002397 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 12 00:23:02.002603 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Jul 12 00:23:02.002798 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Jul 12 00:23:02.003012 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Jul 12 00:23:02.003210 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Jul 12 00:23:02.003403 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 12 00:23:02.003622 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Jul 12 00:23:02.003828 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Jul 12 00:23:02.009122 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Jul 12 00:23:02.009334 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Jul 12 00:23:02.009529 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Jul 12 00:23:02.009706 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Jul 12 00:23:02.009882 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 12 00:23:02.010092 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Jul 12 00:23:02.010117 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 12 00:23:02.010135 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 12 00:23:02.010152 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 12 00:23:02.010168 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 12 00:23:02.010184 kernel: iommu: Default domain type: Translated Jul 12 00:23:02.010201 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 12 00:23:02.010217 kernel: vgaarb: loaded Jul 12 00:23:02.010234 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 12 00:23:02.010257 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 12 00:23:02.010274 kernel: PTP clock support registered Jul 12 00:23:02.010290 kernel: Registered efivars operations Jul 12 00:23:02.010306 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 12 00:23:02.010322 kernel: VFS: Disk quotas dquot_6.6.0 Jul 12 00:23:02.010338 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 12 00:23:02.010354 kernel: pnp: PnP ACPI init Jul 12 00:23:02.010550 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Jul 12 00:23:02.010579 kernel: pnp: PnP ACPI: found 1 devices Jul 12 00:23:02.010596 kernel: NET: Registered PF_INET protocol family Jul 12 00:23:02.010613 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 12 00:23:02.010630 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 12 00:23:02.010646 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 12 00:23:02.010663 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 12 00:23:02.010679 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 12 00:23:02.010696 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 12 00:23:02.010712 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:23:02.010733 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:23:02.010749 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 12 00:23:02.010765 kernel: PCI: CLS 0 bytes, default 64 Jul 12 00:23:02.010782 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Jul 12 00:23:02.010798 kernel: kvm [1]: HYP mode not available Jul 12 00:23:02.010814 kernel: Initialise system trusted keyrings Jul 12 00:23:02.010831 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 12 00:23:02.010847 kernel: Key type asymmetric registered Jul 12 00:23:02.010863 kernel: Asymmetric key parser 'x509' registered Jul 12 00:23:02.010884 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 12 00:23:02.010901 kernel: io scheduler mq-deadline registered Jul 12 00:23:02.010917 kernel: io scheduler kyber registered Jul 12 00:23:02.010933 kernel: io scheduler bfq registered Jul 12 00:23:02.011253 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Jul 12 00:23:02.011280 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 12 00:23:02.011297 kernel: ACPI: button: Power Button [PWRB] Jul 12 00:23:02.011314 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Jul 12 00:23:02.011330 kernel: ACPI: button: Sleep Button [SLPB] Jul 12 00:23:02.011352 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 12 00:23:02.011369 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Jul 12 00:23:02.011576 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Jul 12 00:23:02.011602 kernel: printk: console [ttyS0] disabled Jul 12 00:23:02.011619 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Jul 12 00:23:02.011635 kernel: printk: console [ttyS0] enabled Jul 12 00:23:02.011651 kernel: printk: bootconsole [uart0] disabled Jul 12 00:23:02.011667 kernel: thunder_xcv, ver 1.0 Jul 12 00:23:02.011683 kernel: thunder_bgx, ver 1.0 Jul 12 00:23:02.011705 kernel: nicpf, ver 1.0 Jul 12 00:23:02.011720 kernel: nicvf, ver 1.0 Jul 12 00:23:02.011929 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 12 00:23:02.013920 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-12T00:23:01 UTC (1752279781) Jul 12 00:23:02.013974 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 12 00:23:02.013996 kernel: NET: Registered PF_INET6 protocol family Jul 12 00:23:02.014012 kernel: Segment Routing with IPv6 Jul 12 00:23:02.014029 kernel: In-situ OAM (IOAM) with IPv6 Jul 12 00:23:02.014053 kernel: NET: Registered PF_PACKET protocol family Jul 12 00:23:02.014069 kernel: Key type dns_resolver registered Jul 12 00:23:02.014085 kernel: registered taskstats version 1 Jul 12 00:23:02.014101 kernel: Loading compiled-in X.509 certificates Jul 12 00:23:02.014118 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: de2ee1d04443f96c763927c453375bbe23b5752a' Jul 12 00:23:02.014134 kernel: Key type .fscrypt registered Jul 12 00:23:02.014150 kernel: Key type fscrypt-provisioning registered Jul 12 00:23:02.014166 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 12 00:23:02.014183 kernel: ima: Allocated hash algorithm: sha1 Jul 12 00:23:02.014204 kernel: ima: No architecture policies found Jul 12 00:23:02.014220 kernel: clk: Disabling unused clocks Jul 12 00:23:02.014236 kernel: Freeing unused kernel memory: 36416K Jul 12 00:23:02.014252 kernel: Run /init as init process Jul 12 00:23:02.014268 kernel: with arguments: Jul 12 00:23:02.014284 kernel: /init Jul 12 00:23:02.014300 kernel: with environment: Jul 12 00:23:02.014316 kernel: HOME=/ Jul 12 00:23:02.014332 kernel: TERM=linux Jul 12 00:23:02.014353 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 12 00:23:02.014374 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:23:02.014395 systemd[1]: Detected virtualization amazon. Jul 12 00:23:02.014413 systemd[1]: Detected architecture arm64. Jul 12 00:23:02.014431 systemd[1]: Running in initrd. Jul 12 00:23:02.014448 systemd[1]: No hostname configured, using default hostname. Jul 12 00:23:02.014465 systemd[1]: Hostname set to . Jul 12 00:23:02.014487 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:23:02.014505 systemd[1]: Queued start job for default target initrd.target. Jul 12 00:23:02.014522 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:23:02.014540 systemd[1]: Reached target cryptsetup.target. Jul 12 00:23:02.014557 systemd[1]: Reached target paths.target. Jul 12 00:23:02.014574 systemd[1]: Reached target slices.target. Jul 12 00:23:02.014591 systemd[1]: Reached target swap.target. Jul 12 00:23:02.014608 systemd[1]: Reached target timers.target. Jul 12 00:23:02.014631 systemd[1]: Listening on iscsid.socket. Jul 12 00:23:02.014649 systemd[1]: Listening on iscsiuio.socket. Jul 12 00:23:02.014666 systemd[1]: Listening on systemd-journald-audit.socket. Jul 12 00:23:02.014684 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 12 00:23:02.014701 systemd[1]: Listening on systemd-journald.socket. Jul 12 00:23:02.014719 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:23:02.014736 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:23:02.014754 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:23:02.014775 systemd[1]: Reached target sockets.target. Jul 12 00:23:02.014793 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:23:02.014811 systemd[1]: Finished network-cleanup.service. Jul 12 00:23:02.014828 systemd[1]: Starting systemd-fsck-usr.service... Jul 12 00:23:02.014846 systemd[1]: Starting systemd-journald.service... Jul 12 00:23:02.014863 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:23:02.014881 systemd[1]: Starting systemd-resolved.service... Jul 12 00:23:02.014899 systemd[1]: Starting systemd-vconsole-setup.service... Jul 12 00:23:02.014916 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:23:02.014939 kernel: audit: type=1130 audit(1752279781.976:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.014984 systemd[1]: Finished systemd-fsck-usr.service. Jul 12 00:23:02.015004 kernel: audit: type=1130 audit(1752279781.997:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.015021 systemd[1]: Finished systemd-vconsole-setup.service. Jul 12 00:23:02.015043 systemd-journald[310]: Journal started Jul 12 00:23:02.015136 systemd-journald[310]: Runtime Journal (/run/log/journal/ec2de79294f269ac5cdc3278f4a9bed0) is 8.0M, max 75.4M, 67.4M free. Jul 12 00:23:01.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:01.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:01.965088 systemd-modules-load[311]: Inserted module 'overlay' Jul 12 00:23:02.028816 systemd[1]: Starting dracut-cmdline-ask.service... Jul 12 00:23:02.028856 kernel: audit: type=1130 audit(1752279782.012:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.044772 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 12 00:23:02.051977 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 12 00:23:02.069164 systemd[1]: Started systemd-journald.service. Jul 12 00:23:02.069232 kernel: audit: type=1130 audit(1752279782.059:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.076502 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 12 00:23:02.089342 kernel: audit: type=1130 audit(1752279782.076:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.089391 kernel: Bridge firewalling registered Jul 12 00:23:02.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.091190 systemd-modules-load[311]: Inserted module 'br_netfilter' Jul 12 00:23:02.093371 systemd[1]: Finished dracut-cmdline-ask.service. Jul 12 00:23:02.099608 systemd[1]: Starting dracut-cmdline.service... Jul 12 00:23:02.111459 kernel: audit: type=1130 audit(1752279782.096:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.110166 systemd-resolved[312]: Positive Trust Anchors: Jul 12 00:23:02.110180 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:23:02.110233 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:23:02.146762 dracut-cmdline[327]: dracut-dracut-053 Jul 12 00:23:02.156172 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:23:02.176984 kernel: SCSI subsystem initialized Jul 12 00:23:02.200343 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 12 00:23:02.200410 kernel: device-mapper: uevent: version 1.0.3 Jul 12 00:23:02.204735 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 12 00:23:02.213150 systemd-modules-load[311]: Inserted module 'dm_multipath' Jul 12 00:23:02.216220 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:23:02.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.230431 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:23:02.239101 kernel: audit: type=1130 audit(1752279782.217:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.255530 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:23:02.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.268041 kernel: audit: type=1130 audit(1752279782.256:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.327986 kernel: Loading iSCSI transport class v2.0-870. Jul 12 00:23:02.348984 kernel: iscsi: registered transport (tcp) Jul 12 00:23:02.376969 kernel: iscsi: registered transport (qla4xxx) Jul 12 00:23:02.377057 kernel: QLogic iSCSI HBA Driver Jul 12 00:23:02.534121 kernel: random: crng init done Jul 12 00:23:02.534241 systemd-resolved[312]: Defaulting to hostname 'linux'. Jul 12 00:23:02.541645 systemd[1]: Started systemd-resolved.service. Jul 12 00:23:02.555160 kernel: audit: type=1130 audit(1752279782.542:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.543854 systemd[1]: Reached target nss-lookup.target. Jul 12 00:23:02.567003 systemd[1]: Finished dracut-cmdline.service. Jul 12 00:23:02.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:02.569130 systemd[1]: Starting dracut-pre-udev.service... Jul 12 00:23:02.638008 kernel: raid6: neonx8 gen() 6336 MB/s Jul 12 00:23:02.655995 kernel: raid6: neonx8 xor() 4711 MB/s Jul 12 00:23:02.673989 kernel: raid6: neonx4 gen() 6404 MB/s Jul 12 00:23:02.692011 kernel: raid6: neonx4 xor() 4872 MB/s Jul 12 00:23:02.710002 kernel: raid6: neonx2 gen() 5677 MB/s Jul 12 00:23:02.727995 kernel: raid6: neonx2 xor() 4514 MB/s Jul 12 00:23:02.746005 kernel: raid6: neonx1 gen() 4425 MB/s Jul 12 00:23:02.763998 kernel: raid6: neonx1 xor() 3665 MB/s Jul 12 00:23:02.782009 kernel: raid6: int64x8 gen() 3379 MB/s Jul 12 00:23:02.799999 kernel: raid6: int64x8 xor() 2069 MB/s Jul 12 00:23:02.818002 kernel: raid6: int64x4 gen() 3769 MB/s Jul 12 00:23:02.836000 kernel: raid6: int64x4 xor() 2181 MB/s Jul 12 00:23:02.854001 kernel: raid6: int64x2 gen() 3555 MB/s Jul 12 00:23:02.872004 kernel: raid6: int64x2 xor() 1927 MB/s Jul 12 00:23:02.890005 kernel: raid6: int64x1 gen() 2740 MB/s Jul 12 00:23:02.909766 kernel: raid6: int64x1 xor() 1439 MB/s Jul 12 00:23:02.909835 kernel: raid6: using algorithm neonx4 gen() 6404 MB/s Jul 12 00:23:02.909860 kernel: raid6: .... xor() 4872 MB/s, rmw enabled Jul 12 00:23:02.911675 kernel: raid6: using neon recovery algorithm Jul 12 00:23:02.932012 kernel: xor: measuring software checksum speed Jul 12 00:23:02.932089 kernel: 8regs : 9334 MB/sec Jul 12 00:23:02.938125 kernel: 32regs : 10234 MB/sec Jul 12 00:23:02.938195 kernel: arm64_neon : 9516 MB/sec Jul 12 00:23:02.938220 kernel: xor: using function: 32regs (10234 MB/sec) Jul 12 00:23:03.043005 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 12 00:23:03.063578 systemd[1]: Finished dracut-pre-udev.service. Jul 12 00:23:03.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:03.073000 audit: BPF prog-id=7 op=LOAD Jul 12 00:23:03.073000 audit: BPF prog-id=8 op=LOAD Jul 12 00:23:03.076680 systemd[1]: Starting systemd-udevd.service... Jul 12 00:23:03.107803 systemd-udevd[508]: Using default interface naming scheme 'v252'. Jul 12 00:23:03.119428 systemd[1]: Started systemd-udevd.service. Jul 12 00:23:03.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:03.129342 systemd[1]: Starting dracut-pre-trigger.service... Jul 12 00:23:03.162628 dracut-pre-trigger[520]: rd.md=0: removing MD RAID activation Jul 12 00:23:03.228086 systemd[1]: Finished dracut-pre-trigger.service. Jul 12 00:23:03.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:03.230122 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:23:03.340384 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:23:03.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:03.462073 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 12 00:23:03.462145 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Jul 12 00:23:03.488719 kernel: ena 0000:00:05.0: ENA device version: 0.10 Jul 12 00:23:03.488936 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Jul 12 00:23:03.489175 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Jul 12 00:23:03.489201 kernel: nvme nvme0: pci function 0000:00:04.0 Jul 12 00:23:03.489435 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:73:a3:f8:bf:1d Jul 12 00:23:03.497000 kernel: nvme nvme0: 2/0/0 default/read/poll queues Jul 12 00:23:03.505744 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 12 00:23:03.505810 kernel: GPT:9289727 != 16777215 Jul 12 00:23:03.508090 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 12 00:23:03.509435 kernel: GPT:9289727 != 16777215 Jul 12 00:23:03.511698 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 12 00:23:03.513530 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:03.517618 (udev-worker)[555]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:23:03.594986 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (557) Jul 12 00:23:03.648778 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 12 00:23:03.699881 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 12 00:23:03.703475 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 12 00:23:03.711381 systemd[1]: Starting disk-uuid.service... Jul 12 00:23:03.735721 disk-uuid[666]: Primary Header is updated. Jul 12 00:23:03.735721 disk-uuid[666]: Secondary Entries is updated. Jul 12 00:23:03.735721 disk-uuid[666]: Secondary Header is updated. Jul 12 00:23:03.747887 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 12 00:23:03.757000 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:03.971391 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:23:04.773997 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 12 00:23:04.774252 disk-uuid[667]: The operation has completed successfully. Jul 12 00:23:04.957785 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 12 00:23:04.958037 systemd[1]: Finished disk-uuid.service. Jul 12 00:23:04.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:04.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:04.993536 systemd[1]: Starting verity-setup.service... Jul 12 00:23:05.028315 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 12 00:23:05.132286 systemd[1]: Found device dev-mapper-usr.device. Jul 12 00:23:05.137877 systemd[1]: Finished verity-setup.service. Jul 12 00:23:05.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.142600 systemd[1]: Mounting sysusr-usr.mount... Jul 12 00:23:05.238991 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 12 00:23:05.239658 systemd[1]: Mounted sysusr-usr.mount. Jul 12 00:23:05.243236 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 12 00:23:05.247971 systemd[1]: Starting ignition-setup.service... Jul 12 00:23:05.253261 systemd[1]: Starting parse-ip-for-networkd.service... Jul 12 00:23:05.288766 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:23:05.288845 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 12 00:23:05.291443 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 12 00:23:05.327993 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 12 00:23:05.347594 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 12 00:23:05.376765 systemd[1]: Finished ignition-setup.service. Jul 12 00:23:05.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.381840 systemd[1]: Starting ignition-fetch-offline.service... Jul 12 00:23:05.428314 systemd[1]: Finished parse-ip-for-networkd.service. Jul 12 00:23:05.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.429000 audit: BPF prog-id=9 op=LOAD Jul 12 00:23:05.432650 systemd[1]: Starting systemd-networkd.service... Jul 12 00:23:05.482734 systemd-networkd[1191]: lo: Link UP Jul 12 00:23:05.482756 systemd-networkd[1191]: lo: Gained carrier Jul 12 00:23:05.486621 systemd-networkd[1191]: Enumeration completed Jul 12 00:23:05.487123 systemd-networkd[1191]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:23:05.490319 systemd[1]: Started systemd-networkd.service. Jul 12 00:23:05.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.496363 systemd[1]: Reached target network.target. Jul 12 00:23:05.497403 systemd-networkd[1191]: eth0: Link UP Jul 12 00:23:05.497412 systemd-networkd[1191]: eth0: Gained carrier Jul 12 00:23:05.500748 systemd[1]: Starting iscsiuio.service... Jul 12 00:23:05.517148 systemd-networkd[1191]: eth0: DHCPv4 address 172.31.25.27/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 12 00:23:05.527115 systemd[1]: Started iscsiuio.service. Jul 12 00:23:05.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.530487 systemd[1]: Starting iscsid.service... Jul 12 00:23:05.541245 iscsid[1196]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:23:05.541245 iscsid[1196]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 12 00:23:05.541245 iscsid[1196]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 12 00:23:05.541245 iscsid[1196]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 12 00:23:05.541245 iscsid[1196]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:23:05.562732 iscsid[1196]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 12 00:23:05.570729 systemd[1]: Started iscsid.service. Jul 12 00:23:05.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.573809 systemd[1]: Starting dracut-initqueue.service... Jul 12 00:23:05.598466 systemd[1]: Finished dracut-initqueue.service. Jul 12 00:23:05.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:05.600680 systemd[1]: Reached target remote-fs-pre.target. Jul 12 00:23:05.602528 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:23:05.603803 systemd[1]: Reached target remote-fs.target. Jul 12 00:23:05.606044 systemd[1]: Starting dracut-pre-mount.service... Jul 12 00:23:05.632058 systemd[1]: Finished dracut-pre-mount.service. Jul 12 00:23:05.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.144099 ignition[1167]: Ignition 2.14.0 Jul 12 00:23:06.144686 ignition[1167]: Stage: fetch-offline Jul 12 00:23:06.145313 ignition[1167]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:06.145431 ignition[1167]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:06.167161 ignition[1167]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:06.170051 ignition[1167]: Ignition finished successfully Jul 12 00:23:06.172430 systemd[1]: Finished ignition-fetch-offline.service. Jul 12 00:23:06.186698 kernel: kauditd_printk_skb: 18 callbacks suppressed Jul 12 00:23:06.187733 kernel: audit: type=1130 audit(1752279786.173:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.176314 systemd[1]: Starting ignition-fetch.service... Jul 12 00:23:06.198721 ignition[1215]: Ignition 2.14.0 Jul 12 00:23:06.198750 ignition[1215]: Stage: fetch Jul 12 00:23:06.199138 ignition[1215]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:06.199202 ignition[1215]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:06.215729 ignition[1215]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:06.218534 ignition[1215]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:06.232183 ignition[1215]: INFO : PUT result: OK Jul 12 00:23:06.236636 ignition[1215]: DEBUG : parsed url from cmdline: "" Jul 12 00:23:06.236636 ignition[1215]: INFO : no config URL provided Jul 12 00:23:06.236636 ignition[1215]: INFO : reading system config file "/usr/lib/ignition/user.ign" Jul 12 00:23:06.236636 ignition[1215]: INFO : no config at "/usr/lib/ignition/user.ign" Jul 12 00:23:06.236636 ignition[1215]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:06.250912 ignition[1215]: INFO : PUT result: OK Jul 12 00:23:06.250912 ignition[1215]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Jul 12 00:23:06.250912 ignition[1215]: INFO : GET result: OK Jul 12 00:23:06.250912 ignition[1215]: DEBUG : parsing config with SHA512: 2e5b422a15ef4e37ede4bbd228de05205f126e807d21119bce471f0c5e7138051c9e51d674d47ec2d1fd303c10f4865edfa3b50a08a57c5f56f9c960d147afb9 Jul 12 00:23:06.271633 unknown[1215]: fetched base config from "system" Jul 12 00:23:06.272030 unknown[1215]: fetched base config from "system" Jul 12 00:23:06.272048 unknown[1215]: fetched user config from "aws" Jul 12 00:23:06.274085 ignition[1215]: fetch: fetch complete Jul 12 00:23:06.274100 ignition[1215]: fetch: fetch passed Jul 12 00:23:06.274209 ignition[1215]: Ignition finished successfully Jul 12 00:23:06.284792 systemd[1]: Finished ignition-fetch.service. Jul 12 00:23:06.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.289894 systemd[1]: Starting ignition-kargs.service... Jul 12 00:23:06.299719 kernel: audit: type=1130 audit(1752279786.286:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.315190 ignition[1221]: Ignition 2.14.0 Jul 12 00:23:06.315762 ignition[1221]: Stage: kargs Jul 12 00:23:06.316149 ignition[1221]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:06.316207 ignition[1221]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:06.332745 ignition[1221]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:06.335355 ignition[1221]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:06.338875 ignition[1221]: INFO : PUT result: OK Jul 12 00:23:06.344312 ignition[1221]: kargs: kargs passed Jul 12 00:23:06.344443 ignition[1221]: Ignition finished successfully Jul 12 00:23:06.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.346103 systemd[1]: Finished ignition-kargs.service. Jul 12 00:23:06.361983 kernel: audit: type=1130 audit(1752279786.349:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.362844 systemd[1]: Starting ignition-disks.service... Jul 12 00:23:06.379039 ignition[1227]: Ignition 2.14.0 Jul 12 00:23:06.379070 ignition[1227]: Stage: disks Jul 12 00:23:06.379377 ignition[1227]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:06.379432 ignition[1227]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:06.395321 ignition[1227]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:06.397998 ignition[1227]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:06.401576 ignition[1227]: INFO : PUT result: OK Jul 12 00:23:06.407184 ignition[1227]: disks: disks passed Jul 12 00:23:06.407307 ignition[1227]: Ignition finished successfully Jul 12 00:23:06.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.424289 kernel: audit: type=1130 audit(1752279786.412:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.409207 systemd[1]: Finished ignition-disks.service. Jul 12 00:23:06.413827 systemd[1]: Reached target initrd-root-device.target. Jul 12 00:23:06.424392 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:23:06.427894 systemd[1]: Reached target local-fs.target. Jul 12 00:23:06.429829 systemd[1]: Reached target sysinit.target. Jul 12 00:23:06.435162 systemd[1]: Reached target basic.target. Jul 12 00:23:06.440604 systemd[1]: Starting systemd-fsck-root.service... Jul 12 00:23:06.478481 systemd-fsck[1235]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 12 00:23:06.485528 systemd[1]: Finished systemd-fsck-root.service. Jul 12 00:23:06.499331 kernel: audit: type=1130 audit(1752279786.488:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.490911 systemd[1]: Mounting sysroot.mount... Jul 12 00:23:06.523995 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 12 00:23:06.524973 systemd[1]: Mounted sysroot.mount. Jul 12 00:23:06.529162 systemd-networkd[1191]: eth0: Gained IPv6LL Jul 12 00:23:06.532456 systemd[1]: Reached target initrd-root-fs.target. Jul 12 00:23:06.544883 systemd[1]: Mounting sysroot-usr.mount... Jul 12 00:23:06.551781 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 12 00:23:06.552851 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 12 00:23:06.552910 systemd[1]: Reached target ignition-diskful.target. Jul 12 00:23:06.565360 systemd[1]: Mounted sysroot-usr.mount. Jul 12 00:23:06.589764 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 12 00:23:06.600336 systemd[1]: Starting initrd-setup-root.service... Jul 12 00:23:06.619905 initrd-setup-root[1257]: cut: /sysroot/etc/passwd: No such file or directory Jul 12 00:23:06.632256 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1252) Jul 12 00:23:06.632295 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:23:06.632319 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 12 00:23:06.632342 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 12 00:23:06.645879 initrd-setup-root[1281]: cut: /sysroot/etc/group: No such file or directory Jul 12 00:23:06.656996 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 12 00:23:06.658502 initrd-setup-root[1291]: cut: /sysroot/etc/shadow: No such file or directory Jul 12 00:23:06.668030 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 12 00:23:06.673896 initrd-setup-root[1299]: cut: /sysroot/etc/gshadow: No such file or directory Jul 12 00:23:06.863470 systemd[1]: Finished initrd-setup-root.service. Jul 12 00:23:06.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.868664 systemd[1]: Starting ignition-mount.service... Jul 12 00:23:06.889608 kernel: audit: type=1130 audit(1752279786.866:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.880632 systemd[1]: Starting sysroot-boot.service... Jul 12 00:23:06.899135 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 12 00:23:06.901233 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 12 00:23:06.921717 ignition[1317]: INFO : Ignition 2.14.0 Jul 12 00:23:06.925166 ignition[1317]: INFO : Stage: mount Jul 12 00:23:06.925166 ignition[1317]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:06.925166 ignition[1317]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:06.948907 ignition[1317]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:06.952724 systemd[1]: Finished sysroot-boot.service. Jul 12 00:23:06.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.959735 ignition[1317]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:06.970931 ignition[1317]: INFO : PUT result: OK Jul 12 00:23:06.972750 kernel: audit: type=1130 audit(1752279786.955:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.978028 ignition[1317]: INFO : mount: mount passed Jul 12 00:23:06.980700 ignition[1317]: INFO : Ignition finished successfully Jul 12 00:23:06.998250 kernel: audit: type=1130 audit(1752279786.980:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:06.979784 systemd[1]: Finished ignition-mount.service. Jul 12 00:23:06.984166 systemd[1]: Starting ignition-files.service... Jul 12 00:23:07.011562 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 12 00:23:07.037003 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1327) Jul 12 00:23:07.043748 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:23:07.043812 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 12 00:23:07.043837 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 12 00:23:07.060990 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 12 00:23:07.066612 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 12 00:23:07.087717 ignition[1346]: INFO : Ignition 2.14.0 Jul 12 00:23:07.087717 ignition[1346]: INFO : Stage: files Jul 12 00:23:07.091615 ignition[1346]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:07.091615 ignition[1346]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:07.110457 ignition[1346]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:07.113565 ignition[1346]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:07.117651 ignition[1346]: INFO : PUT result: OK Jul 12 00:23:07.123136 ignition[1346]: DEBUG : files: compiled without relabeling support, skipping Jul 12 00:23:07.130284 ignition[1346]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 12 00:23:07.133585 ignition[1346]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 12 00:23:07.173887 ignition[1346]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 12 00:23:07.177226 ignition[1346]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 12 00:23:07.177226 ignition[1346]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 12 00:23:07.176261 unknown[1346]: wrote ssh authorized keys file for user: core Jul 12 00:23:07.185865 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 12 00:23:07.185865 ignition[1346]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Jul 12 00:23:07.293829 ignition[1346]: INFO : GET result: OK Jul 12 00:23:07.481404 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Jul 12 00:23:07.487822 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 12 00:23:07.487822 ignition[1346]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:07.500468 ignition[1346]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2608687924" Jul 12 00:23:07.503683 ignition[1346]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2608687924": device or resource busy Jul 12 00:23:07.503683 ignition[1346]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2608687924", trying btrfs: device or resource busy Jul 12 00:23:07.503683 ignition[1346]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2608687924" Jul 12 00:23:07.503683 ignition[1346]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2608687924" Jul 12 00:23:07.532846 ignition[1346]: INFO : op(3): [started] unmounting "/mnt/oem2608687924" Jul 12 00:23:07.532846 ignition[1346]: INFO : op(3): [finished] unmounting "/mnt/oem2608687924" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:23:07.532846 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 12 00:23:07.575632 ignition[1346]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:07.575632 ignition[1346]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880917746" Jul 12 00:23:07.575632 ignition[1346]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880917746": device or resource busy Jul 12 00:23:07.575632 ignition[1346]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3880917746", trying btrfs: device or resource busy Jul 12 00:23:07.575632 ignition[1346]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880917746" Jul 12 00:23:07.575632 ignition[1346]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3880917746" Jul 12 00:23:07.575632 ignition[1346]: INFO : op(6): [started] unmounting "/mnt/oem3880917746" Jul 12 00:23:07.575632 ignition[1346]: INFO : op(6): [finished] unmounting "/mnt/oem3880917746" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 12 00:23:07.575632 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 12 00:23:07.575632 ignition[1346]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:07.534349 systemd[1]: mnt-oem2608687924.mount: Deactivated successfully. Jul 12 00:23:07.672056 ignition[1346]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3385852198" Jul 12 00:23:07.672056 ignition[1346]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3385852198": device or resource busy Jul 12 00:23:07.672056 ignition[1346]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3385852198", trying btrfs: device or resource busy Jul 12 00:23:07.672056 ignition[1346]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3385852198" Jul 12 00:23:07.672056 ignition[1346]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3385852198" Jul 12 00:23:07.672056 ignition[1346]: INFO : op(9): [started] unmounting "/mnt/oem3385852198" Jul 12 00:23:07.672056 ignition[1346]: INFO : op(9): [finished] unmounting "/mnt/oem3385852198" Jul 12 00:23:07.672056 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 12 00:23:07.672056 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 12 00:23:07.672056 ignition[1346]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 12 00:23:07.672056 ignition[1346]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2860199203" Jul 12 00:23:07.672056 ignition[1346]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2860199203": device or resource busy Jul 12 00:23:07.672056 ignition[1346]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2860199203", trying btrfs: device or resource busy Jul 12 00:23:07.672056 ignition[1346]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2860199203" Jul 12 00:23:07.672056 ignition[1346]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2860199203" Jul 12 00:23:07.672056 ignition[1346]: INFO : op(c): [started] unmounting "/mnt/oem2860199203" Jul 12 00:23:07.672056 ignition[1346]: INFO : op(c): [finished] unmounting "/mnt/oem2860199203" Jul 12 00:23:07.672056 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 12 00:23:07.672056 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 12 00:23:07.672056 ignition[1346]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Jul 12 00:23:08.310429 ignition[1346]: INFO : GET result: OK Jul 12 00:23:08.526027 systemd[1]: mnt-oem2860199203.mount: Deactivated successfully. Jul 12 00:23:08.862710 ignition[1346]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Jul 12 00:23:08.867422 ignition[1346]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 12 00:23:08.867422 ignition[1346]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 12 00:23:08.873521 ignition[1346]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Jul 12 00:23:08.873521 ignition[1346]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 12 00:23:08.880765 ignition[1346]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 12 00:23:08.880765 ignition[1346]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Jul 12 00:23:08.888019 ignition[1346]: INFO : files: op(12): [started] processing unit "nvidia.service" Jul 12 00:23:08.888019 ignition[1346]: INFO : files: op(12): [finished] processing unit "nvidia.service" Jul 12 00:23:08.888019 ignition[1346]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Jul 12 00:23:08.888019 ignition[1346]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:23:08.900110 ignition[1346]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:23:08.900110 ignition[1346]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Jul 12 00:23:08.900110 ignition[1346]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 12 00:23:08.900110 ignition[1346]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 12 00:23:08.900110 ignition[1346]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Jul 12 00:23:08.918042 ignition[1346]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Jul 12 00:23:08.918042 ignition[1346]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Jul 12 00:23:08.918042 ignition[1346]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Jul 12 00:23:08.918042 ignition[1346]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Jul 12 00:23:08.918042 ignition[1346]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Jul 12 00:23:08.936409 ignition[1346]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:23:08.936409 ignition[1346]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:23:08.936409 ignition[1346]: INFO : files: files passed Jul 12 00:23:08.936409 ignition[1346]: INFO : Ignition finished successfully Jul 12 00:23:08.939278 systemd[1]: Finished ignition-files.service. Jul 12 00:23:08.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:08.961991 kernel: audit: type=1130 audit(1752279788.950:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:08.962724 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 12 00:23:08.967408 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 12 00:23:08.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:08.973135 systemd[1]: Starting ignition-quench.service... Jul 12 00:23:08.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:08.999049 kernel: audit: type=1130 audit(1752279788.988:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:08.987330 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 12 00:23:09.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:08.987548 systemd[1]: Finished ignition-quench.service. Jul 12 00:23:09.015867 initrd-setup-root-after-ignition[1371]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 12 00:23:09.001907 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 12 00:23:09.004621 systemd[1]: Reached target ignition-complete.target. Jul 12 00:23:09.008065 systemd[1]: Starting initrd-parse-etc.service... Jul 12 00:23:09.044472 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 12 00:23:09.044771 systemd[1]: Finished initrd-parse-etc.service. Jul 12 00:23:09.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.049452 systemd[1]: Reached target initrd-fs.target. Jul 12 00:23:09.054251 systemd[1]: Reached target initrd.target. Jul 12 00:23:09.056211 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 12 00:23:09.064081 systemd[1]: Starting dracut-pre-pivot.service... Jul 12 00:23:09.092809 systemd[1]: Finished dracut-pre-pivot.service. Jul 12 00:23:09.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.097880 systemd[1]: Starting initrd-cleanup.service... Jul 12 00:23:09.123577 systemd[1]: Stopped target nss-lookup.target. Jul 12 00:23:09.127359 systemd[1]: Stopped target remote-cryptsetup.target. Jul 12 00:23:09.131385 systemd[1]: Stopped target timers.target. Jul 12 00:23:09.134790 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 12 00:23:09.136997 systemd[1]: Stopped dracut-pre-pivot.service. Jul 12 00:23:09.140925 systemd[1]: Stopped target initrd.target. Jul 12 00:23:09.144190 systemd[1]: Stopped target basic.target. Jul 12 00:23:09.151888 systemd[1]: Stopped target ignition-complete.target. Jul 12 00:23:09.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.155725 systemd[1]: Stopped target ignition-diskful.target. Jul 12 00:23:09.159603 systemd[1]: Stopped target initrd-root-device.target. Jul 12 00:23:09.163509 systemd[1]: Stopped target remote-fs.target. Jul 12 00:23:09.167048 systemd[1]: Stopped target remote-fs-pre.target. Jul 12 00:23:09.170723 systemd[1]: Stopped target sysinit.target. Jul 12 00:23:09.174062 systemd[1]: Stopped target local-fs.target. Jul 12 00:23:09.177332 systemd[1]: Stopped target local-fs-pre.target. Jul 12 00:23:09.180897 systemd[1]: Stopped target swap.target. Jul 12 00:23:09.184106 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 12 00:23:09.186391 systemd[1]: Stopped dracut-pre-mount.service. Jul 12 00:23:09.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.190057 systemd[1]: Stopped target cryptsetup.target. Jul 12 00:23:09.194902 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 12 00:23:09.197143 systemd[1]: Stopped dracut-initqueue.service. Jul 12 00:23:09.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.200790 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 12 00:23:09.203503 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 12 00:23:09.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.208031 systemd[1]: ignition-files.service: Deactivated successfully. Jul 12 00:23:09.210324 systemd[1]: Stopped ignition-files.service. Jul 12 00:23:09.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.215419 systemd[1]: Stopping ignition-mount.service... Jul 12 00:23:09.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.220183 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 12 00:23:09.220490 systemd[1]: Stopped kmod-static-nodes.service. Jul 12 00:23:09.224850 systemd[1]: Stopping sysroot-boot.service... Jul 12 00:23:09.232215 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 12 00:23:09.235617 systemd[1]: Stopped systemd-udev-trigger.service. Jul 12 00:23:09.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.245480 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 12 00:23:09.250817 systemd[1]: Stopped dracut-pre-trigger.service. Jul 12 00:23:09.257245 ignition[1384]: INFO : Ignition 2.14.0 Jul 12 00:23:09.257245 ignition[1384]: INFO : Stage: umount Jul 12 00:23:09.257245 ignition[1384]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 12 00:23:09.257245 ignition[1384]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 12 00:23:09.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.274853 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 12 00:23:09.275909 systemd[1]: Finished initrd-cleanup.service. Jul 12 00:23:09.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.288438 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 12 00:23:09.291312 ignition[1384]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 12 00:23:09.294235 ignition[1384]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 12 00:23:09.297144 ignition[1384]: INFO : PUT result: OK Jul 12 00:23:09.303626 ignition[1384]: INFO : umount: umount passed Jul 12 00:23:09.305992 ignition[1384]: INFO : Ignition finished successfully Jul 12 00:23:09.310563 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 12 00:23:09.312751 systemd[1]: Stopped ignition-mount.service. Jul 12 00:23:09.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.316440 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 12 00:23:09.316552 systemd[1]: Stopped ignition-disks.service. Jul 12 00:23:09.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.320601 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 12 00:23:09.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.320700 systemd[1]: Stopped ignition-kargs.service. Jul 12 00:23:09.320915 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 12 00:23:09.321027 systemd[1]: Stopped ignition-fetch.service. Jul 12 00:23:09.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.326912 systemd[1]: Stopped target network.target. Jul 12 00:23:09.328820 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 12 00:23:09.328928 systemd[1]: Stopped ignition-fetch-offline.service. Jul 12 00:23:09.332885 systemd[1]: Stopped target paths.target. Jul 12 00:23:09.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.368000 audit: BPF prog-id=6 op=UNLOAD Jul 12 00:23:09.334589 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 12 00:23:09.336384 systemd[1]: Stopped systemd-ask-password-console.path. Jul 12 00:23:09.338400 systemd[1]: Stopped target slices.target. Jul 12 00:23:09.342133 systemd[1]: Stopped target sockets.target. Jul 12 00:23:09.342654 systemd[1]: iscsid.socket: Deactivated successfully. Jul 12 00:23:09.342712 systemd[1]: Closed iscsid.socket. Jul 12 00:23:09.343028 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 12 00:23:09.343083 systemd[1]: Closed iscsiuio.socket. Jul 12 00:23:09.343350 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 12 00:23:09.343437 systemd[1]: Stopped ignition-setup.service. Jul 12 00:23:09.344126 systemd[1]: Stopping systemd-networkd.service... Jul 12 00:23:09.344712 systemd[1]: Stopping systemd-resolved.service... Jul 12 00:23:09.345381 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 12 00:23:09.345556 systemd[1]: Stopped sysroot-boot.service. Jul 12 00:23:09.345852 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 12 00:23:09.345929 systemd[1]: Stopped initrd-setup-root.service. Jul 12 00:23:09.362035 systemd-networkd[1191]: eth0: DHCPv6 lease lost Jul 12 00:23:09.363070 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 12 00:23:09.363338 systemd[1]: Stopped systemd-resolved.service. Jul 12 00:23:09.371091 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 12 00:23:09.377094 systemd[1]: Stopped systemd-networkd.service. Jul 12 00:23:09.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.405000 audit: BPF prog-id=9 op=UNLOAD Jul 12 00:23:09.407177 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 12 00:23:09.407263 systemd[1]: Closed systemd-networkd.socket. Jul 12 00:23:09.413831 systemd[1]: Stopping network-cleanup.service... Jul 12 00:23:09.421079 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 12 00:23:09.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.421209 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 12 00:23:09.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.427367 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 12 00:23:09.427493 systemd[1]: Stopped systemd-sysctl.service. Jul 12 00:23:09.431554 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 12 00:23:09.431652 systemd[1]: Stopped systemd-modules-load.service. Jul 12 00:23:09.437841 systemd[1]: Stopping systemd-udevd.service... Jul 12 00:23:09.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.444290 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 12 00:23:09.454814 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 12 00:23:09.455093 systemd[1]: Stopped network-cleanup.service. Jul 12 00:23:09.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.463192 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 12 00:23:09.463517 systemd[1]: Stopped systemd-udevd.service. Jul 12 00:23:09.467184 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 12 00:23:09.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.467269 systemd[1]: Closed systemd-udevd-control.socket. Jul 12 00:23:09.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.470331 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 12 00:23:09.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.471141 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 12 00:23:09.474790 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 12 00:23:09.474900 systemd[1]: Stopped dracut-pre-udev.service. Jul 12 00:23:09.477518 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 12 00:23:09.477616 systemd[1]: Stopped dracut-cmdline.service. Jul 12 00:23:09.481702 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 12 00:23:09.481800 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 12 00:23:09.487367 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 12 00:23:09.515311 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 12 00:23:09.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:09.515442 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 12 00:23:09.518290 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 12 00:23:09.518488 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 12 00:23:09.522997 systemd[1]: Reached target initrd-switch-root.target. Jul 12 00:23:09.534179 systemd[1]: Starting initrd-switch-root.service... Jul 12 00:23:09.553181 systemd[1]: Switching root. Jul 12 00:23:09.581639 systemd-journald[310]: Journal stopped Jul 12 00:23:15.531208 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Jul 12 00:23:15.531366 kernel: SELinux: Class mctp_socket not defined in policy. Jul 12 00:23:15.531446 kernel: SELinux: Class anon_inode not defined in policy. Jul 12 00:23:15.531483 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 12 00:23:15.531517 kernel: SELinux: policy capability network_peer_controls=1 Jul 12 00:23:15.531548 kernel: SELinux: policy capability open_perms=1 Jul 12 00:23:15.531580 kernel: SELinux: policy capability extended_socket_class=1 Jul 12 00:23:15.531621 kernel: SELinux: policy capability always_check_network=0 Jul 12 00:23:15.531660 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 12 00:23:15.531693 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 12 00:23:15.531767 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 12 00:23:15.531814 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 12 00:23:15.531859 systemd[1]: Successfully loaded SELinux policy in 115.067ms. Jul 12 00:23:15.531915 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.333ms. Jul 12 00:23:15.531978 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:23:15.532017 systemd[1]: Detected virtualization amazon. Jul 12 00:23:15.532050 systemd[1]: Detected architecture arm64. Jul 12 00:23:15.532084 systemd[1]: Detected first boot. Jul 12 00:23:15.532123 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:23:15.532156 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 12 00:23:15.532189 systemd[1]: Populated /etc with preset unit settings. Jul 12 00:23:15.532223 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:23:15.532258 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:23:15.532294 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:23:15.532324 kernel: kauditd_printk_skb: 54 callbacks suppressed Jul 12 00:23:15.532355 kernel: audit: type=1334 audit(1752279795.032:86): prog-id=12 op=LOAD Jul 12 00:23:15.532390 kernel: audit: type=1334 audit(1752279795.034:87): prog-id=3 op=UNLOAD Jul 12 00:23:15.532421 kernel: audit: type=1334 audit(1752279795.037:88): prog-id=13 op=LOAD Jul 12 00:23:15.532451 kernel: audit: type=1334 audit(1752279795.039:89): prog-id=14 op=LOAD Jul 12 00:23:15.532491 kernel: audit: type=1334 audit(1752279795.039:90): prog-id=4 op=UNLOAD Jul 12 00:23:15.532522 kernel: audit: type=1334 audit(1752279795.039:91): prog-id=5 op=UNLOAD Jul 12 00:23:15.532552 kernel: audit: type=1334 audit(1752279795.045:92): prog-id=15 op=LOAD Jul 12 00:23:15.532583 kernel: audit: type=1334 audit(1752279795.045:93): prog-id=12 op=UNLOAD Jul 12 00:23:15.532611 kernel: audit: type=1334 audit(1752279795.047:94): prog-id=16 op=LOAD Jul 12 00:23:15.532645 kernel: audit: type=1334 audit(1752279795.050:95): prog-id=17 op=LOAD Jul 12 00:23:15.532678 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 12 00:23:15.532709 systemd[1]: Stopped iscsiuio.service. Jul 12 00:23:15.532739 systemd[1]: iscsid.service: Deactivated successfully. Jul 12 00:23:15.532771 systemd[1]: Stopped iscsid.service. Jul 12 00:23:15.532804 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 12 00:23:15.532834 systemd[1]: Stopped initrd-switch-root.service. Jul 12 00:23:15.532871 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 12 00:23:15.532902 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 12 00:23:15.532934 systemd[1]: Created slice system-addon\x2drun.slice. Jul 12 00:23:15.532995 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 12 00:23:15.533028 systemd[1]: Created slice system-getty.slice. Jul 12 00:23:15.533059 systemd[1]: Created slice system-modprobe.slice. Jul 12 00:23:15.533090 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 12 00:23:15.533124 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 12 00:23:15.533158 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 12 00:23:15.533208 systemd[1]: Created slice user.slice. Jul 12 00:23:15.533239 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:23:15.533269 systemd[1]: Started systemd-ask-password-wall.path. Jul 12 00:23:15.533298 systemd[1]: Set up automount boot.automount. Jul 12 00:23:15.533330 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 12 00:23:15.533364 systemd[1]: Stopped target initrd-switch-root.target. Jul 12 00:23:15.533395 systemd[1]: Stopped target initrd-fs.target. Jul 12 00:23:15.533425 systemd[1]: Stopped target initrd-root-fs.target. Jul 12 00:23:15.533455 systemd[1]: Reached target integritysetup.target. Jul 12 00:23:15.533491 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:23:15.533524 systemd[1]: Reached target remote-fs.target. Jul 12 00:23:15.533555 systemd[1]: Reached target slices.target. Jul 12 00:23:15.533585 systemd[1]: Reached target swap.target. Jul 12 00:23:15.533615 systemd[1]: Reached target torcx.target. Jul 12 00:23:15.533645 systemd[1]: Reached target veritysetup.target. Jul 12 00:23:15.533677 systemd[1]: Listening on systemd-coredump.socket. Jul 12 00:23:15.533710 systemd[1]: Listening on systemd-initctl.socket. Jul 12 00:23:15.533740 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:23:15.533772 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:23:15.533810 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:23:15.533841 systemd[1]: Listening on systemd-userdbd.socket. Jul 12 00:23:15.533876 systemd[1]: Mounting dev-hugepages.mount... Jul 12 00:23:15.533907 systemd[1]: Mounting dev-mqueue.mount... Jul 12 00:23:15.538293 systemd[1]: Mounting media.mount... Jul 12 00:23:15.538342 systemd[1]: Mounting sys-kernel-debug.mount... Jul 12 00:23:15.538375 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 12 00:23:15.538408 systemd[1]: Mounting tmp.mount... Jul 12 00:23:15.538444 systemd[1]: Starting flatcar-tmpfiles.service... Jul 12 00:23:15.538486 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:15.538526 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:23:15.538559 systemd[1]: Starting modprobe@configfs.service... Jul 12 00:23:15.538589 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:15.538619 systemd[1]: Starting modprobe@drm.service... Jul 12 00:23:15.538649 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:15.538683 systemd[1]: Starting modprobe@fuse.service... Jul 12 00:23:15.538713 systemd[1]: Starting modprobe@loop.service... Jul 12 00:23:15.538744 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 12 00:23:15.538781 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 12 00:23:15.538811 systemd[1]: Stopped systemd-fsck-root.service. Jul 12 00:23:15.538841 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 12 00:23:15.538875 systemd[1]: Stopped systemd-fsck-usr.service. Jul 12 00:23:15.538904 systemd[1]: Stopped systemd-journald.service. Jul 12 00:23:15.538933 kernel: fuse: init (API version 7.34) Jul 12 00:23:15.538996 systemd[1]: Starting systemd-journald.service... Jul 12 00:23:15.539034 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:23:15.539064 kernel: loop: module loaded Jul 12 00:23:15.539101 systemd[1]: Starting systemd-network-generator.service... Jul 12 00:23:15.539132 systemd[1]: Starting systemd-remount-fs.service... Jul 12 00:23:15.539163 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:23:15.539194 systemd[1]: verity-setup.service: Deactivated successfully. Jul 12 00:23:15.539225 systemd[1]: Stopped verity-setup.service. Jul 12 00:23:15.539256 systemd[1]: Mounted dev-hugepages.mount. Jul 12 00:23:15.539288 systemd[1]: Mounted dev-mqueue.mount. Jul 12 00:23:15.539318 systemd[1]: Mounted media.mount. Jul 12 00:23:15.539346 systemd[1]: Mounted sys-kernel-debug.mount. Jul 12 00:23:15.539376 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 12 00:23:15.539434 systemd[1]: Mounted tmp.mount. Jul 12 00:23:15.539466 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:23:15.539497 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 12 00:23:15.539526 systemd[1]: Finished modprobe@configfs.service. Jul 12 00:23:15.539558 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:15.539591 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:15.539621 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:23:15.539650 systemd[1]: Finished modprobe@drm.service. Jul 12 00:23:15.539679 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:15.539709 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:15.539741 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 12 00:23:15.539775 systemd-journald[1497]: Journal started Jul 12 00:23:15.539890 systemd-journald[1497]: Runtime Journal (/run/log/journal/ec2de79294f269ac5cdc3278f4a9bed0) is 8.0M, max 75.4M, 67.4M free. Jul 12 00:23:10.379000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 12 00:23:10.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:23:10.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:23:10.547000 audit: BPF prog-id=10 op=LOAD Jul 12 00:23:10.547000 audit: BPF prog-id=10 op=UNLOAD Jul 12 00:23:10.547000 audit: BPF prog-id=11 op=LOAD Jul 12 00:23:10.547000 audit: BPF prog-id=11 op=UNLOAD Jul 12 00:23:10.792000 audit[1418]: AVC avc: denied { associate } for pid=1418 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 12 00:23:10.792000 audit[1418]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400018e7cc a1=400018aa80 a2=400019ecc0 a3=32 items=0 ppid=1401 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:10.792000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:23:10.796000 audit[1418]: AVC avc: denied { associate } for pid=1418 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 12 00:23:10.796000 audit[1418]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=400018e8a5 a2=1ed a3=0 items=2 ppid=1401 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:10.796000 audit: CWD cwd="/" Jul 12 00:23:10.796000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:23:10.796000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:23:10.796000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:23:15.032000 audit: BPF prog-id=12 op=LOAD Jul 12 00:23:15.034000 audit: BPF prog-id=3 op=UNLOAD Jul 12 00:23:15.037000 audit: BPF prog-id=13 op=LOAD Jul 12 00:23:15.039000 audit: BPF prog-id=14 op=LOAD Jul 12 00:23:15.039000 audit: BPF prog-id=4 op=UNLOAD Jul 12 00:23:15.039000 audit: BPF prog-id=5 op=UNLOAD Jul 12 00:23:15.547471 systemd[1]: Finished modprobe@fuse.service. Jul 12 00:23:15.045000 audit: BPF prog-id=15 op=LOAD Jul 12 00:23:15.045000 audit: BPF prog-id=12 op=UNLOAD Jul 12 00:23:15.047000 audit: BPF prog-id=16 op=LOAD Jul 12 00:23:15.050000 audit: BPF prog-id=17 op=LOAD Jul 12 00:23:15.050000 audit: BPF prog-id=13 op=UNLOAD Jul 12 00:23:15.050000 audit: BPF prog-id=14 op=UNLOAD Jul 12 00:23:15.056000 audit: BPF prog-id=18 op=LOAD Jul 12 00:23:15.056000 audit: BPF prog-id=15 op=UNLOAD Jul 12 00:23:15.058000 audit: BPF prog-id=19 op=LOAD Jul 12 00:23:15.061000 audit: BPF prog-id=20 op=LOAD Jul 12 00:23:15.061000 audit: BPF prog-id=16 op=UNLOAD Jul 12 00:23:15.061000 audit: BPF prog-id=17 op=UNLOAD Jul 12 00:23:15.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.072000 audit: BPF prog-id=18 op=UNLOAD Jul 12 00:23:15.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.395000 audit: BPF prog-id=21 op=LOAD Jul 12 00:23:15.396000 audit: BPF prog-id=22 op=LOAD Jul 12 00:23:15.396000 audit: BPF prog-id=23 op=LOAD Jul 12 00:23:15.396000 audit: BPF prog-id=19 op=UNLOAD Jul 12 00:23:15.396000 audit: BPF prog-id=20 op=UNLOAD Jul 12 00:23:15.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.527000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 12 00:23:15.527000 audit[1497]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffda0be7a0 a2=4000 a3=1 items=0 ppid=1 pid=1497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:15.527000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 12 00:23:15.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.552894 systemd[1]: Started systemd-journald.service. Jul 12 00:23:15.546000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.029052 systemd[1]: Queued start job for default target multi-user.target. Jul 12 00:23:10.775354 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:23:15.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.029079 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Jul 12 00:23:10.776468 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:23:15.063511 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 12 00:23:10.776522 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:23:15.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.552646 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:23:10.776592 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 12 00:23:15.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.553683 systemd[1]: Finished modprobe@loop.service. Jul 12 00:23:10.776620 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 12 00:23:15.560294 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:23:15.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:10.776694 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 12 00:23:15.563168 systemd[1]: Finished systemd-network-generator.service. Jul 12 00:23:10.776726 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 12 00:23:15.567240 systemd[1]: Finished systemd-remount-fs.service. Jul 12 00:23:10.777190 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 12 00:23:15.570430 systemd[1]: Reached target network-pre.target. Jul 12 00:23:10.777269 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:23:10.777306 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:23:10.786051 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 12 00:23:15.577933 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 12 00:23:10.786143 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 12 00:23:15.582418 systemd[1]: Mounting sys-kernel-config.mount... Jul 12 00:23:10.786194 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 12 00:23:10.786235 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 12 00:23:15.589971 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 12 00:23:10.786289 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 12 00:23:10.786328 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:10Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 12 00:23:14.116326 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:14Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:14.116895 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:14Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:14.117218 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:14Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:14.117714 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:14Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:23:14.117842 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:14Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 12 00:23:14.118099 /usr/lib/systemd/system-generators/torcx-generator[1418]: time="2025-07-12T00:23:14Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 12 00:23:15.593625 systemd[1]: Starting systemd-hwdb-update.service... Jul 12 00:23:15.597907 systemd[1]: Starting systemd-journal-flush.service... Jul 12 00:23:15.599964 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:15.602401 systemd[1]: Starting systemd-random-seed.service... Jul 12 00:23:15.607714 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:23:15.610001 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:23:15.615451 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 12 00:23:15.619311 systemd[1]: Mounted sys-kernel-config.mount. Jul 12 00:23:15.637262 systemd-journald[1497]: Time spent on flushing to /var/log/journal/ec2de79294f269ac5cdc3278f4a9bed0 is 84.559ms for 1136 entries. Jul 12 00:23:15.637262 systemd-journald[1497]: System Journal (/var/log/journal/ec2de79294f269ac5cdc3278f4a9bed0) is 8.0M, max 195.6M, 187.6M free. Jul 12 00:23:15.759731 systemd-journald[1497]: Received client request to flush runtime journal. Jul 12 00:23:15.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.642894 systemd[1]: Finished systemd-random-seed.service. Jul 12 00:23:15.645117 systemd[1]: Reached target first-boot-complete.target. Jul 12 00:23:15.711742 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:23:15.730089 systemd[1]: Finished flatcar-tmpfiles.service. Jul 12 00:23:15.734375 systemd[1]: Starting systemd-sysusers.service... Jul 12 00:23:15.761511 systemd[1]: Finished systemd-journal-flush.service. Jul 12 00:23:15.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.779601 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:23:15.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:15.784216 systemd[1]: Starting systemd-udev-settle.service... Jul 12 00:23:15.803624 udevadm[1537]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 12 00:23:15.961430 systemd[1]: Finished systemd-sysusers.service. Jul 12 00:23:15.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.561540 systemd[1]: Finished systemd-hwdb-update.service. Jul 12 00:23:16.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.565000 audit: BPF prog-id=24 op=LOAD Jul 12 00:23:16.565000 audit: BPF prog-id=25 op=LOAD Jul 12 00:23:16.565000 audit: BPF prog-id=7 op=UNLOAD Jul 12 00:23:16.565000 audit: BPF prog-id=8 op=UNLOAD Jul 12 00:23:16.568252 systemd[1]: Starting systemd-udevd.service... Jul 12 00:23:16.608291 systemd-udevd[1538]: Using default interface naming scheme 'v252'. Jul 12 00:23:16.686647 systemd[1]: Started systemd-udevd.service. Jul 12 00:23:16.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.689000 audit: BPF prog-id=26 op=LOAD Jul 12 00:23:16.692259 systemd[1]: Starting systemd-networkd.service... Jul 12 00:23:16.710000 audit: BPF prog-id=27 op=LOAD Jul 12 00:23:16.711000 audit: BPF prog-id=28 op=LOAD Jul 12 00:23:16.711000 audit: BPF prog-id=29 op=LOAD Jul 12 00:23:16.713584 systemd[1]: Starting systemd-userdbd.service... Jul 12 00:23:16.790735 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 12 00:23:16.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:16.826417 systemd[1]: Started systemd-userdbd.service. Jul 12 00:23:16.828562 (udev-worker)[1539]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:23:17.009693 systemd-networkd[1544]: lo: Link UP Jul 12 00:23:17.010463 systemd-networkd[1544]: lo: Gained carrier Jul 12 00:23:17.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.011564 systemd-networkd[1544]: Enumeration completed Jul 12 00:23:17.011742 systemd[1]: Started systemd-networkd.service. Jul 12 00:23:17.016338 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 12 00:23:17.020020 systemd-networkd[1544]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:23:17.030999 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:23:17.031281 systemd-networkd[1544]: eth0: Link UP Jul 12 00:23:17.032055 systemd-networkd[1544]: eth0: Gained carrier Jul 12 00:23:17.045074 systemd-networkd[1544]: eth0: DHCPv4 address 172.31.25.27/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 12 00:23:17.189316 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:23:17.223320 systemd[1]: Finished systemd-udev-settle.service. Jul 12 00:23:17.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.228749 systemd[1]: Starting lvm2-activation-early.service... Jul 12 00:23:17.257611 lvm[1657]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:23:17.299913 systemd[1]: Finished lvm2-activation-early.service. Jul 12 00:23:17.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.304162 systemd[1]: Reached target cryptsetup.target. Jul 12 00:23:17.308514 systemd[1]: Starting lvm2-activation.service... Jul 12 00:23:17.318086 lvm[1658]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:23:17.353854 systemd[1]: Finished lvm2-activation.service. Jul 12 00:23:17.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.356157 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:23:17.358193 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 12 00:23:17.358276 systemd[1]: Reached target local-fs.target. Jul 12 00:23:17.360204 systemd[1]: Reached target machines.target. Jul 12 00:23:17.364501 systemd[1]: Starting ldconfig.service... Jul 12 00:23:17.367653 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:17.367774 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:17.370091 systemd[1]: Starting systemd-boot-update.service... Jul 12 00:23:17.374820 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 12 00:23:17.384472 systemd[1]: Starting systemd-machine-id-commit.service... Jul 12 00:23:17.389438 systemd[1]: Starting systemd-sysext.service... Jul 12 00:23:17.400182 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1660 (bootctl) Jul 12 00:23:17.403092 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 12 00:23:17.429777 systemd[1]: Unmounting usr-share-oem.mount... Jul 12 00:23:17.460302 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 12 00:23:17.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.464016 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 12 00:23:17.464461 systemd[1]: Unmounted usr-share-oem.mount. Jul 12 00:23:17.506024 kernel: loop0: detected capacity change from 0 to 211168 Jul 12 00:23:17.604936 systemd-fsck[1671]: fsck.fat 4.2 (2021-01-31) Jul 12 00:23:17.604936 systemd-fsck[1671]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Jul 12 00:23:17.609364 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 12 00:23:17.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.614838 systemd[1]: Mounting boot.mount... Jul 12 00:23:17.641660 systemd[1]: Mounted boot.mount. Jul 12 00:23:17.685686 systemd[1]: Finished systemd-boot-update.service. Jul 12 00:23:17.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.739936 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 12 00:23:17.741180 systemd[1]: Finished systemd-machine-id-commit.service. Jul 12 00:23:17.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.804010 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 12 00:23:17.880003 kernel: loop1: detected capacity change from 0 to 211168 Jul 12 00:23:17.895618 (sd-sysext)[1687]: Using extensions 'kubernetes'. Jul 12 00:23:17.898053 (sd-sysext)[1687]: Merged extensions into '/usr'. Jul 12 00:23:17.942830 systemd[1]: Mounting usr-share-oem.mount... Jul 12 00:23:17.949463 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:17.953047 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:17.959818 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:17.965152 systemd[1]: Starting modprobe@loop.service... Jul 12 00:23:17.967883 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:17.968936 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:17.979795 systemd[1]: Mounted usr-share-oem.mount. Jul 12 00:23:17.982489 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:17.982768 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:17.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.985753 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:17.986125 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:17.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:17.989223 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:23:17.989548 systemd[1]: Finished modprobe@loop.service. Jul 12 00:23:17.992560 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:17.992801 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:23:17.998913 systemd[1]: Finished systemd-sysext.service. Jul 12 00:23:18.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.008636 systemd[1]: Starting ensure-sysext.service... Jul 12 00:23:18.015572 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 12 00:23:18.027883 systemd[1]: Reloading. Jul 12 00:23:18.110041 systemd-tmpfiles[1694]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 12 00:23:18.145090 systemd-tmpfiles[1694]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 12 00:23:18.167770 systemd-tmpfiles[1694]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 12 00:23:18.177470 /usr/lib/systemd/system-generators/torcx-generator[1716]: time="2025-07-12T00:23:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:23:18.177539 /usr/lib/systemd/system-generators/torcx-generator[1716]: time="2025-07-12T00:23:18Z" level=info msg="torcx already run" Jul 12 00:23:18.385040 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:23:18.385080 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:23:18.429367 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:23:18.579000 audit: BPF prog-id=30 op=LOAD Jul 12 00:23:18.579000 audit: BPF prog-id=21 op=UNLOAD Jul 12 00:23:18.579000 audit: BPF prog-id=31 op=LOAD Jul 12 00:23:18.579000 audit: BPF prog-id=32 op=LOAD Jul 12 00:23:18.580000 audit: BPF prog-id=22 op=UNLOAD Jul 12 00:23:18.580000 audit: BPF prog-id=23 op=UNLOAD Jul 12 00:23:18.580000 audit: BPF prog-id=33 op=LOAD Jul 12 00:23:18.580000 audit: BPF prog-id=34 op=LOAD Jul 12 00:23:18.580000 audit: BPF prog-id=24 op=UNLOAD Jul 12 00:23:18.580000 audit: BPF prog-id=25 op=UNLOAD Jul 12 00:23:18.585000 audit: BPF prog-id=35 op=LOAD Jul 12 00:23:18.586000 audit: BPF prog-id=27 op=UNLOAD Jul 12 00:23:18.586000 audit: BPF prog-id=36 op=LOAD Jul 12 00:23:18.586000 audit: BPF prog-id=37 op=LOAD Jul 12 00:23:18.586000 audit: BPF prog-id=28 op=UNLOAD Jul 12 00:23:18.586000 audit: BPF prog-id=29 op=UNLOAD Jul 12 00:23:18.588000 audit: BPF prog-id=38 op=LOAD Jul 12 00:23:18.588000 audit: BPF prog-id=26 op=UNLOAD Jul 12 00:23:18.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.614772 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 12 00:23:18.623147 systemd[1]: Starting audit-rules.service... Jul 12 00:23:18.627854 systemd[1]: Starting clean-ca-certificates.service... Jul 12 00:23:18.632817 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 12 00:23:18.636000 audit: BPF prog-id=39 op=LOAD Jul 12 00:23:18.643000 audit: BPF prog-id=40 op=LOAD Jul 12 00:23:18.640605 systemd[1]: Starting systemd-resolved.service... Jul 12 00:23:18.646548 systemd[1]: Starting systemd-timesyncd.service... Jul 12 00:23:18.653497 systemd[1]: Starting systemd-update-utmp.service... Jul 12 00:23:18.662641 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.667282 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:23:18.672090 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:18.676694 systemd[1]: Starting modprobe@loop.service... Jul 12 00:23:18.678575 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.678888 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:18.681313 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:18.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.681712 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:18.684910 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:18.692856 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.695687 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:23:18.697662 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.698065 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:18.708188 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.708000 audit[1775]: SYSTEM_BOOT pid=1775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.711094 systemd[1]: Starting modprobe@drm.service... Jul 12 00:23:18.713096 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.713415 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:18.716220 systemd[1]: Finished clean-ca-certificates.service. Jul 12 00:23:18.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.723201 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:23:18.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.726338 systemd[1]: Finished systemd-update-utmp.service. Jul 12 00:23:18.733676 systemd[1]: Finished ensure-sysext.service. Jul 12 00:23:18.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.736746 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:23:18.737129 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:23:18.752763 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:23:18.753116 systemd[1]: Finished modprobe@loop.service. Jul 12 00:23:18.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.755507 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:23:18.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.777944 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:23:18.778309 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:23:18.781401 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:23:18.781726 systemd[1]: Finished modprobe@drm.service. Jul 12 00:23:18.783921 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:23:18.804891 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 12 00:23:18.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.818544 ldconfig[1659]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 12 00:23:18.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.837011 systemd[1]: Finished ldconfig.service. Jul 12 00:23:18.841460 systemd[1]: Starting systemd-update-done.service... Jul 12 00:23:18.876710 systemd[1]: Finished systemd-update-done.service. Jul 12 00:23:18.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:18.891000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 12 00:23:18.891000 audit[1796]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff7d6b2a0 a2=420 a3=0 items=0 ppid=1770 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:18.891000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 12 00:23:18.892744 augenrules[1796]: No rules Jul 12 00:23:18.894355 systemd[1]: Finished audit-rules.service. Jul 12 00:23:18.908238 systemd[1]: Started systemd-timesyncd.service. Jul 12 00:23:18.910382 systemd[1]: Reached target time-set.target. Jul 12 00:23:18.944016 systemd-resolved[1773]: Positive Trust Anchors: Jul 12 00:23:18.944571 systemd-resolved[1773]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:23:18.944761 systemd-resolved[1773]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:23:18.990558 systemd-resolved[1773]: Defaulting to hostname 'linux'. Jul 12 00:23:18.993998 systemd[1]: Started systemd-resolved.service. Jul 12 00:23:18.996089 systemd[1]: Reached target network.target. Jul 12 00:23:18.997964 systemd[1]: Reached target nss-lookup.target. Jul 12 00:23:18.999884 systemd[1]: Reached target sysinit.target. Jul 12 00:23:19.001939 systemd[1]: Started motdgen.path. Jul 12 00:23:19.003635 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 12 00:23:19.006464 systemd[1]: Started logrotate.timer. Jul 12 00:23:19.008442 systemd[1]: Started mdadm.timer. Jul 12 00:23:19.008885 systemd-timesyncd[1774]: Contacted time server 46.37.96.107:123 (0.flatcar.pool.ntp.org). Jul 12 00:23:19.009031 systemd-timesyncd[1774]: Initial clock synchronization to Sat 2025-07-12 00:23:19.251544 UTC. Jul 12 00:23:19.010081 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 12 00:23:19.012099 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 12 00:23:19.012159 systemd[1]: Reached target paths.target. Jul 12 00:23:19.013898 systemd[1]: Reached target timers.target. Jul 12 00:23:19.016512 systemd[1]: Listening on dbus.socket. Jul 12 00:23:19.020508 systemd[1]: Starting docker.socket... Jul 12 00:23:19.027895 systemd[1]: Listening on sshd.socket. Jul 12 00:23:19.029847 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:19.030803 systemd[1]: Listening on docker.socket. Jul 12 00:23:19.032773 systemd[1]: Reached target sockets.target. Jul 12 00:23:19.034608 systemd[1]: Reached target basic.target. Jul 12 00:23:19.036418 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:23:19.036494 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:23:19.038726 systemd[1]: Starting containerd.service... Jul 12 00:23:19.043989 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 12 00:23:19.048515 systemd[1]: Starting dbus.service... Jul 12 00:23:19.052484 systemd[1]: Starting enable-oem-cloudinit.service... Jul 12 00:23:19.056690 systemd[1]: Starting extend-filesystems.service... Jul 12 00:23:19.058641 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 12 00:23:19.089813 jq[1807]: false Jul 12 00:23:19.065740 systemd[1]: Starting motdgen.service... Jul 12 00:23:19.070147 systemd-networkd[1544]: eth0: Gained IPv6LL Jul 12 00:23:19.070379 systemd[1]: Starting prepare-helm.service... Jul 12 00:23:19.074596 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 12 00:23:19.080252 systemd[1]: Starting sshd-keygen.service... Jul 12 00:23:19.090688 systemd[1]: Starting systemd-logind.service... Jul 12 00:23:19.092524 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:23:19.092688 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 12 00:23:19.101006 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 12 00:23:19.102726 systemd[1]: Starting update-engine.service... Jul 12 00:23:19.106827 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 12 00:23:19.112426 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 12 00:23:19.119199 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 12 00:23:19.119608 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 12 00:23:19.120398 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 12 00:23:19.120749 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 12 00:23:19.125124 systemd[1]: Reached target network-online.target. Jul 12 00:23:19.130136 systemd[1]: Started amazon-ssm-agent.service. Jul 12 00:23:19.211862 jq[1818]: true Jul 12 00:23:19.136848 systemd[1]: Starting kubelet.service... Jul 12 00:23:19.140984 systemd[1]: Started nvidia.service. Jul 12 00:23:19.263632 tar[1820]: linux-arm64/LICENSE Jul 12 00:23:19.264566 jq[1827]: true Jul 12 00:23:19.265207 tar[1820]: linux-arm64/helm Jul 12 00:23:19.320182 dbus-daemon[1806]: [system] SELinux support is enabled Jul 12 00:23:19.330346 systemd[1]: Started dbus.service. Jul 12 00:23:19.335432 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 12 00:23:19.335485 systemd[1]: Reached target system-config.target. Jul 12 00:23:19.337889 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 12 00:23:19.337931 systemd[1]: Reached target user-config.target. Jul 12 00:23:19.351372 extend-filesystems[1808]: Found loop1 Jul 12 00:23:19.353400 extend-filesystems[1808]: Found nvme0n1 Jul 12 00:23:19.353400 extend-filesystems[1808]: Found nvme0n1p1 Jul 12 00:23:19.353400 extend-filesystems[1808]: Found nvme0n1p2 Jul 12 00:23:19.353400 extend-filesystems[1808]: Found nvme0n1p3 Jul 12 00:23:19.353400 extend-filesystems[1808]: Found usr Jul 12 00:23:19.353400 extend-filesystems[1808]: Found nvme0n1p4 Jul 12 00:23:19.353400 extend-filesystems[1808]: Found nvme0n1p6 Jul 12 00:23:19.386080 extend-filesystems[1808]: Found nvme0n1p7 Jul 12 00:23:19.387826 extend-filesystems[1808]: Found nvme0n1p9 Jul 12 00:23:19.387826 extend-filesystems[1808]: Checking size of /dev/nvme0n1p9 Jul 12 00:23:19.409696 dbus-daemon[1806]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1544 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jul 12 00:23:19.422436 systemd[1]: Starting systemd-hostnamed.service... Jul 12 00:23:19.451752 systemd[1]: motdgen.service: Deactivated successfully. Jul 12 00:23:19.452131 systemd[1]: Finished motdgen.service. Jul 12 00:23:19.531743 extend-filesystems[1808]: Resized partition /dev/nvme0n1p9 Jul 12 00:23:19.537205 extend-filesystems[1868]: resize2fs 1.46.5 (30-Dec-2021) Jul 12 00:23:19.552059 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Jul 12 00:23:19.637001 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Jul 12 00:23:19.660197 extend-filesystems[1868]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Jul 12 00:23:19.660197 extend-filesystems[1868]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 12 00:23:19.660197 extend-filesystems[1868]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Jul 12 00:23:19.668647 extend-filesystems[1808]: Resized filesystem in /dev/nvme0n1p9 Jul 12 00:23:19.677142 bash[1873]: Updated "/home/core/.ssh/authorized_keys" Jul 12 00:23:19.677589 update_engine[1817]: I0712 00:23:19.676393 1817 main.cc:92] Flatcar Update Engine starting Jul 12 00:23:19.679154 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 12 00:23:19.690998 systemd[1]: Started update-engine.service. Jul 12 00:23:19.695895 systemd[1]: Started locksmithd.service. Jul 12 00:23:19.698813 update_engine[1817]: I0712 00:23:19.698556 1817 update_check_scheduler.cc:74] Next update check in 11m8s Jul 12 00:23:19.721860 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 12 00:23:19.722253 systemd[1]: Finished extend-filesystems.service. Jul 12 00:23:19.759396 amazon-ssm-agent[1821]: 2025/07/12 00:23:19 Failed to load instance info from vault. RegistrationKey does not exist. Jul 12 00:23:19.795614 amazon-ssm-agent[1821]: Initializing new seelog logger Jul 12 00:23:19.813302 amazon-ssm-agent[1821]: New Seelog Logger Creation Complete Jul 12 00:23:19.819190 amazon-ssm-agent[1821]: 2025/07/12 00:23:19 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Jul 12 00:23:19.820764 amazon-ssm-agent[1821]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Jul 12 00:23:19.821638 amazon-ssm-agent[1821]: 2025/07/12 00:23:19 processing appconfig overrides Jul 12 00:23:19.928769 env[1824]: time="2025-07-12T00:23:19.928665423Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 12 00:23:19.937973 systemd[1]: nvidia.service: Deactivated successfully. Jul 12 00:23:19.965314 systemd-logind[1813]: Watching system buttons on /dev/input/event0 (Power Button) Jul 12 00:23:19.969090 systemd-logind[1813]: Watching system buttons on /dev/input/event1 (Sleep Button) Jul 12 00:23:19.972762 systemd-logind[1813]: New seat seat0. Jul 12 00:23:19.996813 systemd[1]: Started systemd-logind.service. Jul 12 00:23:20.108486 env[1824]: time="2025-07-12T00:23:20.108343547Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 12 00:23:20.109006 env[1824]: time="2025-07-12T00:23:20.108930490Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:20.113047 env[1824]: time="2025-07-12T00:23:20.112954579Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:23:20.115254 env[1824]: time="2025-07-12T00:23:20.115191516Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:20.122205 env[1824]: time="2025-07-12T00:23:20.122137521Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:23:20.132445 env[1824]: time="2025-07-12T00:23:20.132371485Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:20.132699 env[1824]: time="2025-07-12T00:23:20.132660387Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 12 00:23:20.132824 env[1824]: time="2025-07-12T00:23:20.132792870Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:20.133230 env[1824]: time="2025-07-12T00:23:20.133191740Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:20.135214 env[1824]: time="2025-07-12T00:23:20.135158173Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:23:20.140416 env[1824]: time="2025-07-12T00:23:20.140350324Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:23:20.140615 env[1824]: time="2025-07-12T00:23:20.140579890Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 12 00:23:20.140911 env[1824]: time="2025-07-12T00:23:20.140863402Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 12 00:23:20.141083 env[1824]: time="2025-07-12T00:23:20.141051425Z" level=info msg="metadata content store policy set" policy=shared Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155266104Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155342058Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155373698Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155453558Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155495436Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155530798Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.155562734Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156181008Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156238094Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156272182Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156306864Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156339505Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156595049Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 12 00:23:20.157012 env[1824]: time="2025-07-12T00:23:20.156779338Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 12 00:23:20.158214 env[1824]: time="2025-07-12T00:23:20.158168027Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 12 00:23:20.158404 env[1824]: time="2025-07-12T00:23:20.158366757Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.158550 env[1824]: time="2025-07-12T00:23:20.158517156Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 12 00:23:20.159263 env[1824]: time="2025-07-12T00:23:20.159212780Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.159795 env[1824]: time="2025-07-12T00:23:20.159753703Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.160015 env[1824]: time="2025-07-12T00:23:20.159960062Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.160257 env[1824]: time="2025-07-12T00:23:20.160222209Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.160384 env[1824]: time="2025-07-12T00:23:20.160354284Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.160513 env[1824]: time="2025-07-12T00:23:20.160481524Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.161469 env[1824]: time="2025-07-12T00:23:20.161414628Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.162031 env[1824]: time="2025-07-12T00:23:20.161989713Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.163512 env[1824]: time="2025-07-12T00:23:20.162201006Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 12 00:23:20.164035 env[1824]: time="2025-07-12T00:23:20.163968016Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.164912 env[1824]: time="2025-07-12T00:23:20.164858142Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.165180 env[1824]: time="2025-07-12T00:23:20.165112066Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.166503 env[1824]: time="2025-07-12T00:23:20.166445425Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 12 00:23:20.167019 env[1824]: time="2025-07-12T00:23:20.166948983Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 12 00:23:20.167187 env[1824]: time="2025-07-12T00:23:20.167153859Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 12 00:23:20.172254 env[1824]: time="2025-07-12T00:23:20.172189243Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 12 00:23:20.172590 env[1824]: time="2025-07-12T00:23:20.172550847Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 12 00:23:20.173170 env[1824]: time="2025-07-12T00:23:20.173050362Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 12 00:23:20.175853 env[1824]: time="2025-07-12T00:23:20.175801256Z" level=info msg="Connect containerd service" Jul 12 00:23:20.176927 env[1824]: time="2025-07-12T00:23:20.176878503Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 12 00:23:20.178724 dbus-daemon[1806]: [system] Successfully activated service 'org.freedesktop.hostname1' Jul 12 00:23:20.178974 systemd[1]: Started systemd-hostnamed.service. Jul 12 00:23:20.182887 dbus-daemon[1806]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1854 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jul 12 00:23:20.188400 systemd[1]: Starting polkit.service... Jul 12 00:23:20.195483 env[1824]: time="2025-07-12T00:23:20.195424188Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:23:20.198612 env[1824]: time="2025-07-12T00:23:20.198522739Z" level=info msg="Start subscribing containerd event" Jul 12 00:23:20.198756 env[1824]: time="2025-07-12T00:23:20.198626117Z" level=info msg="Start recovering state" Jul 12 00:23:20.198822 env[1824]: time="2025-07-12T00:23:20.198749672Z" level=info msg="Start event monitor" Jul 12 00:23:20.198822 env[1824]: time="2025-07-12T00:23:20.198790264Z" level=info msg="Start snapshots syncer" Jul 12 00:23:20.198961 env[1824]: time="2025-07-12T00:23:20.198814782Z" level=info msg="Start cni network conf syncer for default" Jul 12 00:23:20.198961 env[1824]: time="2025-07-12T00:23:20.198835888Z" level=info msg="Start streaming server" Jul 12 00:23:20.199497 env[1824]: time="2025-07-12T00:23:20.198579491Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 12 00:23:20.199829 env[1824]: time="2025-07-12T00:23:20.199759830Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 12 00:23:20.200538 systemd[1]: Started containerd.service. Jul 12 00:23:20.203483 env[1824]: time="2025-07-12T00:23:20.203438017Z" level=info msg="containerd successfully booted in 0.278164s" Jul 12 00:23:20.250842 polkitd[1908]: Started polkitd version 121 Jul 12 00:23:20.314233 polkitd[1908]: Loading rules from directory /etc/polkit-1/rules.d Jul 12 00:23:20.314360 polkitd[1908]: Loading rules from directory /usr/share/polkit-1/rules.d Jul 12 00:23:20.331569 polkitd[1908]: Finished loading, compiling and executing 2 rules Jul 12 00:23:20.339194 dbus-daemon[1806]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jul 12 00:23:20.339490 systemd[1]: Started polkit.service. Jul 12 00:23:20.342140 polkitd[1908]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jul 12 00:23:20.391473 systemd-resolved[1773]: System hostname changed to 'ip-172-31-25-27'. Jul 12 00:23:20.391479 systemd-hostnamed[1854]: Hostname set to (transient) Jul 12 00:23:20.431856 coreos-metadata[1805]: Jul 12 00:23:20.430 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Jul 12 00:23:20.435429 coreos-metadata[1805]: Jul 12 00:23:20.435 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Jul 12 00:23:20.439170 coreos-metadata[1805]: Jul 12 00:23:20.439 INFO Fetch successful Jul 12 00:23:20.439170 coreos-metadata[1805]: Jul 12 00:23:20.439 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 12 00:23:20.441676 coreos-metadata[1805]: Jul 12 00:23:20.441 INFO Fetch successful Jul 12 00:23:20.446109 unknown[1805]: wrote ssh authorized keys file for user: core Jul 12 00:23:20.476580 update-ssh-keys[1929]: Updated "/home/core/.ssh/authorized_keys" Jul 12 00:23:20.518149 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 12 00:23:20.765378 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Create new startup processor Jul 12 00:23:20.799760 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [LongRunningPluginsManager] registered plugins: {} Jul 12 00:23:20.800074 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing bookkeeping folders Jul 12 00:23:20.800242 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO removing the completed state files Jul 12 00:23:20.800389 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing bookkeeping folders for long running plugins Jul 12 00:23:20.800536 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Jul 12 00:23:20.800673 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing healthcheck folders for long running plugins Jul 12 00:23:20.800809 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing locations for inventory plugin Jul 12 00:23:20.801006 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing default location for custom inventory Jul 12 00:23:20.801159 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing default location for file inventory Jul 12 00:23:20.801301 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Initializing default location for role inventory Jul 12 00:23:20.801446 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Init the cloudwatchlogs publisher Jul 12 00:23:20.801593 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:downloadContent Jul 12 00:23:20.801740 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:softwareInventory Jul 12 00:23:20.801911 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:runPowerShellScript Jul 12 00:23:20.802076 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:configureDocker Jul 12 00:23:20.802228 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:configurePackage Jul 12 00:23:20.802366 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:runDocument Jul 12 00:23:20.802530 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:updateSsmAgent Jul 12 00:23:20.802686 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:runDockerAction Jul 12 00:23:20.802838 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform independent plugin aws:refreshAssociation Jul 12 00:23:20.803035 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Successfully loaded platform dependent plugin aws:runShellScript Jul 12 00:23:20.803201 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Jul 12 00:23:20.803358 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO OS: linux, Arch: arm64 Jul 12 00:23:20.807167 amazon-ssm-agent[1821]: datastore file /var/lib/amazon/ssm/i-034cebd772dbca5fd/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Jul 12 00:23:20.878609 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] Starting document processing engine... Jul 12 00:23:20.974160 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [EngineProcessor] Starting Jul 12 00:23:21.068633 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Jul 12 00:23:21.159616 tar[1820]: linux-arm64/README.md Jul 12 00:23:21.164080 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] Starting message polling Jul 12 00:23:21.169395 systemd[1]: Finished prepare-helm.service. Jul 12 00:23:21.258994 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] Starting send replies to MDS Jul 12 00:23:21.354147 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [instanceID=i-034cebd772dbca5fd] Starting association polling Jul 12 00:23:21.387516 locksmithd[1884]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 12 00:23:21.449533 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Jul 12 00:23:21.545450 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [Association] Launching response handler Jul 12 00:23:21.641457 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Jul 12 00:23:21.737330 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Jul 12 00:23:21.833289 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Jul 12 00:23:21.929371 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [HealthCheck] HealthCheck reporting agent health. Jul 12 00:23:22.026234 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] Starting session document processing engine... Jul 12 00:23:22.122749 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] [EngineProcessor] Starting Jul 12 00:23:22.219320 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Jul 12 00:23:22.315944 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [OfflineService] Starting document processing engine... Jul 12 00:23:22.412847 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [OfflineService] [EngineProcessor] Starting Jul 12 00:23:22.510023 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [OfflineService] [EngineProcessor] Initial processing Jul 12 00:23:22.607237 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-034cebd772dbca5fd, requestId: 7e478ab2-4e37-4ac1-8cad-d58fa0d89739 Jul 12 00:23:22.704733 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [LongRunningPluginsManager] starting long running plugin manager Jul 12 00:23:22.802986 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [OfflineService] Starting message polling Jul 12 00:23:22.900786 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [OfflineService] Starting send replies to MDS Jul 12 00:23:22.999150 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] listening reply. Jul 12 00:23:23.097505 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Jul 12 00:23:23.191706 systemd[1]: Started kubelet.service. Jul 12 00:23:23.196053 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Jul 12 00:23:23.294895 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [StartupProcessor] Executing startup processor tasks Jul 12 00:23:23.394346 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Jul 12 00:23:23.493467 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Jul 12 00:23:23.592895 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.7 Jul 12 00:23:23.692436 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-034cebd772dbca5fd?role=subscribe&stream=input Jul 12 00:23:23.792100 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-034cebd772dbca5fd?role=subscribe&stream=input Jul 12 00:23:23.892161 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] Starting receiving message from control channel Jul 12 00:23:23.992219 amazon-ssm-agent[1821]: 2025-07-12 00:23:20 INFO [MessageGatewayService] [EngineProcessor] Initial processing Jul 12 00:23:24.092492 amazon-ssm-agent[1821]: 2025-07-12 00:23:22 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Jul 12 00:23:24.495641 sshd_keygen[1843]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 12 00:23:24.538367 systemd[1]: Finished sshd-keygen.service. Jul 12 00:23:24.543501 systemd[1]: Starting issuegen.service... Jul 12 00:23:24.559725 systemd[1]: issuegen.service: Deactivated successfully. Jul 12 00:23:24.560139 systemd[1]: Finished issuegen.service. Jul 12 00:23:24.565265 systemd[1]: Starting systemd-user-sessions.service... Jul 12 00:23:24.581740 systemd[1]: Finished systemd-user-sessions.service. Jul 12 00:23:24.586750 systemd[1]: Started getty@tty1.service. Jul 12 00:23:24.591774 systemd[1]: Started serial-getty@ttyS0.service. Jul 12 00:23:24.594186 systemd[1]: Reached target getty.target. Jul 12 00:23:24.596192 systemd[1]: Reached target multi-user.target. Jul 12 00:23:24.600800 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 12 00:23:24.617473 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 12 00:23:24.617812 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 12 00:23:24.620465 systemd[1]: Startup finished in 1.252s (kernel) + 8.656s (initrd) + 14.361s (userspace) = 24.269s. Jul 12 00:23:25.256031 kubelet[2020]: E0712 00:23:25.255912 2020 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:23:25.260415 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:23:25.260776 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:23:25.261367 systemd[1]: kubelet.service: Consumed 1.560s CPU time. Jul 12 00:23:28.028012 systemd[1]: Created slice system-sshd.slice. Jul 12 00:23:28.030563 systemd[1]: Started sshd@0-172.31.25.27:22-147.75.109.163:59800.service. Jul 12 00:23:28.384046 sshd[2040]: Accepted publickey for core from 147.75.109.163 port 59800 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:28.390020 sshd[2040]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:28.411614 systemd[1]: Created slice user-500.slice. Jul 12 00:23:28.414378 systemd[1]: Starting user-runtime-dir@500.service... Jul 12 00:23:28.423083 systemd-logind[1813]: New session 1 of user core. Jul 12 00:23:28.437677 systemd[1]: Finished user-runtime-dir@500.service. Jul 12 00:23:28.442283 systemd[1]: Starting user@500.service... Jul 12 00:23:28.450143 (systemd)[2043]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:28.637457 systemd[2043]: Queued start job for default target default.target. Jul 12 00:23:28.639180 systemd[2043]: Reached target paths.target. Jul 12 00:23:28.639455 systemd[2043]: Reached target sockets.target. Jul 12 00:23:28.639624 systemd[2043]: Reached target timers.target. Jul 12 00:23:28.639776 systemd[2043]: Reached target basic.target. Jul 12 00:23:28.640202 systemd[2043]: Reached target default.target. Jul 12 00:23:28.640291 systemd[1]: Started user@500.service. Jul 12 00:23:28.640527 systemd[2043]: Startup finished in 177ms. Jul 12 00:23:28.644605 systemd[1]: Started session-1.scope. Jul 12 00:23:28.805198 systemd[1]: Started sshd@1-172.31.25.27:22-147.75.109.163:59816.service. Jul 12 00:23:28.969410 sshd[2052]: Accepted publickey for core from 147.75.109.163 port 59816 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:28.972004 sshd[2052]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:28.980918 systemd[1]: Started session-2.scope. Jul 12 00:23:28.981918 systemd-logind[1813]: New session 2 of user core. Jul 12 00:23:29.115196 sshd[2052]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:29.119425 systemd[1]: sshd@1-172.31.25.27:22-147.75.109.163:59816.service: Deactivated successfully. Jul 12 00:23:29.120696 systemd[1]: session-2.scope: Deactivated successfully. Jul 12 00:23:29.121798 systemd-logind[1813]: Session 2 logged out. Waiting for processes to exit. Jul 12 00:23:29.123365 systemd-logind[1813]: Removed session 2. Jul 12 00:23:29.142484 systemd[1]: Started sshd@2-172.31.25.27:22-147.75.109.163:59828.service. Jul 12 00:23:29.309844 sshd[2058]: Accepted publickey for core from 147.75.109.163 port 59828 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:29.312887 sshd[2058]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:29.321951 systemd[1]: Started session-3.scope. Jul 12 00:23:29.323085 systemd-logind[1813]: New session 3 of user core. Jul 12 00:23:29.446583 sshd[2058]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:29.451060 systemd[1]: session-3.scope: Deactivated successfully. Jul 12 00:23:29.452242 systemd-logind[1813]: Session 3 logged out. Waiting for processes to exit. Jul 12 00:23:29.452617 systemd[1]: sshd@2-172.31.25.27:22-147.75.109.163:59828.service: Deactivated successfully. Jul 12 00:23:29.455035 systemd-logind[1813]: Removed session 3. Jul 12 00:23:29.475669 systemd[1]: Started sshd@3-172.31.25.27:22-147.75.109.163:59830.service. Jul 12 00:23:29.649067 sshd[2064]: Accepted publickey for core from 147.75.109.163 port 59830 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:29.651189 sshd[2064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:29.661187 systemd-logind[1813]: New session 4 of user core. Jul 12 00:23:29.662345 systemd[1]: Started session-4.scope. Jul 12 00:23:29.798186 sshd[2064]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:29.802907 systemd[1]: session-4.scope: Deactivated successfully. Jul 12 00:23:29.804164 systemd[1]: sshd@3-172.31.25.27:22-147.75.109.163:59830.service: Deactivated successfully. Jul 12 00:23:29.805908 systemd-logind[1813]: Session 4 logged out. Waiting for processes to exit. Jul 12 00:23:29.808389 systemd-logind[1813]: Removed session 4. Jul 12 00:23:29.827499 systemd[1]: Started sshd@4-172.31.25.27:22-147.75.109.163:59844.service. Jul 12 00:23:29.998705 sshd[2070]: Accepted publickey for core from 147.75.109.163 port 59844 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:30.001608 sshd[2070]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:30.011389 systemd-logind[1813]: New session 5 of user core. Jul 12 00:23:30.012435 systemd[1]: Started session-5.scope. Jul 12 00:23:30.181938 sudo[2073]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 12 00:23:30.183037 sudo[2073]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:30.202217 dbus-daemon[1806]: avc: received setenforce notice (enforcing=1) Jul 12 00:23:30.203520 sudo[2073]: pam_unix(sudo:session): session closed for user root Jul 12 00:23:30.228774 sshd[2070]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:30.234441 systemd[1]: sshd@4-172.31.25.27:22-147.75.109.163:59844.service: Deactivated successfully. Jul 12 00:23:30.235833 systemd[1]: session-5.scope: Deactivated successfully. Jul 12 00:23:30.237133 systemd-logind[1813]: Session 5 logged out. Waiting for processes to exit. Jul 12 00:23:30.239025 systemd-logind[1813]: Removed session 5. Jul 12 00:23:30.258340 systemd[1]: Started sshd@5-172.31.25.27:22-147.75.109.163:59850.service. Jul 12 00:23:30.429246 sshd[2077]: Accepted publickey for core from 147.75.109.163 port 59850 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:30.432000 sshd[2077]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:30.441378 systemd[1]: Started session-6.scope. Jul 12 00:23:30.442236 systemd-logind[1813]: New session 6 of user core. Jul 12 00:23:30.552198 sudo[2081]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 12 00:23:30.553264 sudo[2081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:30.559071 sudo[2081]: pam_unix(sudo:session): session closed for user root Jul 12 00:23:30.569137 sudo[2080]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 12 00:23:30.569717 sudo[2080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:30.587714 systemd[1]: Stopping audit-rules.service... Jul 12 00:23:30.589000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:23:30.592138 kernel: kauditd_printk_skb: 117 callbacks suppressed Jul 12 00:23:30.592212 kernel: audit: type=1305 audit(1752279810.589:209): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:23:30.597132 auditctl[2084]: No rules Jul 12 00:23:30.589000 audit[2084]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdae06000 a2=420 a3=0 items=0 ppid=1 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:30.608632 kernel: audit: type=1300 audit(1752279810.589:209): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdae06000 a2=420 a3=0 items=0 ppid=1 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:30.609286 systemd[1]: audit-rules.service: Deactivated successfully. Jul 12 00:23:30.589000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:23:30.613017 kernel: audit: type=1327 audit(1752279810.589:209): proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:23:30.609666 systemd[1]: Stopped audit-rules.service. Jul 12 00:23:30.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.622168 kernel: audit: type=1131 audit(1752279810.608:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.617378 systemd[1]: Starting audit-rules.service... Jul 12 00:23:30.648927 augenrules[2101]: No rules Jul 12 00:23:30.650656 systemd[1]: Finished audit-rules.service. Jul 12 00:23:30.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.659000 audit[2080]: USER_END pid=2080 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.660304 sudo[2080]: pam_unix(sudo:session): session closed for user root Jul 12 00:23:30.669640 kernel: audit: type=1130 audit(1752279810.650:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.669741 kernel: audit: type=1106 audit(1752279810.659:212): pid=2080 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.659000 audit[2080]: CRED_DISP pid=2080 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.678273 kernel: audit: type=1104 audit(1752279810.659:213): pid=2080 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.691838 sshd[2077]: pam_unix(sshd:session): session closed for user core Jul 12 00:23:30.692000 audit[2077]: USER_END pid=2077 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.697671 systemd[1]: sshd@5-172.31.25.27:22-147.75.109.163:59850.service: Deactivated successfully. Jul 12 00:23:30.698867 systemd[1]: session-6.scope: Deactivated successfully. Jul 12 00:23:30.700704 systemd-logind[1813]: Session 6 logged out. Waiting for processes to exit. Jul 12 00:23:30.693000 audit[2077]: CRED_DISP pid=2077 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.702542 systemd-logind[1813]: Removed session 6. Jul 12 00:23:30.715419 kernel: audit: type=1106 audit(1752279810.692:214): pid=2077 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.715525 kernel: audit: type=1104 audit(1752279810.693:215): pid=2077 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.27:22-147.75.109.163:59850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.728031 kernel: audit: type=1131 audit(1752279810.693:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.25.27:22-147.75.109.163:59850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.727250 systemd[1]: Started sshd@6-172.31.25.27:22-147.75.109.163:59862.service. Jul 12 00:23:30.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.27:22-147.75.109.163:59862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:30.897000 audit[2107]: USER_ACCT pid=2107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.898542 sshd[2107]: Accepted publickey for core from 147.75.109.163 port 59862 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:23:30.900000 audit[2107]: CRED_ACQ pid=2107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.900000 audit[2107]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5cc8320 a2=3 a3=1 items=0 ppid=1 pid=2107 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:30.900000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:23:30.902841 sshd[2107]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:23:30.911858 systemd[1]: Started session-7.scope. Jul 12 00:23:30.912878 systemd-logind[1813]: New session 7 of user core. Jul 12 00:23:30.921000 audit[2107]: USER_START pid=2107 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:30.924000 audit[2109]: CRED_ACQ pid=2109 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:23:31.020000 audit[2110]: USER_ACCT pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.021924 sudo[2110]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 12 00:23:31.021000 audit[2110]: CRED_REFR pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.022544 sudo[2110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:23:31.025000 audit[2110]: USER_START pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.104459 systemd[1]: Starting docker.service... Jul 12 00:23:31.223897 env[2120]: time="2025-07-12T00:23:31.223801407Z" level=info msg="Starting up" Jul 12 00:23:31.226730 env[2120]: time="2025-07-12T00:23:31.226670148Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:23:31.226941 env[2120]: time="2025-07-12T00:23:31.226892527Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:23:31.227169 env[2120]: time="2025-07-12T00:23:31.227123486Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:23:31.227303 env[2120]: time="2025-07-12T00:23:31.227272588Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:23:31.232659 env[2120]: time="2025-07-12T00:23:31.232597431Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:23:31.232900 env[2120]: time="2025-07-12T00:23:31.232862079Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:23:31.233089 env[2120]: time="2025-07-12T00:23:31.233048992Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:23:31.233227 env[2120]: time="2025-07-12T00:23:31.233195242Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:23:31.288980 env[2120]: time="2025-07-12T00:23:31.288904179Z" level=info msg="Loading containers: start." Jul 12 00:23:31.390000 audit[2150]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.390000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc32d6a60 a2=0 a3=1 items=0 ppid=2120 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.390000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 12 00:23:31.395000 audit[2152]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.395000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe5538c40 a2=0 a3=1 items=0 ppid=2120 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.395000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 12 00:23:31.400000 audit[2154]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.400000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc6ee9d60 a2=0 a3=1 items=0 ppid=2120 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.400000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:23:31.404000 audit[2156]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.404000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd4581060 a2=0 a3=1 items=0 ppid=2120 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.404000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:23:31.411000 audit[2158]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.411000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc0bbcca0 a2=0 a3=1 items=0 ppid=2120 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.411000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 12 00:23:31.444000 audit[2163]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.444000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdb898460 a2=0 a3=1 items=0 ppid=2120 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.444000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 12 00:23:31.463000 audit[2166]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.463000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffecd4e620 a2=0 a3=1 items=0 ppid=2120 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.463000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 12 00:23:31.468000 audit[2168]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.468000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc7003000 a2=0 a3=1 items=0 ppid=2120 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 12 00:23:31.472000 audit[2170]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.472000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffdc997730 a2=0 a3=1 items=0 ppid=2120 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:31.492000 audit[2174]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.492000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcc0d9590 a2=0 a3=1 items=0 ppid=2120 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.492000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:31.501000 audit[2175]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.501000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff388e3d0 a2=0 a3=1 items=0 ppid=2120 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.501000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:31.522011 kernel: Initializing XFRM netlink socket Jul 12 00:23:31.570916 env[2120]: time="2025-07-12T00:23:31.570849303Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 12 00:23:31.573329 (udev-worker)[2130]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:23:31.607000 audit[2183]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.607000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffc6ebc8f0 a2=0 a3=1 items=0 ppid=2120 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.607000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 12 00:23:31.623000 audit[2186]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.623000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffdfc77700 a2=0 a3=1 items=0 ppid=2120 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 12 00:23:31.631000 audit[2189]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.631000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffcdaa0a00 a2=0 a3=1 items=0 ppid=2120 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.631000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 12 00:23:31.635000 audit[2191]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.635000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc6af20a0 a2=0 a3=1 items=0 ppid=2120 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.635000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 12 00:23:31.641000 audit[2193]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.641000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff0382760 a2=0 a3=1 items=0 ppid=2120 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.641000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 12 00:23:31.647000 audit[2195]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.647000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffba6dee0 a2=0 a3=1 items=0 ppid=2120 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.647000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 12 00:23:31.652000 audit[2197]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.652000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffce661500 a2=0 a3=1 items=0 ppid=2120 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.652000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 12 00:23:31.667000 audit[2200]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.667000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc9cd44e0 a2=0 a3=1 items=0 ppid=2120 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 12 00:23:31.672000 audit[2202]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.672000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffee888fb0 a2=0 a3=1 items=0 ppid=2120 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:23:31.678000 audit[2204]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.678000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff6f07440 a2=0 a3=1 items=0 ppid=2120 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.678000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:23:31.682000 audit[2206]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.682000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd8c542d0 a2=0 a3=1 items=0 ppid=2120 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.682000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 12 00:23:31.684629 systemd-networkd[1544]: docker0: Link UP Jul 12 00:23:31.706000 audit[2210]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.706000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd9c69ed0 a2=0 a3=1 items=0 ppid=2120 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.706000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:31.716000 audit[2211]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:31.716000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd6a828e0 a2=0 a3=1 items=0 ppid=2120 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:31.716000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:23:31.717901 env[2120]: time="2025-07-12T00:23:31.717827004Z" level=info msg="Loading containers: done." Jul 12 00:23:31.771692 env[2120]: time="2025-07-12T00:23:31.771536354Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 12 00:23:31.772615 env[2120]: time="2025-07-12T00:23:31.772568459Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 12 00:23:31.773422 env[2120]: time="2025-07-12T00:23:31.773351891Z" level=info msg="Daemon has completed initialization" Jul 12 00:23:31.810282 systemd[1]: Started docker.service. Jul 12 00:23:31.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:31.825297 env[2120]: time="2025-07-12T00:23:31.825025561Z" level=info msg="API listen on /run/docker.sock" Jul 12 00:23:33.606798 env[1824]: time="2025-07-12T00:23:33.606737420Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 12 00:23:34.304054 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3949281762.mount: Deactivated successfully. Jul 12 00:23:35.415067 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 12 00:23:35.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:35.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:35.415437 systemd[1]: Stopped kubelet.service. Jul 12 00:23:35.415545 systemd[1]: kubelet.service: Consumed 1.560s CPU time. Jul 12 00:23:35.418244 systemd[1]: Starting kubelet.service... Jul 12 00:23:35.781771 systemd[1]: Started kubelet.service. Jul 12 00:23:35.792435 kernel: kauditd_printk_skb: 86 callbacks suppressed Jul 12 00:23:35.792621 kernel: audit: type=1130 audit(1752279815.781:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:35.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:35.881340 kubelet[2247]: E0712 00:23:35.881262 2247 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:23:35.888462 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:23:35.888784 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:23:35.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:35.898000 kernel: audit: type=1131 audit(1752279815.888:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:36.275138 env[1824]: time="2025-07-12T00:23:36.275075070Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:36.278634 env[1824]: time="2025-07-12T00:23:36.278576983Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:36.282193 env[1824]: time="2025-07-12T00:23:36.282113002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:36.285891 env[1824]: time="2025-07-12T00:23:36.285817574Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:36.287988 env[1824]: time="2025-07-12T00:23:36.287875615Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:04ac773cca35cc457f24a6501b6b308d63a2cddd1aec14fe95559bccca3010a4\"" Jul 12 00:23:36.290874 env[1824]: time="2025-07-12T00:23:36.290817396Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 12 00:23:38.208326 env[1824]: time="2025-07-12T00:23:38.208242166Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:38.211147 env[1824]: time="2025-07-12T00:23:38.211065451Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:38.216291 env[1824]: time="2025-07-12T00:23:38.216208034Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:38.220279 env[1824]: time="2025-07-12T00:23:38.220195108Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:38.224028 env[1824]: time="2025-07-12T00:23:38.223024337Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:99a259072231375ad69a369cdf5620d60cdff72d450951c603fad8a94667af65\"" Jul 12 00:23:38.225168 env[1824]: time="2025-07-12T00:23:38.225105432Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 12 00:23:39.790807 env[1824]: time="2025-07-12T00:23:39.790736722Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:39.795645 env[1824]: time="2025-07-12T00:23:39.795590912Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:39.800886 env[1824]: time="2025-07-12T00:23:39.800832574Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:39.806061 env[1824]: time="2025-07-12T00:23:39.806004036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:39.810063 env[1824]: time="2025-07-12T00:23:39.808225564Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:bb3da57746ca4726b669d35145eb9b4085643c61bbc80b9df3bf1e6021ba9eaf\"" Jul 12 00:23:39.811449 env[1824]: time="2025-07-12T00:23:39.811393099Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 12 00:23:41.202238 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2955381308.mount: Deactivated successfully. Jul 12 00:23:42.173467 env[1824]: time="2025-07-12T00:23:42.173398561Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:42.177737 env[1824]: time="2025-07-12T00:23:42.177662528Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:42.181468 env[1824]: time="2025-07-12T00:23:42.181376420Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:42.185540 env[1824]: time="2025-07-12T00:23:42.185455145Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:42.188285 env[1824]: time="2025-07-12T00:23:42.187170612Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:c26522e54bad2e6bfbb1bf11500833c94433076a3fa38436a2ec496a422c5455\"" Jul 12 00:23:42.189089 env[1824]: time="2025-07-12T00:23:42.189039637Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 12 00:23:42.725095 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1189621347.mount: Deactivated successfully. Jul 12 00:23:44.218286 env[1824]: time="2025-07-12T00:23:44.218210790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.220986 env[1824]: time="2025-07-12T00:23:44.220892104Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.227041 env[1824]: time="2025-07-12T00:23:44.225941998Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.230220 env[1824]: time="2025-07-12T00:23:44.230115487Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.232993 env[1824]: time="2025-07-12T00:23:44.232909824Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Jul 12 00:23:44.233936 env[1824]: time="2025-07-12T00:23:44.233885940Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 12 00:23:44.721828 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3194940915.mount: Deactivated successfully. Jul 12 00:23:44.737131 env[1824]: time="2025-07-12T00:23:44.737039569Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.742132 env[1824]: time="2025-07-12T00:23:44.742068810Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.745299 env[1824]: time="2025-07-12T00:23:44.745213702Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.749201 env[1824]: time="2025-07-12T00:23:44.749131432Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:44.750249 env[1824]: time="2025-07-12T00:23:44.750189021Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 12 00:23:44.751173 env[1824]: time="2025-07-12T00:23:44.751109269Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 12 00:23:45.335915 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2125708686.mount: Deactivated successfully. Jul 12 00:23:45.915000 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 12 00:23:45.915360 systemd[1]: Stopped kubelet.service. Jul 12 00:23:45.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:45.925772 systemd[1]: Starting kubelet.service... Jul 12 00:23:45.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:45.936670 kernel: audit: type=1130 audit(1752279825.914:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:45.936816 kernel: audit: type=1131 audit(1752279825.914:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:46.328569 systemd[1]: Started kubelet.service. Jul 12 00:23:46.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:46.339006 kernel: audit: type=1130 audit(1752279826.328:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:46.419411 kubelet[2257]: E0712 00:23:46.419336 2257 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:23:46.423154 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:23:46.423466 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:23:46.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:46.433206 kernel: audit: type=1131 audit(1752279826.422:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:23:48.281428 env[1824]: time="2025-07-12T00:23:48.281357670Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.284458 env[1824]: time="2025-07-12T00:23:48.284393352Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.288251 env[1824]: time="2025-07-12T00:23:48.288187344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.292096 env[1824]: time="2025-07-12T00:23:48.292029372Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:48.294174 env[1824]: time="2025-07-12T00:23:48.294120932Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Jul 12 00:23:50.424070 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jul 12 00:23:50.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:50.432993 kernel: audit: type=1131 audit(1752279830.423:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:50.454000 audit: BPF prog-id=46 op=UNLOAD Jul 12 00:23:50.454000 audit: BPF prog-id=45 op=UNLOAD Jul 12 00:23:50.460250 kernel: audit: type=1334 audit(1752279830.454:260): prog-id=46 op=UNLOAD Jul 12 00:23:50.460335 kernel: audit: type=1334 audit(1752279830.454:261): prog-id=45 op=UNLOAD Jul 12 00:23:50.460382 kernel: audit: type=1334 audit(1752279830.454:262): prog-id=44 op=UNLOAD Jul 12 00:23:50.454000 audit: BPF prog-id=44 op=UNLOAD Jul 12 00:23:52.088668 amazon-ssm-agent[1821]: 2025-07-12 00:23:52 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Jul 12 00:23:54.607329 systemd[1]: Stopped kubelet.service. Jul 12 00:23:54.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:54.616491 systemd[1]: Starting kubelet.service... Jul 12 00:23:54.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:54.624717 kernel: audit: type=1130 audit(1752279834.606:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:54.624876 kernel: audit: type=1131 audit(1752279834.606:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:54.686357 systemd[1]: Reloading. Jul 12 00:23:54.867242 /usr/lib/systemd/system-generators/torcx-generator[2310]: time="2025-07-12T00:23:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:23:54.867310 /usr/lib/systemd/system-generators/torcx-generator[2310]: time="2025-07-12T00:23:54Z" level=info msg="torcx already run" Jul 12 00:23:55.067770 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:23:55.067809 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:23:55.106117 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283267 kernel: audit: type=1400 audit(1752279835.267:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283379 kernel: audit: type=1400 audit(1752279835.267:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290965 kernel: audit: type=1400 audit(1752279835.267:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.298620 kernel: audit: type=1400 audit(1752279835.267:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.306397 kernel: audit: type=1400 audit(1752279835.267:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.306504 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.315881 kernel: audit: type=1400 audit(1752279835.267:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.315969 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.274000 audit: BPF prog-id=49 op=LOAD Jul 12 00:23:55.274000 audit: BPF prog-id=30 op=UNLOAD Jul 12 00:23:55.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit: BPF prog-id=50 op=LOAD Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.282000 audit: BPF prog-id=51 op=LOAD Jul 12 00:23:55.282000 audit: BPF prog-id=31 op=UNLOAD Jul 12 00:23:55.282000 audit: BPF prog-id=32 op=UNLOAD Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit: BPF prog-id=52 op=LOAD Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit: BPF prog-id=53 op=LOAD Jul 12 00:23:55.290000 audit: BPF prog-id=33 op=UNLOAD Jul 12 00:23:55.290000 audit: BPF prog-id=34 op=UNLOAD Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.297000 audit: BPF prog-id=54 op=LOAD Jul 12 00:23:55.297000 audit: BPF prog-id=47 op=UNLOAD Jul 12 00:23:55.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.318000 audit: BPF prog-id=55 op=LOAD Jul 12 00:23:55.318000 audit: BPF prog-id=40 op=UNLOAD Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit: BPF prog-id=56 op=LOAD Jul 12 00:23:55.320000 audit: BPF prog-id=35 op=UNLOAD Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit: BPF prog-id=57 op=LOAD Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.320000 audit: BPF prog-id=58 op=LOAD Jul 12 00:23:55.321000 audit: BPF prog-id=36 op=UNLOAD Jul 12 00:23:55.321000 audit: BPF prog-id=37 op=UNLOAD Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.323000 audit: BPF prog-id=59 op=LOAD Jul 12 00:23:55.323000 audit: BPF prog-id=38 op=UNLOAD Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.326000 audit: BPF prog-id=60 op=LOAD Jul 12 00:23:55.326000 audit: BPF prog-id=39 op=UNLOAD Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit: BPF prog-id=61 op=LOAD Jul 12 00:23:55.329000 audit: BPF prog-id=41 op=UNLOAD Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit: BPF prog-id=62 op=LOAD Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:55.329000 audit: BPF prog-id=63 op=LOAD Jul 12 00:23:55.329000 audit: BPF prog-id=42 op=UNLOAD Jul 12 00:23:55.329000 audit: BPF prog-id=43 op=UNLOAD Jul 12 00:23:55.377656 systemd[1]: Started kubelet.service. Jul 12 00:23:55.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:55.383485 systemd[1]: Stopping kubelet.service... Jul 12 00:23:55.384484 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:23:55.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:55.384881 systemd[1]: Stopped kubelet.service. Jul 12 00:23:55.389320 systemd[1]: Starting kubelet.service... Jul 12 00:23:55.712288 systemd[1]: Started kubelet.service. Jul 12 00:23:55.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:23:55.807716 kubelet[2373]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:23:55.807716 kubelet[2373]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 12 00:23:55.807716 kubelet[2373]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:23:55.808378 kubelet[2373]: I0712 00:23:55.807850 2373 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:23:56.510508 kubelet[2373]: I0712 00:23:56.510440 2373 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 12 00:23:56.510508 kubelet[2373]: I0712 00:23:56.510489 2373 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:23:56.510911 kubelet[2373]: I0712 00:23:56.510865 2373 server.go:956] "Client rotation is on, will bootstrap in background" Jul 12 00:23:56.588005 kubelet[2373]: E0712 00:23:56.587916 2373 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.25.27:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 12 00:23:56.588735 kubelet[2373]: I0712 00:23:56.588664 2373 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:23:56.607458 kubelet[2373]: E0712 00:23:56.607357 2373 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:23:56.607458 kubelet[2373]: I0712 00:23:56.607448 2373 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:23:56.613569 kubelet[2373]: I0712 00:23:56.613512 2373 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:23:56.614348 kubelet[2373]: I0712 00:23:56.614291 2373 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:23:56.614617 kubelet[2373]: I0712 00:23:56.614348 2373 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-25-27","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:23:56.614837 kubelet[2373]: I0712 00:23:56.614763 2373 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:23:56.614837 kubelet[2373]: I0712 00:23:56.614792 2373 container_manager_linux.go:303] "Creating device plugin manager" Jul 12 00:23:56.615205 kubelet[2373]: I0712 00:23:56.615168 2373 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:23:56.622062 kubelet[2373]: I0712 00:23:56.621994 2373 kubelet.go:480] "Attempting to sync node with API server" Jul 12 00:23:56.622062 kubelet[2373]: I0712 00:23:56.622051 2373 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:23:56.634787 kubelet[2373]: I0712 00:23:56.634722 2373 kubelet.go:386] "Adding apiserver pod source" Jul 12 00:23:56.642512 kubelet[2373]: I0712 00:23:56.642407 2373 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:23:56.644634 kubelet[2373]: E0712 00:23:56.644555 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.25.27:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-27&limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 12 00:23:56.645026 kubelet[2373]: I0712 00:23:56.644982 2373 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:23:56.646526 kubelet[2373]: I0712 00:23:56.646467 2373 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 12 00:23:56.647031 kubelet[2373]: W0712 00:23:56.646994 2373 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 12 00:23:56.662899 kubelet[2373]: I0712 00:23:56.662863 2373 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 12 00:23:56.663160 kubelet[2373]: I0712 00:23:56.663134 2373 server.go:1289] "Started kubelet" Jul 12 00:23:56.668640 kubelet[2373]: E0712 00:23:56.668570 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.25.27:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 12 00:23:56.668797 kubelet[2373]: I0712 00:23:56.668666 2373 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:23:56.672499 kubelet[2373]: I0712 00:23:56.672401 2373 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:23:56.671000 audit[2373]: AVC avc: denied { mac_admin } for pid=2373 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:56.671000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:23:56.671000 audit[2373]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400075f800 a1=4000772b10 a2=400075f7d0 a3=25 items=0 ppid=1 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.671000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:23:56.672000 audit[2373]: AVC avc: denied { mac_admin } for pid=2373 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:56.672000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:23:56.672000 audit[2373]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008a8340 a1=4000772b28 a2=400075f890 a3=25 items=0 ppid=1 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.672000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:23:56.673824 kubelet[2373]: I0712 00:23:56.672905 2373 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:23:56.673824 kubelet[2373]: I0712 00:23:56.673057 2373 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 12 00:23:56.673824 kubelet[2373]: I0712 00:23:56.673266 2373 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:23:56.674399 kubelet[2373]: I0712 00:23:56.674342 2373 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:23:56.682757 kubelet[2373]: I0712 00:23:56.682713 2373 server.go:317] "Adding debug handlers to kubelet server" Jul 12 00:23:56.687606 kubelet[2373]: I0712 00:23:56.683198 2373 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:23:56.688253 kubelet[2373]: E0712 00:23:56.681286 2373 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.25.27:6443/api/v1/namespaces/default/events\": dial tcp 172.31.25.27:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-25-27.1851593a3b61ddfc default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-25-27,UID:ip-172-31-25-27,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-25-27,},FirstTimestamp:2025-07-12 00:23:56.663078396 +0000 UTC m=+0.943622372,LastTimestamp:2025-07-12 00:23:56.663078396 +0000 UTC m=+0.943622372,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-25-27,}" Jul 12 00:23:56.688546 kubelet[2373]: I0712 00:23:56.688513 2373 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 12 00:23:56.689916 kubelet[2373]: E0712 00:23:56.689869 2373 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-25-27\" not found" Jul 12 00:23:56.691712 kubelet[2373]: I0712 00:23:56.691677 2373 factory.go:223] Registration of the systemd container factory successfully Jul 12 00:23:56.692632 kubelet[2373]: I0712 00:23:56.692590 2373 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 12 00:23:56.694320 kubelet[2373]: I0712 00:23:56.692718 2373 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:23:56.695158 kubelet[2373]: I0712 00:23:56.692927 2373 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:23:56.695158 kubelet[2373]: E0712 00:23:56.693919 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.25.27:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 12 00:23:56.695158 kubelet[2373]: E0712 00:23:56.694085 2373 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.27:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-27?timeout=10s\": dial tcp 172.31.25.27:6443: connect: connection refused" interval="200ms" Jul 12 00:23:56.695412 kubelet[2373]: E0712 00:23:56.694103 2373 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:23:56.697537 kubelet[2373]: I0712 00:23:56.697471 2373 factory.go:223] Registration of the containerd container factory successfully Jul 12 00:23:56.720000 audit[2391]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.720000 audit[2391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc0c23980 a2=0 a3=1 items=0 ppid=2373 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.720000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:23:56.724000 audit[2392]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.724000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff4c0ab0 a2=0 a3=1 items=0 ppid=2373 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.724000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:23:56.730000 audit[2394]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.730000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffef31e250 a2=0 a3=1 items=0 ppid=2373 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.730000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:23:56.735363 kubelet[2373]: I0712 00:23:56.735273 2373 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 12 00:23:56.735363 kubelet[2373]: I0712 00:23:56.735326 2373 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 12 00:23:56.735363 kubelet[2373]: I0712 00:23:56.735371 2373 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:23:56.739000 audit[2396]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.739000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd263a590 a2=0 a3=1 items=0 ppid=2373 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.739000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:23:56.741145 kubelet[2373]: I0712 00:23:56.741104 2373 policy_none.go:49] "None policy: Start" Jul 12 00:23:56.741246 kubelet[2373]: I0712 00:23:56.741163 2373 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 12 00:23:56.741246 kubelet[2373]: I0712 00:23:56.741193 2373 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:23:56.755471 systemd[1]: Created slice kubepods.slice. Jul 12 00:23:56.771021 systemd[1]: Created slice kubepods-burstable.slice. Jul 12 00:23:56.781868 systemd[1]: Created slice kubepods-besteffort.slice. Jul 12 00:23:56.790687 kubelet[2373]: E0712 00:23:56.790591 2373 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-25-27\" not found" Jul 12 00:23:56.788000 audit[2401]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.788000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd71c67a0 a2=0 a3=1 items=0 ppid=2373 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.788000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 12 00:23:56.792137 kubelet[2373]: I0712 00:23:56.792087 2373 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 12 00:23:56.794848 kubelet[2373]: E0712 00:23:56.794762 2373 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 12 00:23:56.792000 audit[2373]: AVC avc: denied { mac_admin } for pid=2373 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:56.792000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:23:56.792000 audit[2373]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a0f4a0 a1=4000772af8 a2=4000a0f440 a3=25 items=0 ppid=1 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.792000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:23:56.795494 kubelet[2373]: E0712 00:23:56.794994 2373 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 12 00:23:56.795494 kubelet[2373]: I0712 00:23:56.795310 2373 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:23:56.795494 kubelet[2373]: I0712 00:23:56.795370 2373 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:23:56.793000 audit[2402]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:23:56.793000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffde1edf10 a2=0 a3=1 items=0 ppid=2373 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.793000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:23:56.799868 kubelet[2373]: I0712 00:23:56.799810 2373 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:23:56.802848 kubelet[2373]: I0712 00:23:56.802608 2373 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 12 00:23:56.803519 kubelet[2373]: I0712 00:23:56.803154 2373 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 12 00:23:56.805038 kubelet[2373]: I0712 00:23:56.804935 2373 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 12 00:23:56.805302 kubelet[2373]: I0712 00:23:56.805266 2373 kubelet.go:2436] "Starting kubelet main sync loop" Jul 12 00:23:56.805614 kubelet[2373]: E0712 00:23:56.805579 2373 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Jul 12 00:23:56.803000 audit[2404]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2404 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:23:56.803000 audit[2404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe15077a0 a2=0 a3=1 items=0 ppid=2373 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.803000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:23:56.807190 kubelet[2373]: E0712 00:23:56.804811 2373 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 12 00:23:56.807492 kubelet[2373]: E0712 00:23:56.807451 2373 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-25-27\" not found" Jul 12 00:23:56.808000 audit[2403]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.808000 audit[2403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca470c60 a2=0 a3=1 items=0 ppid=2373 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:23:56.811382 kubelet[2373]: E0712 00:23:56.811314 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.25.27:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 12 00:23:56.812000 audit[2405]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:23:56.812000 audit[2405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff752d190 a2=0 a3=1 items=0 ppid=2373 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:23:56.816000 audit[2406]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.816000 audit[2406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef26a360 a2=0 a3=1 items=0 ppid=2373 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.816000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:23:56.819000 audit[2408]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:23:56.819000 audit[2408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6929da0 a2=0 a3=1 items=0 ppid=2373 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.819000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:23:56.819000 audit[2407]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:23:56.819000 audit[2407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffda6751e0 a2=0 a3=1 items=0 ppid=2373 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:56.819000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:23:56.895767 kubelet[2373]: E0712 00:23:56.895711 2373 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.27:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-27?timeout=10s\": dial tcp 172.31.25.27:6443: connect: connection refused" interval="400ms" Jul 12 00:23:56.897973 kubelet[2373]: I0712 00:23:56.897902 2373 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-25-27" Jul 12 00:23:56.898980 kubelet[2373]: E0712 00:23:56.898883 2373 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.25.27:6443/api/v1/nodes\": dial tcp 172.31.25.27:6443: connect: connection refused" node="ip-172-31-25-27" Jul 12 00:23:56.926625 systemd[1]: Created slice kubepods-burstable-pod8f99b9908ddb453f8d22b8508469bc00.slice. Jul 12 00:23:56.936372 kubelet[2373]: E0712 00:23:56.936319 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:56.944327 systemd[1]: Created slice kubepods-burstable-pod67e6280c74dfad5c5233b2fefa800958.slice. Jul 12 00:23:56.956454 systemd[1]: Created slice kubepods-burstable-pod3ae0a4816d7d16217aaf33014311158f.slice. Jul 12 00:23:56.957839 kubelet[2373]: E0712 00:23:56.957776 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:56.962315 kubelet[2373]: E0712 00:23:56.962238 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:56.996647 kubelet[2373]: I0712 00:23:56.996591 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8f99b9908ddb453f8d22b8508469bc00-ca-certs\") pod \"kube-apiserver-ip-172-31-25-27\" (UID: \"8f99b9908ddb453f8d22b8508469bc00\") " pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:23:56.996928 kubelet[2373]: I0712 00:23:56.996885 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8f99b9908ddb453f8d22b8508469bc00-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-27\" (UID: \"8f99b9908ddb453f8d22b8508469bc00\") " pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:23:56.997305 kubelet[2373]: I0712 00:23:56.997254 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:23:56.997575 kubelet[2373]: I0712 00:23:56.997530 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:23:56.997839 kubelet[2373]: I0712 00:23:56.997795 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:23:56.998142 kubelet[2373]: I0712 00:23:56.998089 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8f99b9908ddb453f8d22b8508469bc00-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-27\" (UID: \"8f99b9908ddb453f8d22b8508469bc00\") " pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:23:56.998395 kubelet[2373]: I0712 00:23:56.998352 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:23:56.998663 kubelet[2373]: I0712 00:23:56.998624 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:23:56.998854 kubelet[2373]: I0712 00:23:56.998822 2373 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3ae0a4816d7d16217aaf33014311158f-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-27\" (UID: \"3ae0a4816d7d16217aaf33014311158f\") " pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:23:57.103587 kubelet[2373]: I0712 00:23:57.101889 2373 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-25-27" Jul 12 00:23:57.103587 kubelet[2373]: E0712 00:23:57.103157 2373 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.25.27:6443/api/v1/nodes\": dial tcp 172.31.25.27:6443: connect: connection refused" node="ip-172-31-25-27" Jul 12 00:23:57.238943 env[1824]: time="2025-07-12T00:23:57.238384311Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-27,Uid:8f99b9908ddb453f8d22b8508469bc00,Namespace:kube-system,Attempt:0,}" Jul 12 00:23:57.260274 env[1824]: time="2025-07-12T00:23:57.260192031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-27,Uid:67e6280c74dfad5c5233b2fefa800958,Namespace:kube-system,Attempt:0,}" Jul 12 00:23:57.264365 env[1824]: time="2025-07-12T00:23:57.264285750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-27,Uid:3ae0a4816d7d16217aaf33014311158f,Namespace:kube-system,Attempt:0,}" Jul 12 00:23:57.296760 kubelet[2373]: E0712 00:23:57.296684 2373 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.27:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-27?timeout=10s\": dial tcp 172.31.25.27:6443: connect: connection refused" interval="800ms" Jul 12 00:23:57.506314 kubelet[2373]: I0712 00:23:57.505743 2373 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-25-27" Jul 12 00:23:57.506314 kubelet[2373]: E0712 00:23:57.506267 2373 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.25.27:6443/api/v1/nodes\": dial tcp 172.31.25.27:6443: connect: connection refused" node="ip-172-31-25-27" Jul 12 00:23:57.611781 kubelet[2373]: E0712 00:23:57.611699 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.25.27:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 12 00:23:57.665832 kubelet[2373]: E0712 00:23:57.665753 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.25.27:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 12 00:23:57.783084 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount330667624.mount: Deactivated successfully. Jul 12 00:23:57.801474 env[1824]: time="2025-07-12T00:23:57.801397439Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.803865 env[1824]: time="2025-07-12T00:23:57.803795169Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.810422 env[1824]: time="2025-07-12T00:23:57.810364687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.813495 env[1824]: time="2025-07-12T00:23:57.813397677Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.815459 env[1824]: time="2025-07-12T00:23:57.815396900Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.820771 env[1824]: time="2025-07-12T00:23:57.820719131Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.823341 env[1824]: time="2025-07-12T00:23:57.823289494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.825437 env[1824]: time="2025-07-12T00:23:57.825385946Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.827440 env[1824]: time="2025-07-12T00:23:57.827396574Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.834604 env[1824]: time="2025-07-12T00:23:57.834527400Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.838130 env[1824]: time="2025-07-12T00:23:57.838077243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.868658 env[1824]: time="2025-07-12T00:23:57.868570802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:23:57.877073 kubelet[2373]: E0712 00:23:57.877007 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.25.27:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 12 00:23:57.908054 env[1824]: time="2025-07-12T00:23:57.907875892Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:23:57.908238 env[1824]: time="2025-07-12T00:23:57.908077265Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:23:57.908238 env[1824]: time="2025-07-12T00:23:57.908151276Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:23:57.908942 env[1824]: time="2025-07-12T00:23:57.908837856Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305 pid=2416 runtime=io.containerd.runc.v2 Jul 12 00:23:57.930215 env[1824]: time="2025-07-12T00:23:57.930083716Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:23:57.930349 env[1824]: time="2025-07-12T00:23:57.930234055Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:23:57.930349 env[1824]: time="2025-07-12T00:23:57.930299627Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:23:57.930733 env[1824]: time="2025-07-12T00:23:57.930611626Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/06e25fe615df33a59059805c5ed00b70793c43044a1feb1926d1c58b83615ff6 pid=2433 runtime=io.containerd.runc.v2 Jul 12 00:23:57.952280 systemd[1]: Started cri-containerd-c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305.scope. Jul 12 00:23:57.982143 systemd[1]: Started cri-containerd-06e25fe615df33a59059805c5ed00b70793c43044a1feb1926d1c58b83615ff6.scope. Jul 12 00:23:57.996281 env[1824]: time="2025-07-12T00:23:57.996151235Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:23:57.996429 env[1824]: time="2025-07-12T00:23:57.996312979Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:23:57.996493 env[1824]: time="2025-07-12T00:23:57.996405598Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:23:57.997771 env[1824]: time="2025-07-12T00:23:57.997519521Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5 pid=2470 runtime=io.containerd.runc.v2 Jul 12 00:23:58.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.038000 audit: BPF prog-id=64 op=LOAD Jul 12 00:23:58.043086 systemd[1]: Started cri-containerd-5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5.scope. Jul 12 00:23:58.042000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.042000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2416 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333393662313930636133636565326632663965353366666430666664 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2416 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333393662313930636133636565326632663965353366666430666664 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.043000 audit: BPF prog-id=65 op=LOAD Jul 12 00:23:58.043000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2416 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333393662313930636133636565326632663965353366666430666664 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.045000 audit: BPF prog-id=66 op=LOAD Jul 12 00:23:58.045000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2416 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333393662313930636133636565326632663965353366666430666664 Jul 12 00:23:58.047000 audit: BPF prog-id=66 op=UNLOAD Jul 12 00:23:58.047000 audit: BPF prog-id=65 op=UNLOAD Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.047000 audit: BPF prog-id=67 op=LOAD Jul 12 00:23:58.047000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2416 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333393662313930636133636565326632663965353366666430666664 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.053000 audit: BPF prog-id=68 op=LOAD Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2433 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653235666536313564663333613539303539383035633565643030 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2433 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653235666536313564663333613539303539383035633565643030 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit: BPF prog-id=69 op=LOAD Jul 12 00:23:58.056000 audit[2448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2433 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653235666536313564663333613539303539383035633565643030 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit: BPF prog-id=70 op=LOAD Jul 12 00:23:58.056000 audit[2448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2433 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653235666536313564663333613539303539383035633565643030 Jul 12 00:23:58.056000 audit: BPF prog-id=70 op=UNLOAD Jul 12 00:23:58.056000 audit: BPF prog-id=69 op=UNLOAD Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { perfmon } for pid=2448 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit[2448]: AVC avc: denied { bpf } for pid=2448 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.056000 audit: BPF prog-id=71 op=LOAD Jul 12 00:23:58.056000 audit[2448]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2433 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036653235666536313564663333613539303539383035633565643030 Jul 12 00:23:58.090941 kubelet[2373]: E0712 00:23:58.090863 2373 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.25.27:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-25-27&limit=500&resourceVersion=0\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 12 00:23:58.098261 kubelet[2373]: E0712 00:23:58.098161 2373 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.25.27:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-27?timeout=10s\": dial tcp 172.31.25.27:6443: connect: connection refused" interval="1.6s" Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.120000 audit: BPF prog-id=72 op=LOAD Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2470 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316230653431393331343535383362366538666563633131623732 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2470 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316230653431393331343535383362366538666563633131623732 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit: BPF prog-id=73 op=LOAD Jul 12 00:23:58.122000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2470 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316230653431393331343535383362366538666563633131623732 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit: BPF prog-id=74 op=LOAD Jul 12 00:23:58.122000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2470 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316230653431393331343535383362366538666563633131623732 Jul 12 00:23:58.122000 audit: BPF prog-id=74 op=UNLOAD Jul 12 00:23:58.122000 audit: BPF prog-id=73 op=UNLOAD Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { perfmon } for pid=2485 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit[2485]: AVC avc: denied { bpf } for pid=2485 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.122000 audit: BPF prog-id=75 op=LOAD Jul 12 00:23:58.122000 audit[2485]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2470 pid=2485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316230653431393331343535383362366538666563633131623732 Jul 12 00:23:58.144249 env[1824]: time="2025-07-12T00:23:58.144195268Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-25-27,Uid:8f99b9908ddb453f8d22b8508469bc00,Namespace:kube-system,Attempt:0,} returns sandbox id \"06e25fe615df33a59059805c5ed00b70793c43044a1feb1926d1c58b83615ff6\"" Jul 12 00:23:58.158531 env[1824]: time="2025-07-12T00:23:58.158417993Z" level=info msg="CreateContainer within sandbox \"06e25fe615df33a59059805c5ed00b70793c43044a1feb1926d1c58b83615ff6\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 12 00:23:58.166459 env[1824]: time="2025-07-12T00:23:58.166353891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-25-27,Uid:67e6280c74dfad5c5233b2fefa800958,Namespace:kube-system,Attempt:0,} returns sandbox id \"c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305\"" Jul 12 00:23:58.183476 env[1824]: time="2025-07-12T00:23:58.183397834Z" level=info msg="CreateContainer within sandbox \"c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 12 00:23:58.201757 env[1824]: time="2025-07-12T00:23:58.201670441Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-25-27,Uid:3ae0a4816d7d16217aaf33014311158f,Namespace:kube-system,Attempt:0,} returns sandbox id \"5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5\"" Jul 12 00:23:58.208070 env[1824]: time="2025-07-12T00:23:58.207993523Z" level=info msg="CreateContainer within sandbox \"06e25fe615df33a59059805c5ed00b70793c43044a1feb1926d1c58b83615ff6\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"0297dc7ef26fbd5be7cecc30ff69707761f81ca051d6f8b45e3c7276962123b4\"" Jul 12 00:23:58.209718 env[1824]: time="2025-07-12T00:23:58.209668044Z" level=info msg="StartContainer for \"0297dc7ef26fbd5be7cecc30ff69707761f81ca051d6f8b45e3c7276962123b4\"" Jul 12 00:23:58.214149 env[1824]: time="2025-07-12T00:23:58.214037769Z" level=info msg="CreateContainer within sandbox \"5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 12 00:23:58.238416 env[1824]: time="2025-07-12T00:23:58.238348872Z" level=info msg="CreateContainer within sandbox \"c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439\"" Jul 12 00:23:58.239229 env[1824]: time="2025-07-12T00:23:58.239176049Z" level=info msg="StartContainer for \"72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439\"" Jul 12 00:23:58.248618 systemd[1]: Started cri-containerd-0297dc7ef26fbd5be7cecc30ff69707761f81ca051d6f8b45e3c7276962123b4.scope. Jul 12 00:23:58.264872 env[1824]: time="2025-07-12T00:23:58.264800427Z" level=info msg="CreateContainer within sandbox \"5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a\"" Jul 12 00:23:58.267909 env[1824]: time="2025-07-12T00:23:58.267855953Z" level=info msg="StartContainer for \"96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a\"" Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.298000 audit: BPF prog-id=76 op=LOAD Jul 12 00:23:58.310415 kubelet[2373]: I0712 00:23:58.309503 2373 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-25-27" Jul 12 00:23:58.310415 kubelet[2373]: E0712 00:23:58.310304 2373 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.25.27:6443/api/v1/nodes\": dial tcp 172.31.25.27:6443: connect: connection refused" node="ip-172-31-25-27" Jul 12 00:23:58.310000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.310000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2433 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032393764633765663236666264356265376365636333306666363937 Jul 12 00:23:58.310000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.310000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2433 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032393764633765663236666264356265376365636333306666363937 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.311000 audit: BPF prog-id=77 op=LOAD Jul 12 00:23:58.311000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2433 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032393764633765663236666264356265376365636333306666363937 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.312000 audit: BPF prog-id=78 op=LOAD Jul 12 00:23:58.312000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2433 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032393764633765663236666264356265376365636333306666363937 Jul 12 00:23:58.314000 audit: BPF prog-id=78 op=UNLOAD Jul 12 00:23:58.314000 audit: BPF prog-id=77 op=UNLOAD Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.314000 audit: BPF prog-id=79 op=LOAD Jul 12 00:23:58.314000 audit[2543]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2433 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032393764633765663236666264356265376365636333306666363937 Jul 12 00:23:58.346114 systemd[1]: Started cri-containerd-72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439.scope. Jul 12 00:23:58.353421 systemd[1]: Started cri-containerd-96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a.scope. Jul 12 00:23:58.391638 env[1824]: time="2025-07-12T00:23:58.391575366Z" level=info msg="StartContainer for \"0297dc7ef26fbd5be7cecc30ff69707761f81ca051d6f8b45e3c7276962123b4\" returns successfully" Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.437000 audit: BPF prog-id=80 op=LOAD Jul 12 00:23:58.439000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.439000 audit[2560]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2416 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732646631303562633030636137646637386634666161663864373633 Jul 12 00:23:58.439000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.439000 audit[2560]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2416 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732646631303562633030636137646637386634666161663864373633 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.440000 audit: BPF prog-id=81 op=LOAD Jul 12 00:23:58.440000 audit[2560]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2416 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732646631303562633030636137646637386634666161663864373633 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit: BPF prog-id=82 op=LOAD Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.441000 audit: BPF prog-id=83 op=LOAD Jul 12 00:23:58.441000 audit[2560]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2416 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732646631303562633030636137646637386634666161663864373633 Jul 12 00:23:58.442000 audit: BPF prog-id=83 op=UNLOAD Jul 12 00:23:58.442000 audit: BPF prog-id=81 op=UNLOAD Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { perfmon } for pid=2560 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2470 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613865633064363533343363336264656232346263323632383033 Jul 12 00:23:58.442000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2470 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613865633064363533343363336264656232346263323632383033 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit: BPF prog-id=84 op=LOAD Jul 12 00:23:58.442000 audit[2560]: AVC avc: denied { bpf } for pid=2560 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.442000 audit: BPF prog-id=85 op=LOAD Jul 12 00:23:58.443000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2470 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613865633064363533343363336264656232346263323632383033 Jul 12 00:23:58.442000 audit[2560]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2416 pid=2560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732646631303562633030636137646637386634666161663864373633 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { perfmon } for pid=2578 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit[2578]: AVC avc: denied { bpf } for pid=2578 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:23:58.443000 audit: BPF prog-id=86 op=LOAD Jul 12 00:23:58.443000 audit[2578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2470 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:23:58.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936613865633064363533343363336264656232346263323632383033 Jul 12 00:23:58.443000 audit: BPF prog-id=86 op=UNLOAD Jul 12 00:23:58.443000 audit: BPF prog-id=84 op=UNLOAD Jul 12 00:23:58.493744 env[1824]: time="2025-07-12T00:23:58.493677222Z" level=info msg="StartContainer for \"96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a\" returns successfully" Jul 12 00:23:58.528550 env[1824]: time="2025-07-12T00:23:58.528477855Z" level=info msg="StartContainer for \"72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439\" returns successfully" Jul 12 00:23:58.723516 kubelet[2373]: E0712 00:23:58.723446 2373 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.25.27:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.25.27:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 12 00:23:58.827167 kubelet[2373]: E0712 00:23:58.827109 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:58.827910 kubelet[2373]: E0712 00:23:58.827864 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:58.832141 kubelet[2373]: E0712 00:23:58.832092 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:59.835427 kubelet[2373]: E0712 00:23:59.835356 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:59.836157 kubelet[2373]: E0712 00:23:59.836102 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:59.837442 kubelet[2373]: E0712 00:23:59.837385 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:23:59.913258 kubelet[2373]: I0712 00:23:59.913189 2373 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-25-27" Jul 12 00:24:00.837708 kubelet[2373]: E0712 00:24:00.837324 2373 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:24:02.159000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.162682 kernel: kauditd_printk_skb: 579 callbacks suppressed Jul 12 00:24:02.162847 kernel: audit: type=1400 audit(1752279842.159:561): avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.159000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40048f8480 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.189356 kernel: audit: type=1300 audit(1752279842.159:561): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40048f8480 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.159000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.203248 kernel: audit: type=1327 audit(1752279842.159:561): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.159000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.215684 kernel: audit: type=1400 audit(1752279842.159:562): avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.215850 kernel: audit: type=1300 audit(1752279842.159:562): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40077267e0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.159000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40077267e0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.159000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.242436 kernel: audit: type=1327 audit(1752279842.159:562): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.162000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6767 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.254760 kernel: audit: type=1400 audit(1752279842.162:563): avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6767 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.254919 kernel: audit: type=1300 audit(1752279842.162:563): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40048f85a0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.162000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40048f85a0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.162000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.282451 kernel: audit: type=1327 audit(1752279842.162:563): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.203000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6771 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.294161 kernel: audit: type=1400 audit(1752279842.203:564): avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6771 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.203000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5a a1=4003acfd70 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.236000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.236000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=40077279a0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.236000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.241000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.241000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4003cb1470 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:24:02.241000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:24:02.671003 kubelet[2373]: I0712 00:24:02.670922 2373 apiserver.go:52] "Watching apiserver" Jul 12 00:24:02.815939 kubelet[2373]: E0712 00:24:02.815885 2373 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-25-27\" not found" node="ip-172-31-25-27" Jul 12 00:24:02.878942 kubelet[2373]: I0712 00:24:02.878845 2373 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-25-27" Jul 12 00:24:02.878942 kubelet[2373]: E0712 00:24:02.878941 2373 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ip-172-31-25-27\": node \"ip-172-31-25-27\" not found" Jul 12 00:24:02.893312 kubelet[2373]: I0712 00:24:02.893256 2373 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:02.894499 kubelet[2373]: I0712 00:24:02.894454 2373 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 12 00:24:02.965000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.965000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000528150 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:02.965000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:02.967000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:02.967000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000bca040 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:02.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:03.073168 kubelet[2373]: E0712 00:24:03.073114 2373 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-25-27\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:03.073431 kubelet[2373]: I0712 00:24:03.073394 2373 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:24:03.088280 kubelet[2373]: E0712 00:24:03.088232 2373 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-25-27\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:24:03.088536 kubelet[2373]: I0712 00:24:03.088502 2373 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:03.103478 kubelet[2373]: E0712 00:24:03.103426 2373 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-25-27\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:03.852560 kubelet[2373]: I0712 00:24:03.852511 2373 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:24:04.567440 kubelet[2373]: I0712 00:24:04.567377 2373 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:05.238695 systemd[1]: Reloading. Jul 12 00:24:05.357589 update_engine[1817]: I0712 00:24:05.357028 1817 update_attempter.cc:509] Updating boot flags... Jul 12 00:24:05.425629 /usr/lib/systemd/system-generators/torcx-generator[2675]: time="2025-07-12T00:24:05Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:24:05.425703 /usr/lib/systemd/system-generators/torcx-generator[2675]: time="2025-07-12T00:24:05Z" level=info msg="torcx already run" Jul 12 00:24:05.781302 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:24:05.781566 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:24:05.825677 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.046000 audit: BPF prog-id=88 op=LOAD Jul 12 00:24:06.046000 audit: BPF prog-id=72 op=UNLOAD Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.050000 audit: BPF prog-id=89 op=LOAD Jul 12 00:24:06.050000 audit: BPF prog-id=82 op=UNLOAD Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit: BPF prog-id=90 op=LOAD Jul 12 00:24:06.054000 audit: BPF prog-id=49 op=UNLOAD Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit: BPF prog-id=91 op=LOAD Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.054000 audit: BPF prog-id=92 op=LOAD Jul 12 00:24:06.054000 audit: BPF prog-id=50 op=UNLOAD Jul 12 00:24:06.055000 audit: BPF prog-id=51 op=UNLOAD Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit: BPF prog-id=93 op=LOAD Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit: BPF prog-id=94 op=LOAD Jul 12 00:24:06.056000 audit: BPF prog-id=52 op=UNLOAD Jul 12 00:24:06.056000 audit: BPF prog-id=53 op=UNLOAD Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.057000 audit: BPF prog-id=95 op=LOAD Jul 12 00:24:06.057000 audit: BPF prog-id=54 op=UNLOAD Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.063000 audit: BPF prog-id=96 op=LOAD Jul 12 00:24:06.063000 audit: BPF prog-id=55 op=UNLOAD Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.066000 audit: BPF prog-id=97 op=LOAD Jul 12 00:24:06.066000 audit: BPF prog-id=68 op=UNLOAD Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.067000 audit: BPF prog-id=98 op=LOAD Jul 12 00:24:06.067000 audit: BPF prog-id=64 op=UNLOAD Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.068000 audit: BPF prog-id=99 op=LOAD Jul 12 00:24:06.069000 audit: BPF prog-id=76 op=UNLOAD Jul 12 00:24:06.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit: BPF prog-id=100 op=LOAD Jul 12 00:24:06.071000 audit: BPF prog-id=56 op=UNLOAD Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit: BPF prog-id=101 op=LOAD Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.071000 audit: BPF prog-id=102 op=LOAD Jul 12 00:24:06.071000 audit: BPF prog-id=57 op=UNLOAD Jul 12 00:24:06.072000 audit: BPF prog-id=58 op=UNLOAD Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.074000 audit: BPF prog-id=103 op=LOAD Jul 12 00:24:06.074000 audit: BPF prog-id=59 op=UNLOAD Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.079000 audit: BPF prog-id=104 op=LOAD Jul 12 00:24:06.079000 audit: BPF prog-id=60 op=UNLOAD Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit: BPF prog-id=105 op=LOAD Jul 12 00:24:06.081000 audit: BPF prog-id=61 op=UNLOAD Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit: BPF prog-id=106 op=LOAD Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.082000 audit: BPF prog-id=107 op=LOAD Jul 12 00:24:06.082000 audit: BPF prog-id=62 op=UNLOAD Jul 12 00:24:06.082000 audit: BPF prog-id=63 op=UNLOAD Jul 12 00:24:06.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.085000 audit: BPF prog-id=108 op=LOAD Jul 12 00:24:06.085000 audit: BPF prog-id=80 op=UNLOAD Jul 12 00:24:06.202840 systemd[1]: Stopping kubelet.service... Jul 12 00:24:06.227592 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:24:06.228046 systemd[1]: Stopped kubelet.service. Jul 12 00:24:06.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:06.228156 systemd[1]: kubelet.service: Consumed 1.744s CPU time. Jul 12 00:24:06.232857 systemd[1]: Starting kubelet.service... Jul 12 00:24:06.584569 systemd[1]: Started kubelet.service. Jul 12 00:24:06.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:06.742208 kubelet[2829]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:24:06.742779 kubelet[2829]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 12 00:24:06.742916 kubelet[2829]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:24:06.743257 kubelet[2829]: I0712 00:24:06.743198 2829 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:24:06.771856 kubelet[2829]: I0712 00:24:06.771800 2829 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 12 00:24:06.773931 kubelet[2829]: I0712 00:24:06.773886 2829 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:24:06.778572 kubelet[2829]: I0712 00:24:06.778528 2829 server.go:956] "Client rotation is on, will bootstrap in background" Jul 12 00:24:06.787330 kubelet[2829]: I0712 00:24:06.787279 2829 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 12 00:24:06.791000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 12 00:24:06.791000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000758300 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:06.791000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:06.798140 kubelet[2829]: I0712 00:24:06.792242 2829 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:24:06.809977 kubelet[2829]: E0712 00:24:06.809849 2829 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:24:06.809977 kubelet[2829]: I0712 00:24:06.809916 2829 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:24:06.826235 kubelet[2829]: I0712 00:24:06.826183 2829 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:24:06.827750 kubelet[2829]: I0712 00:24:06.827692 2829 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:24:06.828457 kubelet[2829]: I0712 00:24:06.827982 2829 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-25-27","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:24:06.828760 kubelet[2829]: I0712 00:24:06.828728 2829 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:24:06.828883 kubelet[2829]: I0712 00:24:06.828861 2829 container_manager_linux.go:303] "Creating device plugin manager" Jul 12 00:24:06.829153 kubelet[2829]: I0712 00:24:06.829127 2829 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:24:06.829548 kubelet[2829]: I0712 00:24:06.829515 2829 kubelet.go:480] "Attempting to sync node with API server" Jul 12 00:24:06.829708 kubelet[2829]: I0712 00:24:06.829683 2829 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:24:06.830001 kubelet[2829]: I0712 00:24:06.829927 2829 kubelet.go:386] "Adding apiserver pod source" Jul 12 00:24:06.830321 kubelet[2829]: I0712 00:24:06.830289 2829 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:24:06.854683 kubelet[2829]: I0712 00:24:06.853227 2829 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:24:06.856842 kubelet[2829]: I0712 00:24:06.856692 2829 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 12 00:24:06.874105 kubelet[2829]: I0712 00:24:06.874055 2829 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 12 00:24:06.874433 kubelet[2829]: I0712 00:24:06.874405 2829 server.go:1289] "Started kubelet" Jul 12 00:24:06.884000 audit[2829]: AVC avc: denied { mac_admin } for pid=2829 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.884000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:06.884000 audit[2829]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000985bc0 a1=4000c098d8 a2=4000985b90 a3=25 items=0 ppid=1 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:06.884000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:06.886736 kubelet[2829]: I0712 00:24:06.886404 2829 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:24:06.886736 kubelet[2829]: I0712 00:24:06.886520 2829 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 12 00:24:06.886736 kubelet[2829]: I0712 00:24:06.886612 2829 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:24:06.885000 audit[2829]: AVC avc: denied { mac_admin } for pid=2829 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:06.885000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:06.885000 audit[2829]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000190ea0 a1=4000c098f0 a2=4000985c50 a3=25 items=0 ppid=1 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:06.885000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:06.901944 kubelet[2829]: I0712 00:24:06.901848 2829 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:24:06.903370 kubelet[2829]: I0712 00:24:06.903313 2829 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 12 00:24:06.904989 kubelet[2829]: E0712 00:24:06.904907 2829 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-25-27\" not found" Jul 12 00:24:06.907158 kubelet[2829]: I0712 00:24:06.907110 2829 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 12 00:24:06.907411 kubelet[2829]: I0712 00:24:06.907372 2829 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:24:06.928226 kubelet[2829]: I0712 00:24:06.928131 2829 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:24:06.929265 kubelet[2829]: I0712 00:24:06.929206 2829 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:24:06.949351 kubelet[2829]: I0712 00:24:06.949306 2829 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:24:06.988784 kubelet[2829]: I0712 00:24:06.988735 2829 server.go:317] "Adding debug handlers to kubelet server" Jul 12 00:24:07.009152 kubelet[2829]: I0712 00:24:07.009093 2829 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:24:07.010165 kubelet[2829]: E0712 00:24:07.010127 2829 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-25-27\" not found" Jul 12 00:24:07.011636 kubelet[2829]: E0712 00:24:07.011586 2829 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:24:07.019505 kubelet[2829]: I0712 00:24:07.019445 2829 factory.go:223] Registration of the containerd container factory successfully Jul 12 00:24:07.019505 kubelet[2829]: I0712 00:24:07.019492 2829 factory.go:223] Registration of the systemd container factory successfully Jul 12 00:24:07.140310 kubelet[2829]: I0712 00:24:07.140152 2829 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 12 00:24:07.162584 kubelet[2829]: I0712 00:24:07.162523 2829 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 12 00:24:07.162821 kubelet[2829]: I0712 00:24:07.162788 2829 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 12 00:24:07.163041 kubelet[2829]: I0712 00:24:07.163001 2829 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 12 00:24:07.163206 kubelet[2829]: I0712 00:24:07.163177 2829 kubelet.go:2436] "Starting kubelet main sync loop" Jul 12 00:24:07.163486 kubelet[2829]: E0712 00:24:07.163433 2829 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 12 00:24:07.251592 kubelet[2829]: I0712 00:24:07.251548 2829 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 12 00:24:07.251881 kubelet[2829]: I0712 00:24:07.251804 2829 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 12 00:24:07.252287 kubelet[2829]: I0712 00:24:07.252236 2829 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:24:07.252696 kubelet[2829]: I0712 00:24:07.252662 2829 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 12 00:24:07.252864 kubelet[2829]: I0712 00:24:07.252818 2829 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 12 00:24:07.253056 kubelet[2829]: I0712 00:24:07.253032 2829 policy_none.go:49] "None policy: Start" Jul 12 00:24:07.253219 kubelet[2829]: I0712 00:24:07.253194 2829 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 12 00:24:07.253344 kubelet[2829]: I0712 00:24:07.253323 2829 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:24:07.253684 kubelet[2829]: I0712 00:24:07.253658 2829 state_mem.go:75] "Updated machine memory state" Jul 12 00:24:07.263905 kubelet[2829]: E0712 00:24:07.263860 2829 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 12 00:24:07.266204 kubelet[2829]: E0712 00:24:07.266155 2829 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 12 00:24:07.275020 kernel: kauditd_printk_skb: 271 callbacks suppressed Jul 12 00:24:07.275147 kernel: audit: type=1400 audit(1752279847.265:818): avc: denied { mac_admin } for pid=2829 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:07.265000 audit[2829]: AVC avc: denied { mac_admin } for pid=2829 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:07.275319 kubelet[2829]: E0712 00:24:07.269053 2829 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 12 00:24:07.275319 kubelet[2829]: I0712 00:24:07.269431 2829 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:24:07.275319 kubelet[2829]: I0712 00:24:07.269462 2829 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:24:07.275319 kubelet[2829]: I0712 00:24:07.269995 2829 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:24:07.265000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:07.287641 kernel: audit: type=1401 audit(1752279847.265:818): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:24:07.287793 kernel: audit: type=1300 audit(1752279847.265:818): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f5ba70 a1=4000ffb410 a2=4000f5ba40 a3=25 items=0 ppid=1 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:07.265000 audit[2829]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f5ba70 a1=4000ffb410 a2=4000f5ba40 a3=25 items=0 ppid=1 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:07.288730 kubelet[2829]: E0712 00:24:07.288681 2829 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 12 00:24:07.265000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:07.315987 kernel: audit: type=1327 audit(1752279847.265:818): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:24:07.421635 kubelet[2829]: I0712 00:24:07.421516 2829 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-25-27" Jul 12 00:24:07.442912 kubelet[2829]: I0712 00:24:07.442847 2829 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-25-27" Jul 12 00:24:07.443321 kubelet[2829]: I0712 00:24:07.443283 2829 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-25-27" Jul 12 00:24:07.465804 kubelet[2829]: I0712 00:24:07.465765 2829 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:07.469015 kubelet[2829]: I0712 00:24:07.468031 2829 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:07.478872 kubelet[2829]: I0712 00:24:07.478833 2829 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:24:07.486990 kubelet[2829]: E0712 00:24:07.486920 2829 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-25-27\" already exists" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:07.502151 kubelet[2829]: E0712 00:24:07.502097 2829 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-25-27\" already exists" pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:24:07.519534 kubelet[2829]: I0712 00:24:07.519485 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8f99b9908ddb453f8d22b8508469bc00-ca-certs\") pod \"kube-apiserver-ip-172-31-25-27\" (UID: \"8f99b9908ddb453f8d22b8508469bc00\") " pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:07.519877 kubelet[2829]: I0712 00:24:07.519832 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8f99b9908ddb453f8d22b8508469bc00-k8s-certs\") pod \"kube-apiserver-ip-172-31-25-27\" (UID: \"8f99b9908ddb453f8d22b8508469bc00\") " pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:07.520204 kubelet[2829]: I0712 00:24:07.520140 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8f99b9908ddb453f8d22b8508469bc00-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-25-27\" (UID: \"8f99b9908ddb453f8d22b8508469bc00\") " pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:07.520429 kubelet[2829]: I0712 00:24:07.520377 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-ca-certs\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:07.520722 kubelet[2829]: I0712 00:24:07.520678 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:07.521021 kubelet[2829]: I0712 00:24:07.520984 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3ae0a4816d7d16217aaf33014311158f-kubeconfig\") pod \"kube-scheduler-ip-172-31-25-27\" (UID: \"3ae0a4816d7d16217aaf33014311158f\") " pod="kube-system/kube-scheduler-ip-172-31-25-27" Jul 12 00:24:07.521304 kubelet[2829]: I0712 00:24:07.521239 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:07.521500 kubelet[2829]: I0712 00:24:07.521458 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-k8s-certs\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:07.521716 kubelet[2829]: I0712 00:24:07.521662 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/67e6280c74dfad5c5233b2fefa800958-kubeconfig\") pod \"kube-controller-manager-ip-172-31-25-27\" (UID: \"67e6280c74dfad5c5233b2fefa800958\") " pod="kube-system/kube-controller-manager-ip-172-31-25-27" Jul 12 00:24:07.846942 kubelet[2829]: I0712 00:24:07.846741 2829 apiserver.go:52] "Watching apiserver" Jul 12 00:24:07.908118 kubelet[2829]: I0712 00:24:07.908075 2829 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 12 00:24:08.156983 kubelet[2829]: I0712 00:24:08.156704 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-25-27" podStartSLOduration=4.156642757 podStartE2EDuration="4.156642757s" podCreationTimestamp="2025-07-12 00:24:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:08.14148782 +0000 UTC m=+1.539691171" watchObservedRunningTime="2025-07-12 00:24:08.156642757 +0000 UTC m=+1.554846120" Jul 12 00:24:08.174075 kubelet[2829]: I0712 00:24:08.173968 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-25-27" podStartSLOduration=1.173902407 podStartE2EDuration="1.173902407s" podCreationTimestamp="2025-07-12 00:24:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:08.157668425 +0000 UTC m=+1.555871884" watchObservedRunningTime="2025-07-12 00:24:08.173902407 +0000 UTC m=+1.572105758" Jul 12 00:24:08.174696 kubelet[2829]: I0712 00:24:08.174571 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-25-27" podStartSLOduration=5.174521287 podStartE2EDuration="5.174521287s" podCreationTimestamp="2025-07-12 00:24:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:08.173812146 +0000 UTC m=+1.572015509" watchObservedRunningTime="2025-07-12 00:24:08.174521287 +0000 UTC m=+1.572724734" Jul 12 00:24:08.239750 kubelet[2829]: I0712 00:24:08.239692 2829 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:08.263032 kubelet[2829]: E0712 00:24:08.262941 2829 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-25-27\" already exists" pod="kube-system/kube-apiserver-ip-172-31-25-27" Jul 12 00:24:08.328000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:08.328000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a2e480 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:08.357750 kernel: audit: type=1400 audit(1752279848.328:819): avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:08.357887 kernel: audit: type=1300 audit(1752279848.328:819): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a2e480 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:08.328000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:08.369146 kernel: audit: type=1327 audit(1752279848.328:819): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:08.336000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:08.382215 kernel: audit: type=1400 audit(1752279848.336:820): avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:08.336000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a2e640 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:08.336000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:08.415681 kernel: audit: type=1300 audit(1752279848.336:820): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a2e640 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:08.415850 kernel: audit: type=1327 audit(1752279848.336:820): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:08.340000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:08.340000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a2e800 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:08.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:08.343000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:24:08.343000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014726e0 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:24:08.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:24:11.740062 kubelet[2829]: I0712 00:24:11.740005 2829 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 12 00:24:11.741223 env[1824]: time="2025-07-12T00:24:11.741123639Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 12 00:24:11.741895 kubelet[2829]: I0712 00:24:11.741775 2829 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 12 00:24:12.523016 systemd[1]: Created slice kubepods-besteffort-pod6fc0505c_4357_43e0_8ed3_1664903dbfa4.slice. Jul 12 00:24:12.554283 kubelet[2829]: I0712 00:24:12.554217 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/6fc0505c-4357-43e0-8ed3-1664903dbfa4-kube-proxy\") pod \"kube-proxy-kp482\" (UID: \"6fc0505c-4357-43e0-8ed3-1664903dbfa4\") " pod="kube-system/kube-proxy-kp482" Jul 12 00:24:12.554476 kubelet[2829]: I0712 00:24:12.554292 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6fc0505c-4357-43e0-8ed3-1664903dbfa4-xtables-lock\") pod \"kube-proxy-kp482\" (UID: \"6fc0505c-4357-43e0-8ed3-1664903dbfa4\") " pod="kube-system/kube-proxy-kp482" Jul 12 00:24:12.554476 kubelet[2829]: I0712 00:24:12.554337 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6fc0505c-4357-43e0-8ed3-1664903dbfa4-lib-modules\") pod \"kube-proxy-kp482\" (UID: \"6fc0505c-4357-43e0-8ed3-1664903dbfa4\") " pod="kube-system/kube-proxy-kp482" Jul 12 00:24:12.554476 kubelet[2829]: I0712 00:24:12.554380 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4q7jx\" (UniqueName: \"kubernetes.io/projected/6fc0505c-4357-43e0-8ed3-1664903dbfa4-kube-api-access-4q7jx\") pod \"kube-proxy-kp482\" (UID: \"6fc0505c-4357-43e0-8ed3-1664903dbfa4\") " pod="kube-system/kube-proxy-kp482" Jul 12 00:24:12.670935 systemd[1]: Created slice kubepods-besteffort-pod256bd4ee_f8a2_4e48_8281_1b14023b19b7.slice. Jul 12 00:24:12.697459 kubelet[2829]: I0712 00:24:12.697396 2829 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 12 00:24:12.755415 kubelet[2829]: I0712 00:24:12.755361 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/256bd4ee-f8a2-4e48-8281-1b14023b19b7-var-lib-calico\") pod \"tigera-operator-747864d56d-vgb7j\" (UID: \"256bd4ee-f8a2-4e48-8281-1b14023b19b7\") " pod="tigera-operator/tigera-operator-747864d56d-vgb7j" Jul 12 00:24:12.756129 kubelet[2829]: I0712 00:24:12.756094 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-th6kl\" (UniqueName: \"kubernetes.io/projected/256bd4ee-f8a2-4e48-8281-1b14023b19b7-kube-api-access-th6kl\") pod \"tigera-operator-747864d56d-vgb7j\" (UID: \"256bd4ee-f8a2-4e48-8281-1b14023b19b7\") " pod="tigera-operator/tigera-operator-747864d56d-vgb7j" Jul 12 00:24:12.838179 env[1824]: time="2025-07-12T00:24:12.837376595Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-kp482,Uid:6fc0505c-4357-43e0-8ed3-1664903dbfa4,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:12.887011 env[1824]: time="2025-07-12T00:24:12.884678506Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:12.887011 env[1824]: time="2025-07-12T00:24:12.884756425Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:12.887011 env[1824]: time="2025-07-12T00:24:12.884783346Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:12.887011 env[1824]: time="2025-07-12T00:24:12.885324798Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95988e78b2fdb2b78aba6a4df0708221bbb9931b9224e946d93399fdd8b129ef pid=2887 runtime=io.containerd.runc.v2 Jul 12 00:24:12.920436 systemd[1]: Started cri-containerd-95988e78b2fdb2b78aba6a4df0708221bbb9931b9224e946d93399fdd8b129ef.scope. Jul 12 00:24:12.979075 kernel: kauditd_printk_skb: 6 callbacks suppressed Jul 12 00:24:12.979277 kernel: audit: type=1400 audit(1752279852.967:823): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.980920 env[1824]: time="2025-07-12T00:24:12.980861755Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-vgb7j,Uid:256bd4ee-f8a2-4e48-8281-1b14023b19b7,Namespace:tigera-operator,Attempt:0,}" Jul 12 00:24:12.987717 kernel: audit: type=1400 audit(1752279852.967:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.987902 kernel: audit: type=1400 audit(1752279852.967:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.003213 kernel: audit: type=1400 audit(1752279852.967:826): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.011109 kernel: audit: type=1400 audit(1752279852.967:827): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.020563 kernel: audit: type=1400 audit(1752279852.967:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.026557 env[1824]: time="2025-07-12T00:24:13.026430942Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:13.026858 env[1824]: time="2025-07-12T00:24:13.026797803Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:13.027100 env[1824]: time="2025-07-12T00:24:13.027042842Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:13.027855 env[1824]: time="2025-07-12T00:24:13.027768019Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818 pid=2925 runtime=io.containerd.runc.v2 Jul 12 00:24:13.031733 kernel: audit: type=1400 audit(1752279852.967:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.040304 kernel: audit: type=1400 audit(1752279852.967:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.049312 kernel: audit: type=1400 audit(1752279852.967:831): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.057490 kernel: audit: type=1400 audit(1752279852.968:832): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.968000 audit: BPF prog-id=109 op=LOAD Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2887 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935393838653738623266646232623738616261366134646630373038 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2887 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935393838653738623266646232623738616261366134646630373038 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.972000 audit: BPF prog-id=110 op=LOAD Jul 12 00:24:12.972000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2887 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935393838653738623266646232623738616261366134646630373038 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit: BPF prog-id=111 op=LOAD Jul 12 00:24:12.978000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2887 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935393838653738623266646232623738616261366134646630373038 Jul 12 00:24:12.978000 audit: BPF prog-id=111 op=UNLOAD Jul 12 00:24:12.978000 audit: BPF prog-id=110 op=UNLOAD Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { perfmon } for pid=2900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit[2900]: AVC avc: denied { bpf } for pid=2900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:12.978000 audit: BPF prog-id=112 op=LOAD Jul 12 00:24:12.978000 audit[2900]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2887 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:12.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935393838653738623266646232623738616261366134646630373038 Jul 12 00:24:13.092154 env[1824]: time="2025-07-12T00:24:13.089070598Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-kp482,Uid:6fc0505c-4357-43e0-8ed3-1664903dbfa4,Namespace:kube-system,Attempt:0,} returns sandbox id \"95988e78b2fdb2b78aba6a4df0708221bbb9931b9224e946d93399fdd8b129ef\"" Jul 12 00:24:13.097298 systemd[1]: Started cri-containerd-166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818.scope. Jul 12 00:24:13.127876 env[1824]: time="2025-07-12T00:24:13.127761784Z" level=info msg="CreateContainer within sandbox \"95988e78b2fdb2b78aba6a4df0708221bbb9931b9224e946d93399fdd8b129ef\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.170000 audit: BPF prog-id=113 op=LOAD Jul 12 00:24:13.171000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.171000 audit[2936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2925 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136366639393037613135336533313633373630316263366166313466 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2925 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136366639393037613135336533313633373630316263366166313466 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit: BPF prog-id=114 op=LOAD Jul 12 00:24:13.172000 audit[2936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2925 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136366639393037613135336533313633373630316263366166313466 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.172000 audit: BPF prog-id=115 op=LOAD Jul 12 00:24:13.172000 audit[2936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2925 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136366639393037613135336533313633373630316263366166313466 Jul 12 00:24:13.173000 audit: BPF prog-id=115 op=UNLOAD Jul 12 00:24:13.173000 audit: BPF prog-id=114 op=UNLOAD Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.173000 audit: BPF prog-id=116 op=LOAD Jul 12 00:24:13.173000 audit[2936]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2925 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136366639393037613135336533313633373630316263366166313466 Jul 12 00:24:13.184447 env[1824]: time="2025-07-12T00:24:13.184316456Z" level=info msg="CreateContainer within sandbox \"95988e78b2fdb2b78aba6a4df0708221bbb9931b9224e946d93399fdd8b129ef\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"4ae7da2fdc6da5bebede8837b9eb354053090b0ab371145d946a95cf848a4296\"" Jul 12 00:24:13.189979 env[1824]: time="2025-07-12T00:24:13.189884790Z" level=info msg="StartContainer for \"4ae7da2fdc6da5bebede8837b9eb354053090b0ab371145d946a95cf848a4296\"" Jul 12 00:24:13.236847 systemd[1]: Started cri-containerd-4ae7da2fdc6da5bebede8837b9eb354053090b0ab371145d946a95cf848a4296.scope. Jul 12 00:24:13.250663 env[1824]: time="2025-07-12T00:24:13.250593833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-vgb7j,Uid:256bd4ee-f8a2-4e48-8281-1b14023b19b7,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818\"" Jul 12 00:24:13.258589 env[1824]: time="2025-07-12T00:24:13.258528319Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 12 00:24:13.314000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.314000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40002155a0 a2=3c a3=0 items=0 ppid=2887 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461653764613266646336646135626562656465383833376239656233 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.315000 audit: BPF prog-id=117 op=LOAD Jul 12 00:24:13.315000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40002158e0 a2=78 a3=0 items=0 ppid=2887 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461653764613266646336646135626562656465383833376239656233 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.317000 audit: BPF prog-id=118 op=LOAD Jul 12 00:24:13.317000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000215670 a2=78 a3=0 items=0 ppid=2887 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461653764613266646336646135626562656465383833376239656233 Jul 12 00:24:13.318000 audit: BPF prog-id=118 op=UNLOAD Jul 12 00:24:13.318000 audit: BPF prog-id=117 op=UNLOAD Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:13.319000 audit: BPF prog-id=119 op=LOAD Jul 12 00:24:13.319000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000215b40 a2=78 a3=0 items=0 ppid=2887 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461653764613266646336646135626562656465383833376239656233 Jul 12 00:24:13.356509 env[1824]: time="2025-07-12T00:24:13.356339531Z" level=info msg="StartContainer for \"4ae7da2fdc6da5bebede8837b9eb354053090b0ab371145d946a95cf848a4296\" returns successfully" Jul 12 00:24:13.615000 audit[3032]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.615000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda8aedd0 a2=0 a3=1 items=0 ppid=2981 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:24:13.619000 audit[3035]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.619000 audit[3035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9cb5570 a2=0 a3=1 items=0 ppid=2981 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.619000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:24:13.622000 audit[3036]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.622000 audit[3036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7bc3b40 a2=0 a3=1 items=0 ppid=2981 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.622000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:24:13.633000 audit[3037]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3037 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.633000 audit[3037]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeb0e2c90 a2=0 a3=1 items=0 ppid=2981 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.633000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:24:13.640000 audit[3038]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.640000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe28b3380 a2=0 a3=1 items=0 ppid=2981 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.640000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:24:13.645000 audit[3039]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3039 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.645000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7a88ac0 a2=0 a3=1 items=0 ppid=2981 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:24:13.722000 audit[3040]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.722000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd97a2370 a2=0 a3=1 items=0 ppid=2981 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.722000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:24:13.727000 audit[3042]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.727000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffa0378e0 a2=0 a3=1 items=0 ppid=2981 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.727000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 12 00:24:13.735000 audit[3045]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.735000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffec8d4d50 a2=0 a3=1 items=0 ppid=2981 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 12 00:24:13.738000 audit[3046]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.738000 audit[3046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6525bf0 a2=0 a3=1 items=0 ppid=2981 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:24:13.746000 audit[3048]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.746000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcc584730 a2=0 a3=1 items=0 ppid=2981 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:24:13.749000 audit[3049]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.749000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc11a73e0 a2=0 a3=1 items=0 ppid=2981 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:24:13.756000 audit[3051]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.756000 audit[3051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe0470780 a2=0 a3=1 items=0 ppid=2981 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:24:13.764000 audit[3054]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.764000 audit[3054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe294cc80 a2=0 a3=1 items=0 ppid=2981 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 12 00:24:13.767000 audit[3055]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.767000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9e0a480 a2=0 a3=1 items=0 ppid=2981 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:24:13.773000 audit[3057]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.773000 audit[3057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3b76490 a2=0 a3=1 items=0 ppid=2981 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:24:13.776000 audit[3058]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.776000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd4d31a0 a2=0 a3=1 items=0 ppid=2981 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:24:13.783000 audit[3060]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.783000 audit[3060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd98e0840 a2=0 a3=1 items=0 ppid=2981 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:24:13.791000 audit[3063]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.791000 audit[3063]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd4e07580 a2=0 a3=1 items=0 ppid=2981 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.791000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:24:13.799000 audit[3066]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.799000 audit[3066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff781a720 a2=0 a3=1 items=0 ppid=2981 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:24:13.801000 audit[3067]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.801000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffc1a7e10 a2=0 a3=1 items=0 ppid=2981 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.801000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:24:13.807000 audit[3069]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.807000 audit[3069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffde606f20 a2=0 a3=1 items=0 ppid=2981 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.807000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:13.815000 audit[3072]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.815000 audit[3072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe617e5d0 a2=0 a3=1 items=0 ppid=2981 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:13.818000 audit[3073]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.818000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffbe3e150 a2=0 a3=1 items=0 ppid=2981 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.818000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:24:13.823000 audit[3075]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:24:13.823000 audit[3075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd5fcb2a0 a2=0 a3=1 items=0 ppid=2981 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.823000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:24:13.883000 audit[3081]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3081 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:13.883000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe6d42b50 a2=0 a3=1 items=0 ppid=2981 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.883000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:13.900000 audit[3081]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3081 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:13.900000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe6d42b50 a2=0 a3=1 items=0 ppid=2981 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.900000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:13.903000 audit[3086]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3086 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.903000 audit[3086]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff5a88610 a2=0 a3=1 items=0 ppid=2981 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.903000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:24:13.909000 audit[3088]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.909000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd69573c0 a2=0 a3=1 items=0 ppid=2981 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.909000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 12 00:24:13.917000 audit[3091]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3091 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.917000 audit[3091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffc696be0 a2=0 a3=1 items=0 ppid=2981 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 12 00:24:13.920000 audit[3092]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3092 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.920000 audit[3092]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec5b4a10 a2=0 a3=1 items=0 ppid=2981 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:24:13.926000 audit[3094]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.926000 audit[3094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd67eb9a0 a2=0 a3=1 items=0 ppid=2981 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.926000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:24:13.929000 audit[3095]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.929000 audit[3095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1b57f80 a2=0 a3=1 items=0 ppid=2981 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.929000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:24:13.935000 audit[3097]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.935000 audit[3097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff4ed2820 a2=0 a3=1 items=0 ppid=2981 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 12 00:24:13.944000 audit[3100]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.944000 audit[3100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd8fcf230 a2=0 a3=1 items=0 ppid=2981 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:24:13.947000 audit[3101]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.947000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5743800 a2=0 a3=1 items=0 ppid=2981 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:24:13.955000 audit[3103]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.955000 audit[3103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe83cf640 a2=0 a3=1 items=0 ppid=2981 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.955000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:24:13.958000 audit[3104]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.958000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd94be4a0 a2=0 a3=1 items=0 ppid=2981 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:24:13.965000 audit[3106]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.965000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffe061340 a2=0 a3=1 items=0 ppid=2981 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.965000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:24:13.974000 audit[3109]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.974000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb9bec90 a2=0 a3=1 items=0 ppid=2981 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.974000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:24:13.984000 audit[3112]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.984000 audit[3112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe7502c10 a2=0 a3=1 items=0 ppid=2981 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.984000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 12 00:24:13.987000 audit[3113]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.987000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff8f8f880 a2=0 a3=1 items=0 ppid=2981 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.987000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:24:13.993000 audit[3115]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:13.993000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd13e2b80 a2=0 a3=1 items=0 ppid=2981 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:13.993000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:14.000000 audit[3118]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:14.000000 audit[3118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=fffff8ecfbc0 a2=0 a3=1 items=0 ppid=2981 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.000000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:24:14.003000 audit[3119]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:14.003000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe444c170 a2=0 a3=1 items=0 ppid=2981 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:24:14.008000 audit[3121]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:14.008000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcc899730 a2=0 a3=1 items=0 ppid=2981 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.008000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:24:14.011000 audit[3122]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:14.011000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef291e50 a2=0 a3=1 items=0 ppid=2981 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.011000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:24:14.017000 audit[3124]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3124 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:14.017000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff2f08f80 a2=0 a3=1 items=0 ppid=2981 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:24:14.026000 audit[3127]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:24:14.026000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe94b8740 a2=0 a3=1 items=0 ppid=2981 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.026000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:24:14.037000 audit[3129]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:24:14.037000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffdb2e8e50 a2=0 a3=1 items=0 ppid=2981 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.037000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:14.038000 audit[3129]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:24:14.038000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffdb2e8e50 a2=0 a3=1 items=0 ppid=2981 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:14.038000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:14.745345 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3497439415.mount: Deactivated successfully. Jul 12 00:24:15.888510 env[1824]: time="2025-07-12T00:24:15.888421305Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:15.891623 env[1824]: time="2025-07-12T00:24:15.891549781Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:15.895283 env[1824]: time="2025-07-12T00:24:15.895207369Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:15.898013 env[1824]: time="2025-07-12T00:24:15.897901718Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:15.900425 env[1824]: time="2025-07-12T00:24:15.900349220Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 12 00:24:15.912343 env[1824]: time="2025-07-12T00:24:15.912228069Z" level=info msg="CreateContainer within sandbox \"166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 12 00:24:15.935438 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3103107153.mount: Deactivated successfully. Jul 12 00:24:15.951523 env[1824]: time="2025-07-12T00:24:15.951459616Z" level=info msg="CreateContainer within sandbox \"166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb\"" Jul 12 00:24:15.954807 env[1824]: time="2025-07-12T00:24:15.953785800Z" level=info msg="StartContainer for \"6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb\"" Jul 12 00:24:16.010310 systemd[1]: Started cri-containerd-6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb.scope. Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.061000 audit: BPF prog-id=120 op=LOAD Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2925 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:16.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639313463623563366534613466373834336634303961643863326263 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2925 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:16.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639313463623563366534613466373834336634303961643863326263 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.063000 audit: BPF prog-id=121 op=LOAD Jul 12 00:24:16.063000 audit[3138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2925 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:16.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639313463623563366534613466373834336634303961643863326263 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.065000 audit: BPF prog-id=122 op=LOAD Jul 12 00:24:16.065000 audit[3138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2925 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:16.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639313463623563366534613466373834336634303961643863326263 Jul 12 00:24:16.067000 audit: BPF prog-id=122 op=UNLOAD Jul 12 00:24:16.067000 audit: BPF prog-id=121 op=UNLOAD Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { perfmon } for pid=3138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit[3138]: AVC avc: denied { bpf } for pid=3138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:16.067000 audit: BPF prog-id=123 op=LOAD Jul 12 00:24:16.067000 audit[3138]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2925 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:16.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639313463623563366534613466373834336634303961643863326263 Jul 12 00:24:16.105921 env[1824]: time="2025-07-12T00:24:16.105827974Z" level=info msg="StartContainer for \"6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb\" returns successfully" Jul 12 00:24:16.301840 kubelet[2829]: I0712 00:24:16.301740 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-kp482" podStartSLOduration=4.301716964 podStartE2EDuration="4.301716964s" podCreationTimestamp="2025-07-12 00:24:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:24:14.297377003 +0000 UTC m=+7.695580366" watchObservedRunningTime="2025-07-12 00:24:16.301716964 +0000 UTC m=+9.699920327" Jul 12 00:24:24.776621 sudo[2110]: pam_unix(sudo:session): session closed for user root Jul 12 00:24:24.783006 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 12 00:24:24.783155 kernel: audit: type=1106 audit(1752279864.775:934): pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:24.775000 audit[2110]: USER_END pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:24.775000 audit[2110]: CRED_DISP pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:24.804218 kernel: audit: type=1104 audit(1752279864.775:935): pid=2110 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:24:24.806316 sshd[2107]: pam_unix(sshd:session): session closed for user core Jul 12 00:24:24.812626 systemd-logind[1813]: Session 7 logged out. Waiting for processes to exit. Jul 12 00:24:24.813102 systemd[1]: sshd@6-172.31.25.27:22-147.75.109.163:59862.service: Deactivated successfully. Jul 12 00:24:24.815738 systemd[1]: session-7.scope: Deactivated successfully. Jul 12 00:24:24.816428 systemd[1]: session-7.scope: Consumed 9.977s CPU time. Jul 12 00:24:24.818041 systemd-logind[1813]: Removed session 7. Jul 12 00:24:24.808000 audit[2107]: USER_END pid=2107 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:24.835027 kernel: audit: type=1106 audit(1752279864.808:936): pid=2107 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:24.808000 audit[2107]: CRED_DISP pid=2107 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:24.848009 kernel: audit: type=1104 audit(1752279864.808:937): pid=2107 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:24:24.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.27:22-147.75.109.163:59862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:24.860066 kernel: audit: type=1131 audit(1752279864.812:938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.27:22-147.75.109.163:59862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:24:27.321000 audit[3213]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:27.329997 kernel: audit: type=1325 audit(1752279867.321:939): table=filter:89 family=2 entries=14 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:27.330129 kernel: audit: type=1300 audit(1752279867.321:939): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff17f65c0 a2=0 a3=1 items=0 ppid=2981 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:27.321000 audit[3213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff17f65c0 a2=0 a3=1 items=0 ppid=2981 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:27.321000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:27.352553 kernel: audit: type=1327 audit(1752279867.321:939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:27.355000 audit[3213]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:27.363000 kernel: audit: type=1325 audit(1752279867.355:940): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:27.355000 audit[3213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff17f65c0 a2=0 a3=1 items=0 ppid=2981 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:27.355000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:27.484997 kernel: audit: type=1300 audit(1752279867.355:940): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff17f65c0 a2=0 a3=1 items=0 ppid=2981 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:27.566000 audit[3215]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=3215 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:27.566000 audit[3215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffda41d330 a2=0 a3=1 items=0 ppid=2981 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:27.566000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:27.580000 audit[3215]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3215 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:27.580000 audit[3215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffda41d330 a2=0 a3=1 items=0 ppid=2981 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:27.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.219000 audit[3220]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.222939 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 12 00:24:34.223060 kernel: audit: type=1325 audit(1752279874.219:943): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.219000 audit[3220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc76062a0 a2=0 a3=1 items=0 ppid=2981 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.219000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.275709 kernel: audit: type=1300 audit(1752279874.219:943): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc76062a0 a2=0 a3=1 items=0 ppid=2981 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.275848 kernel: audit: type=1327 audit(1752279874.219:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.269000 audit[3220]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.284771 kernel: audit: type=1325 audit(1752279874.269:944): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.269000 audit[3220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc76062a0 a2=0 a3=1 items=0 ppid=2981 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.299674 kernel: audit: type=1300 audit(1752279874.269:944): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc76062a0 a2=0 a3=1 items=0 ppid=2981 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.308746 kernel: audit: type=1327 audit(1752279874.269:944): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.331005 kubelet[2829]: I0712 00:24:34.330896 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-vgb7j" podStartSLOduration=19.685808709 podStartE2EDuration="22.330875912s" podCreationTimestamp="2025-07-12 00:24:12 +0000 UTC" firstStartedPulling="2025-07-12 00:24:13.257588254 +0000 UTC m=+6.655791605" lastFinishedPulling="2025-07-12 00:24:15.902655457 +0000 UTC m=+9.300858808" observedRunningTime="2025-07-12 00:24:16.304017352 +0000 UTC m=+9.702220787" watchObservedRunningTime="2025-07-12 00:24:34.330875912 +0000 UTC m=+27.729079275" Jul 12 00:24:34.349251 systemd[1]: Created slice kubepods-besteffort-pod61081b48_8c5a_49bc_aa40_0926c868f804.slice. Jul 12 00:24:34.359365 kubelet[2829]: E0712 00:24:34.359291 2829 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"tigera-ca-bundle\" is forbidden: User \"system:node:ip-172-31-25-27\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-27' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" Jul 12 00:24:34.359365 kubelet[2829]: E0712 00:24:34.359312 2829 reflector.go:200] "Failed to watch" err="failed to list *v1.Secret: secrets \"typha-certs\" is forbidden: User \"system:node:ip-172-31-25-27\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-27' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" Jul 12 00:24:34.363547 kubelet[2829]: I0712 00:24:34.363470 2829 status_manager.go:895] "Failed to get status for pod" podUID="61081b48-8c5a-49bc-aa40-0926c868f804" pod="calico-system/calico-typha-65b5487667-rknnd" err="pods \"calico-typha-65b5487667-rknnd\" is forbidden: User \"system:node:ip-172-31-25-27\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-27' and this object" Jul 12 00:24:34.364996 kubelet[2829]: E0712 00:24:34.364907 2829 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:ip-172-31-25-27\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-25-27' and this object" logger="UnhandledError" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" Jul 12 00:24:34.421216 kubelet[2829]: I0712 00:24:34.421168 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/61081b48-8c5a-49bc-aa40-0926c868f804-typha-certs\") pod \"calico-typha-65b5487667-rknnd\" (UID: \"61081b48-8c5a-49bc-aa40-0926c868f804\") " pod="calico-system/calico-typha-65b5487667-rknnd" Jul 12 00:24:34.421481 kubelet[2829]: I0712 00:24:34.421440 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d2xtm\" (UniqueName: \"kubernetes.io/projected/61081b48-8c5a-49bc-aa40-0926c868f804-kube-api-access-d2xtm\") pod \"calico-typha-65b5487667-rknnd\" (UID: \"61081b48-8c5a-49bc-aa40-0926c868f804\") " pod="calico-system/calico-typha-65b5487667-rknnd" Jul 12 00:24:34.421662 kubelet[2829]: I0712 00:24:34.421636 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/61081b48-8c5a-49bc-aa40-0926c868f804-tigera-ca-bundle\") pod \"calico-typha-65b5487667-rknnd\" (UID: \"61081b48-8c5a-49bc-aa40-0926c868f804\") " pod="calico-system/calico-typha-65b5487667-rknnd" Jul 12 00:24:34.433000 audit[3222]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.433000 audit[3222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffead76c50 a2=0 a3=1 items=0 ppid=2981 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.452350 kernel: audit: type=1325 audit(1752279874.433:945): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.452511 kernel: audit: type=1300 audit(1752279874.433:945): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffead76c50 a2=0 a3=1 items=0 ppid=2981 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.433000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.464615 kernel: audit: type=1327 audit(1752279874.433:945): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.464000 audit[3222]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.464000 audit[3222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffead76c50 a2=0 a3=1 items=0 ppid=2981 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:34.477087 kernel: audit: type=1325 audit(1752279874.464:946): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:34.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:34.704610 systemd[1]: Created slice kubepods-besteffort-poddfffc165_142d_465c_ad5b_23ce27ad393b.slice. Jul 12 00:24:34.724144 kubelet[2829]: I0712 00:24:34.724069 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-cni-log-dir\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724314 kubelet[2829]: I0712 00:24:34.724149 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-cni-net-dir\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724314 kubelet[2829]: I0712 00:24:34.724195 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/dfffc165-142d-465c-ad5b-23ce27ad393b-node-certs\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724314 kubelet[2829]: I0712 00:24:34.724232 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-var-lib-calico\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724314 kubelet[2829]: I0712 00:24:34.724275 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-cni-bin-dir\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724620 kubelet[2829]: I0712 00:24:34.724316 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bckzp\" (UniqueName: \"kubernetes.io/projected/dfffc165-142d-465c-ad5b-23ce27ad393b-kube-api-access-bckzp\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724620 kubelet[2829]: I0712 00:24:34.724356 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-policysync\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724620 kubelet[2829]: I0712 00:24:34.724422 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-flexvol-driver-host\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724620 kubelet[2829]: I0712 00:24:34.724463 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-lib-modules\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724620 kubelet[2829]: I0712 00:24:34.724499 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-xtables-lock\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724908 kubelet[2829]: I0712 00:24:34.724537 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/dfffc165-142d-465c-ad5b-23ce27ad393b-var-run-calico\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.724908 kubelet[2829]: I0712 00:24:34.724580 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dfffc165-142d-465c-ad5b-23ce27ad393b-tigera-ca-bundle\") pod \"calico-node-vtxjv\" (UID: \"dfffc165-142d-465c-ad5b-23ce27ad393b\") " pod="calico-system/calico-node-vtxjv" Jul 12 00:24:34.844904 kubelet[2829]: E0712 00:24:34.844767 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:34.846178 kubelet[2829]: E0712 00:24:34.846126 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.846317 kubelet[2829]: W0712 00:24:34.846190 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.846317 kubelet[2829]: E0712 00:24:34.846228 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.905595 kubelet[2829]: E0712 00:24:34.905520 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.905595 kubelet[2829]: W0712 00:24:34.905583 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.905944 kubelet[2829]: E0712 00:24:34.905617 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.906126 kubelet[2829]: E0712 00:24:34.906084 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.906220 kubelet[2829]: W0712 00:24:34.906119 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.906220 kubelet[2829]: E0712 00:24:34.906192 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.906640 kubelet[2829]: E0712 00:24:34.906586 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.906738 kubelet[2829]: W0712 00:24:34.906641 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.906738 kubelet[2829]: E0712 00:24:34.906670 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.907120 kubelet[2829]: E0712 00:24:34.907081 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.907120 kubelet[2829]: W0712 00:24:34.907111 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.907284 kubelet[2829]: E0712 00:24:34.907138 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.907629 kubelet[2829]: E0712 00:24:34.907579 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.907629 kubelet[2829]: W0712 00:24:34.907609 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.907818 kubelet[2829]: E0712 00:24:34.907634 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.908012 kubelet[2829]: E0712 00:24:34.907967 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.908012 kubelet[2829]: W0712 00:24:34.908005 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.908152 kubelet[2829]: E0712 00:24:34.908028 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.908474 kubelet[2829]: E0712 00:24:34.908431 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.908474 kubelet[2829]: W0712 00:24:34.908461 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.908663 kubelet[2829]: E0712 00:24:34.908484 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.909114 kubelet[2829]: E0712 00:24:34.908800 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.909114 kubelet[2829]: W0712 00:24:34.908829 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.909114 kubelet[2829]: E0712 00:24:34.908852 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.912851 kubelet[2829]: E0712 00:24:34.912804 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.912851 kubelet[2829]: W0712 00:24:34.912845 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.913149 kubelet[2829]: E0712 00:24:34.912879 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.913334 kubelet[2829]: E0712 00:24:34.913302 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.913406 kubelet[2829]: W0712 00:24:34.913332 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.913406 kubelet[2829]: E0712 00:24:34.913356 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.913904 kubelet[2829]: E0712 00:24:34.913870 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.913904 kubelet[2829]: W0712 00:24:34.913900 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.914134 kubelet[2829]: E0712 00:24:34.913928 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.914369 kubelet[2829]: E0712 00:24:34.914340 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.914444 kubelet[2829]: W0712 00:24:34.914369 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.914444 kubelet[2829]: E0712 00:24:34.914392 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.914834 kubelet[2829]: E0712 00:24:34.914804 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.914916 kubelet[2829]: W0712 00:24:34.914833 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.914916 kubelet[2829]: E0712 00:24:34.914857 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.915226 kubelet[2829]: E0712 00:24:34.915198 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.915306 kubelet[2829]: W0712 00:24:34.915228 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.915306 kubelet[2829]: E0712 00:24:34.915251 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.917595 kubelet[2829]: E0712 00:24:34.916913 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.917595 kubelet[2829]: W0712 00:24:34.916971 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.917595 kubelet[2829]: E0712 00:24:34.917019 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.917595 kubelet[2829]: E0712 00:24:34.917407 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.917595 kubelet[2829]: W0712 00:24:34.917427 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.917595 kubelet[2829]: E0712 00:24:34.917451 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.918568 kubelet[2829]: E0712 00:24:34.918482 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.918568 kubelet[2829]: W0712 00:24:34.918519 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.918568 kubelet[2829]: E0712 00:24:34.918565 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.918940 kubelet[2829]: E0712 00:24:34.918912 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.918940 kubelet[2829]: W0712 00:24:34.918940 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.919120 kubelet[2829]: E0712 00:24:34.918994 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.920158 kubelet[2829]: E0712 00:24:34.919638 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.920158 kubelet[2829]: W0712 00:24:34.919682 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.920158 kubelet[2829]: E0712 00:24:34.919713 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.920158 kubelet[2829]: E0712 00:24:34.920161 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.920517 kubelet[2829]: W0712 00:24:34.920185 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.920517 kubelet[2829]: E0712 00:24:34.920212 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.928278 kubelet[2829]: E0712 00:24:34.928223 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.928278 kubelet[2829]: W0712 00:24:34.928264 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.928563 kubelet[2829]: E0712 00:24:34.928299 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.928563 kubelet[2829]: I0712 00:24:34.928355 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1-socket-dir\") pod \"csi-node-driver-wtrsr\" (UID: \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\") " pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:34.929073 kubelet[2829]: E0712 00:24:34.929027 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.929073 kubelet[2829]: W0712 00:24:34.929064 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.929226 kubelet[2829]: E0712 00:24:34.929095 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.929226 kubelet[2829]: I0712 00:24:34.929141 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1-kubelet-dir\") pod \"csi-node-driver-wtrsr\" (UID: \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\") " pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:34.929691 kubelet[2829]: E0712 00:24:34.929646 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.929691 kubelet[2829]: W0712 00:24:34.929682 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.929870 kubelet[2829]: E0712 00:24:34.929711 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.929870 kubelet[2829]: I0712 00:24:34.929764 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1-varrun\") pod \"csi-node-driver-wtrsr\" (UID: \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\") " pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:34.930257 kubelet[2829]: E0712 00:24:34.930215 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.930257 kubelet[2829]: W0712 00:24:34.930247 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.930437 kubelet[2829]: E0712 00:24:34.930273 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.930503 kubelet[2829]: I0712 00:24:34.930472 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mgzq4\" (UniqueName: \"kubernetes.io/projected/37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1-kube-api-access-mgzq4\") pod \"csi-node-driver-wtrsr\" (UID: \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\") " pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:34.930774 kubelet[2829]: E0712 00:24:34.930728 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.930774 kubelet[2829]: W0712 00:24:34.930761 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.930908 kubelet[2829]: E0712 00:24:34.930787 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.931237 kubelet[2829]: E0712 00:24:34.931195 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.931237 kubelet[2829]: W0712 00:24:34.931228 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.931385 kubelet[2829]: E0712 00:24:34.931255 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.931658 kubelet[2829]: E0712 00:24:34.931616 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.931658 kubelet[2829]: W0712 00:24:34.931648 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.931800 kubelet[2829]: E0712 00:24:34.931678 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.932133 kubelet[2829]: E0712 00:24:34.932088 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.932133 kubelet[2829]: W0712 00:24:34.932122 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.932281 kubelet[2829]: E0712 00:24:34.932147 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.932281 kubelet[2829]: I0712 00:24:34.932211 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1-registration-dir\") pod \"csi-node-driver-wtrsr\" (UID: \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\") " pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:34.932617 kubelet[2829]: E0712 00:24:34.932572 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.932617 kubelet[2829]: W0712 00:24:34.932606 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.932790 kubelet[2829]: E0712 00:24:34.932632 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.933034 kubelet[2829]: E0712 00:24:34.932970 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.933034 kubelet[2829]: W0712 00:24:34.933026 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.933170 kubelet[2829]: E0712 00:24:34.933050 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.933531 kubelet[2829]: E0712 00:24:34.933479 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.933531 kubelet[2829]: W0712 00:24:34.933516 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.933725 kubelet[2829]: E0712 00:24:34.933543 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.933943 kubelet[2829]: E0712 00:24:34.933898 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.933943 kubelet[2829]: W0712 00:24:34.933930 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.934175 kubelet[2829]: E0712 00:24:34.934010 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.934389 kubelet[2829]: E0712 00:24:34.934345 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.934389 kubelet[2829]: W0712 00:24:34.934378 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.934519 kubelet[2829]: E0712 00:24:34.934402 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.934796 kubelet[2829]: E0712 00:24:34.934753 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.934796 kubelet[2829]: W0712 00:24:34.934784 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.934983 kubelet[2829]: E0712 00:24:34.934808 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:34.935288 kubelet[2829]: E0712 00:24:34.935246 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:34.935393 kubelet[2829]: W0712 00:24:34.935277 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:34.935393 kubelet[2829]: E0712 00:24:34.935336 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.034486 kubelet[2829]: E0712 00:24:35.034425 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.034486 kubelet[2829]: W0712 00:24:35.034470 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.034737 kubelet[2829]: E0712 00:24:35.034505 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.035074 kubelet[2829]: E0712 00:24:35.035031 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.035074 kubelet[2829]: W0712 00:24:35.035066 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.035243 kubelet[2829]: E0712 00:24:35.035094 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.035885 kubelet[2829]: E0712 00:24:35.035840 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.035885 kubelet[2829]: W0712 00:24:35.035875 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.036158 kubelet[2829]: E0712 00:24:35.035904 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.036473 kubelet[2829]: E0712 00:24:35.036429 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.036473 kubelet[2829]: W0712 00:24:35.036463 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.036614 kubelet[2829]: E0712 00:24:35.036490 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.038180 kubelet[2829]: E0712 00:24:35.038122 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.038180 kubelet[2829]: W0712 00:24:35.038165 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.038382 kubelet[2829]: E0712 00:24:35.038198 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.038708 kubelet[2829]: E0712 00:24:35.038663 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.038708 kubelet[2829]: W0712 00:24:35.038697 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.038846 kubelet[2829]: E0712 00:24:35.038722 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.040355 kubelet[2829]: E0712 00:24:35.040300 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.040355 kubelet[2829]: W0712 00:24:35.040342 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.040592 kubelet[2829]: E0712 00:24:35.040374 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.040826 kubelet[2829]: E0712 00:24:35.040780 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.040826 kubelet[2829]: W0712 00:24:35.040815 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.040995 kubelet[2829]: E0712 00:24:35.040841 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.042198 kubelet[2829]: E0712 00:24:35.042140 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.042198 kubelet[2829]: W0712 00:24:35.042182 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.042393 kubelet[2829]: E0712 00:24:35.042214 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.042683 kubelet[2829]: E0712 00:24:35.042638 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.042683 kubelet[2829]: W0712 00:24:35.042672 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.042820 kubelet[2829]: E0712 00:24:35.042697 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.044185 kubelet[2829]: E0712 00:24:35.044131 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.044185 kubelet[2829]: W0712 00:24:35.044172 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.044370 kubelet[2829]: E0712 00:24:35.044202 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.044664 kubelet[2829]: E0712 00:24:35.044616 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.044664 kubelet[2829]: W0712 00:24:35.044652 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.044839 kubelet[2829]: E0712 00:24:35.044684 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.046194 kubelet[2829]: E0712 00:24:35.046142 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.046355 kubelet[2829]: W0712 00:24:35.046194 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.046355 kubelet[2829]: E0712 00:24:35.046226 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.046653 kubelet[2829]: E0712 00:24:35.046605 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.046653 kubelet[2829]: W0712 00:24:35.046641 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.046791 kubelet[2829]: E0712 00:24:35.046666 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.047134 kubelet[2829]: E0712 00:24:35.047094 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.047134 kubelet[2829]: W0712 00:24:35.047126 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.047278 kubelet[2829]: E0712 00:24:35.047152 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.047524 kubelet[2829]: E0712 00:24:35.047483 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.047524 kubelet[2829]: W0712 00:24:35.047514 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.047654 kubelet[2829]: E0712 00:24:35.047536 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.048025 kubelet[2829]: E0712 00:24:35.047938 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.048025 kubelet[2829]: W0712 00:24:35.048017 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.048189 kubelet[2829]: E0712 00:24:35.048041 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.050213 kubelet[2829]: E0712 00:24:35.050151 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.050213 kubelet[2829]: W0712 00:24:35.050196 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.050421 kubelet[2829]: E0712 00:24:35.050230 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.050711 kubelet[2829]: E0712 00:24:35.050663 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.050711 kubelet[2829]: W0712 00:24:35.050698 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.050857 kubelet[2829]: E0712 00:24:35.050724 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.052521 kubelet[2829]: E0712 00:24:35.052150 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.052521 kubelet[2829]: W0712 00:24:35.052186 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.052521 kubelet[2829]: E0712 00:24:35.052220 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.053230 kubelet[2829]: E0712 00:24:35.052888 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.053230 kubelet[2829]: W0712 00:24:35.052916 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.053230 kubelet[2829]: E0712 00:24:35.052944 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.053906 kubelet[2829]: E0712 00:24:35.053600 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.053906 kubelet[2829]: W0712 00:24:35.053629 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.053906 kubelet[2829]: E0712 00:24:35.053657 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.054587 kubelet[2829]: E0712 00:24:35.054297 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.054587 kubelet[2829]: W0712 00:24:35.054325 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.054587 kubelet[2829]: E0712 00:24:35.054354 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.055014 kubelet[2829]: E0712 00:24:35.054985 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.055154 kubelet[2829]: W0712 00:24:35.055124 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.055281 kubelet[2829]: E0712 00:24:35.055254 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.058409 kubelet[2829]: E0712 00:24:35.058365 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.058619 kubelet[2829]: W0712 00:24:35.058586 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.058750 kubelet[2829]: E0712 00:24:35.058724 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.493000 audit[3286]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3286 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:35.493000 audit[3286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffecfe6360 a2=0 a3=1 items=0 ppid=2981 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:35.493000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:35.499000 audit[3286]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3286 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:35.499000 audit[3286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffecfe6360 a2=0 a3=1 items=0 ppid=2981 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:35.499000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:35.523255 kubelet[2829]: E0712 00:24:35.523201 2829 secret.go:189] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Jul 12 00:24:35.524010 kubelet[2829]: E0712 00:24:35.523979 2829 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/61081b48-8c5a-49bc-aa40-0926c868f804-typha-certs podName:61081b48-8c5a-49bc-aa40-0926c868f804 nodeName:}" failed. No retries permitted until 2025-07-12 00:24:36.023904269 +0000 UTC m=+29.422107620 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/61081b48-8c5a-49bc-aa40-0926c868f804-typha-certs") pod "calico-typha-65b5487667-rknnd" (UID: "61081b48-8c5a-49bc-aa40-0926c868f804") : failed to sync secret cache: timed out waiting for the condition Jul 12 00:24:35.524194 kubelet[2829]: E0712 00:24:35.524016 2829 configmap.go:193] Couldn't get configMap calico-system/tigera-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.524374 kubelet[2829]: E0712 00:24:35.524346 2829 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/61081b48-8c5a-49bc-aa40-0926c868f804-tigera-ca-bundle podName:61081b48-8c5a-49bc-aa40-0926c868f804 nodeName:}" failed. No retries permitted until 2025-07-12 00:24:36.02432444 +0000 UTC m=+29.422527779 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "tigera-ca-bundle" (UniqueName: "kubernetes.io/configmap/61081b48-8c5a-49bc-aa40-0926c868f804-tigera-ca-bundle") pod "calico-typha-65b5487667-rknnd" (UID: "61081b48-8c5a-49bc-aa40-0926c868f804") : failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.542378 kubelet[2829]: E0712 00:24:35.542320 2829 projected.go:289] Couldn't get configMap calico-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.542378 kubelet[2829]: E0712 00:24:35.542385 2829 projected.go:194] Error preparing data for projected volume kube-api-access-d2xtm for pod calico-system/calico-typha-65b5487667-rknnd: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.542592 kubelet[2829]: E0712 00:24:35.542488 2829 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/61081b48-8c5a-49bc-aa40-0926c868f804-kube-api-access-d2xtm podName:61081b48-8c5a-49bc-aa40-0926c868f804 nodeName:}" failed. No retries permitted until 2025-07-12 00:24:36.04246112 +0000 UTC m=+29.440664471 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-d2xtm" (UniqueName: "kubernetes.io/projected/61081b48-8c5a-49bc-aa40-0926c868f804-kube-api-access-d2xtm") pod "calico-typha-65b5487667-rknnd" (UID: "61081b48-8c5a-49bc-aa40-0926c868f804") : failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.543350 kubelet[2829]: E0712 00:24:35.543309 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.543552 kubelet[2829]: W0712 00:24:35.543520 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.543680 kubelet[2829]: E0712 00:24:35.543655 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.545280 kubelet[2829]: E0712 00:24:35.545226 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.545280 kubelet[2829]: W0712 00:24:35.545267 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.545518 kubelet[2829]: E0712 00:24:35.545302 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.545987 kubelet[2829]: E0712 00:24:35.545899 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.545987 kubelet[2829]: W0712 00:24:35.545937 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.546167 kubelet[2829]: E0712 00:24:35.545990 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.647077 kubelet[2829]: E0712 00:24:35.647039 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.647273 kubelet[2829]: W0712 00:24:35.647245 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.647400 kubelet[2829]: E0712 00:24:35.647375 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.647972 kubelet[2829]: E0712 00:24:35.647928 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.648134 kubelet[2829]: W0712 00:24:35.648107 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.648255 kubelet[2829]: E0712 00:24:35.648230 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.649344 kubelet[2829]: E0712 00:24:35.649304 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.649536 kubelet[2829]: W0712 00:24:35.649507 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.649660 kubelet[2829]: E0712 00:24:35.649635 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.678677 kubelet[2829]: E0712 00:24:35.678624 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.678677 kubelet[2829]: W0712 00:24:35.678663 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.678889 kubelet[2829]: E0712 00:24:35.678698 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.751362 kubelet[2829]: E0712 00:24:35.751218 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.751362 kubelet[2829]: W0712 00:24:35.751256 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.751362 kubelet[2829]: E0712 00:24:35.751290 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.754505 kubelet[2829]: E0712 00:24:35.754457 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.754505 kubelet[2829]: W0712 00:24:35.754496 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.754732 kubelet[2829]: E0712 00:24:35.754530 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.755025 kubelet[2829]: E0712 00:24:35.754995 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.755125 kubelet[2829]: W0712 00:24:35.755024 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.755125 kubelet[2829]: E0712 00:24:35.755053 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.856768 kubelet[2829]: E0712 00:24:35.856709 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.856768 kubelet[2829]: W0712 00:24:35.856749 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.857003 kubelet[2829]: E0712 00:24:35.856782 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.857329 kubelet[2829]: E0712 00:24:35.857263 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.857329 kubelet[2829]: W0712 00:24:35.857302 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.857498 kubelet[2829]: E0712 00:24:35.857333 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.857827 kubelet[2829]: E0712 00:24:35.857787 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.857827 kubelet[2829]: W0712 00:24:35.857818 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.858037 kubelet[2829]: E0712 00:24:35.857843 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.862792 kubelet[2829]: E0712 00:24:35.862738 2829 projected.go:289] Couldn't get configMap calico-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.862792 kubelet[2829]: E0712 00:24:35.862789 2829 projected.go:194] Error preparing data for projected volume kube-api-access-bckzp for pod calico-system/calico-node-vtxjv: failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.863040 kubelet[2829]: E0712 00:24:35.862892 2829 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/dfffc165-142d-465c-ad5b-23ce27ad393b-kube-api-access-bckzp podName:dfffc165-142d-465c-ad5b-23ce27ad393b nodeName:}" failed. No retries permitted until 2025-07-12 00:24:36.362856559 +0000 UTC m=+29.761059910 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-bckzp" (UniqueName: "kubernetes.io/projected/dfffc165-142d-465c-ad5b-23ce27ad393b-kube-api-access-bckzp") pod "calico-node-vtxjv" (UID: "dfffc165-142d-465c-ad5b-23ce27ad393b") : failed to sync configmap cache: timed out waiting for the condition Jul 12 00:24:35.930040 kubelet[2829]: E0712 00:24:35.929931 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.930246 kubelet[2829]: W0712 00:24:35.930216 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.930417 kubelet[2829]: E0712 00:24:35.930388 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.959310 kubelet[2829]: E0712 00:24:35.959275 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.959505 kubelet[2829]: W0712 00:24:35.959477 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.959628 kubelet[2829]: E0712 00:24:35.959602 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.960189 kubelet[2829]: E0712 00:24:35.960160 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.960349 kubelet[2829]: W0712 00:24:35.960322 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.960521 kubelet[2829]: E0712 00:24:35.960495 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.960976 kubelet[2829]: E0712 00:24:35.960930 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.961105 kubelet[2829]: W0712 00:24:35.961080 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.961224 kubelet[2829]: E0712 00:24:35.961200 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:35.961662 kubelet[2829]: E0712 00:24:35.961640 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:35.961779 kubelet[2829]: W0712 00:24:35.961755 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:35.961907 kubelet[2829]: E0712 00:24:35.961884 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.063609 kubelet[2829]: E0712 00:24:36.063456 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.063609 kubelet[2829]: W0712 00:24:36.063495 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.063609 kubelet[2829]: E0712 00:24:36.063527 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.066701 kubelet[2829]: E0712 00:24:36.066649 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.066701 kubelet[2829]: W0712 00:24:36.066688 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.067018 kubelet[2829]: E0712 00:24:36.066722 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.067297 kubelet[2829]: E0712 00:24:36.067260 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.067297 kubelet[2829]: W0712 00:24:36.067293 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.067437 kubelet[2829]: E0712 00:24:36.067320 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.067666 kubelet[2829]: E0712 00:24:36.067629 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.067666 kubelet[2829]: W0712 00:24:36.067659 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.067872 kubelet[2829]: E0712 00:24:36.067687 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.068070 kubelet[2829]: E0712 00:24:36.068034 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.068070 kubelet[2829]: W0712 00:24:36.068062 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.068226 kubelet[2829]: E0712 00:24:36.068085 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.068418 kubelet[2829]: E0712 00:24:36.068384 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.068418 kubelet[2829]: W0712 00:24:36.068411 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.068601 kubelet[2829]: E0712 00:24:36.068433 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.068866 kubelet[2829]: E0712 00:24:36.068819 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.068866 kubelet[2829]: W0712 00:24:36.068850 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.069045 kubelet[2829]: E0712 00:24:36.068879 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.069517 kubelet[2829]: E0712 00:24:36.069488 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.069675 kubelet[2829]: W0712 00:24:36.069648 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.069829 kubelet[2829]: E0712 00:24:36.069802 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.070298 kubelet[2829]: E0712 00:24:36.070274 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.070437 kubelet[2829]: W0712 00:24:36.070411 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.070556 kubelet[2829]: E0712 00:24:36.070531 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.071007 kubelet[2829]: E0712 00:24:36.070979 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.071169 kubelet[2829]: W0712 00:24:36.071140 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.071437 kubelet[2829]: E0712 00:24:36.071403 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.072250 kubelet[2829]: E0712 00:24:36.072217 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.072429 kubelet[2829]: W0712 00:24:36.072400 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.072576 kubelet[2829]: E0712 00:24:36.072550 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.089551 kubelet[2829]: E0712 00:24:36.089486 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.089999 kubelet[2829]: W0712 00:24:36.089889 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.090384 kubelet[2829]: E0712 00:24:36.090303 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.095132 kubelet[2829]: E0712 00:24:36.095073 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.095417 kubelet[2829]: W0712 00:24:36.095374 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.095664 kubelet[2829]: E0712 00:24:36.095607 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.103046 kubelet[2829]: E0712 00:24:36.103011 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.103389 kubelet[2829]: W0712 00:24:36.103356 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.103587 kubelet[2829]: E0712 00:24:36.103560 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.104750 kubelet[2829]: E0712 00:24:36.104717 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.104930 kubelet[2829]: W0712 00:24:36.104903 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.105130 kubelet[2829]: E0712 00:24:36.105103 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.110043 kubelet[2829]: E0712 00:24:36.107416 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.110043 kubelet[2829]: W0712 00:24:36.107452 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.110043 kubelet[2829]: E0712 00:24:36.107483 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.110043 kubelet[2829]: E0712 00:24:36.107870 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.110043 kubelet[2829]: W0712 00:24:36.107903 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.110043 kubelet[2829]: E0712 00:24:36.107926 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.110481 kubelet[2829]: E0712 00:24:36.110189 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.110481 kubelet[2829]: W0712 00:24:36.110214 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.110481 kubelet[2829]: E0712 00:24:36.110244 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.110653 kubelet[2829]: E0712 00:24:36.110561 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.110653 kubelet[2829]: W0712 00:24:36.110578 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.110653 kubelet[2829]: E0712 00:24:36.110598 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.155056 env[1824]: time="2025-07-12T00:24:36.154978173Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-65b5487667-rknnd,Uid:61081b48-8c5a-49bc-aa40-0926c868f804,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:36.192517 kubelet[2829]: E0712 00:24:36.192452 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.192813 kubelet[2829]: W0712 00:24:36.192772 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.193024 kubelet[2829]: E0712 00:24:36.192991 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.198156 env[1824]: time="2025-07-12T00:24:36.196614355Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:36.198156 env[1824]: time="2025-07-12T00:24:36.196699539Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:36.198156 env[1824]: time="2025-07-12T00:24:36.196728965Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:36.198156 env[1824]: time="2025-07-12T00:24:36.197049082Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2c8b5e54dad7b4df62dad30c6608e4d2c019181a45952c7c91974af21e2481e2 pid=3334 runtime=io.containerd.runc.v2 Jul 12 00:24:36.225003 systemd[1]: Started cri-containerd-2c8b5e54dad7b4df62dad30c6608e4d2c019181a45952c7c91974af21e2481e2.scope. Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.280000 audit: BPF prog-id=124 op=LOAD Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3334 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263386235653534646164376234646636326461643330633636303865 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3334 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263386235653534646164376234646636326461643330633636303865 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.281000 audit: BPF prog-id=125 op=LOAD Jul 12 00:24:36.281000 audit[3344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3334 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263386235653534646164376234646636326461643330633636303865 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit: BPF prog-id=126 op=LOAD Jul 12 00:24:36.282000 audit[3344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3334 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263386235653534646164376234646636326461643330633636303865 Jul 12 00:24:36.282000 audit: BPF prog-id=126 op=UNLOAD Jul 12 00:24:36.282000 audit: BPF prog-id=125 op=UNLOAD Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { perfmon } for pid=3344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit[3344]: AVC avc: denied { bpf } for pid=3344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.282000 audit: BPF prog-id=127 op=LOAD Jul 12 00:24:36.282000 audit[3344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3334 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263386235653534646164376234646636326461643330633636303865 Jul 12 00:24:36.294575 kubelet[2829]: E0712 00:24:36.294514 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.294728 kubelet[2829]: W0712 00:24:36.294581 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.294728 kubelet[2829]: E0712 00:24:36.294616 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.332668 env[1824]: time="2025-07-12T00:24:36.332502408Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-65b5487667-rknnd,Uid:61081b48-8c5a-49bc-aa40-0926c868f804,Namespace:calico-system,Attempt:0,} returns sandbox id \"2c8b5e54dad7b4df62dad30c6608e4d2c019181a45952c7c91974af21e2481e2\"" Jul 12 00:24:36.339759 env[1824]: time="2025-07-12T00:24:36.339703217Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 12 00:24:36.395924 kubelet[2829]: E0712 00:24:36.395631 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.395924 kubelet[2829]: W0712 00:24:36.395666 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.395924 kubelet[2829]: E0712 00:24:36.395696 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.396542 kubelet[2829]: E0712 00:24:36.396317 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.396542 kubelet[2829]: W0712 00:24:36.396343 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.396542 kubelet[2829]: E0712 00:24:36.396366 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.397086 kubelet[2829]: E0712 00:24:36.396865 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.397086 kubelet[2829]: W0712 00:24:36.396889 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.397086 kubelet[2829]: E0712 00:24:36.396911 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.398009 kubelet[2829]: E0712 00:24:36.397366 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.398009 kubelet[2829]: W0712 00:24:36.397389 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.398009 kubelet[2829]: E0712 00:24:36.397410 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.399309 kubelet[2829]: E0712 00:24:36.399272 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.399482 kubelet[2829]: W0712 00:24:36.399452 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.399623 kubelet[2829]: E0712 00:24:36.399596 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.416212 kubelet[2829]: E0712 00:24:36.416155 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:36.416212 kubelet[2829]: W0712 00:24:36.416193 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:36.416417 kubelet[2829]: E0712 00:24:36.416225 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:36.511753 env[1824]: time="2025-07-12T00:24:36.511665776Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-vtxjv,Uid:dfffc165-142d-465c-ad5b-23ce27ad393b,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:36.548050 env[1824]: time="2025-07-12T00:24:36.547853343Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:36.548050 env[1824]: time="2025-07-12T00:24:36.547928794Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:36.548050 env[1824]: time="2025-07-12T00:24:36.547994572Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:36.548795 env[1824]: time="2025-07-12T00:24:36.548676798Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625 pid=3380 runtime=io.containerd.runc.v2 Jul 12 00:24:36.586883 systemd[1]: Started cri-containerd-8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625.scope. Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.642000 audit: BPF prog-id=128 op=LOAD Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3380 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863643139303336343630386237656132323963356664373636383864 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863643139303336343630386237656132323963356664373636383864 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.643000 audit: BPF prog-id=129 op=LOAD Jul 12 00:24:36.643000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3380 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863643139303336343630386237656132323963356664373636383864 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit: BPF prog-id=130 op=LOAD Jul 12 00:24:36.644000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3380 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863643139303336343630386237656132323963356664373636383864 Jul 12 00:24:36.644000 audit: BPF prog-id=130 op=UNLOAD Jul 12 00:24:36.644000 audit: BPF prog-id=129 op=UNLOAD Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:36.644000 audit: BPF prog-id=131 op=LOAD Jul 12 00:24:36.644000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3380 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:36.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863643139303336343630386237656132323963356664373636383864 Jul 12 00:24:36.674690 env[1824]: time="2025-07-12T00:24:36.674626077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-vtxjv,Uid:dfffc165-142d-465c-ad5b-23ce27ad393b,Namespace:calico-system,Attempt:0,} returns sandbox id \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\"" Jul 12 00:24:37.169690 kubelet[2829]: E0712 00:24:37.169634 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:37.552908 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount693176778.mount: Deactivated successfully. Jul 12 00:24:38.782438 env[1824]: time="2025-07-12T00:24:38.782341091Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:38.797119 env[1824]: time="2025-07-12T00:24:38.797056127Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:38.800902 env[1824]: time="2025-07-12T00:24:38.800826832Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:38.806399 env[1824]: time="2025-07-12T00:24:38.806345393Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:38.807928 env[1824]: time="2025-07-12T00:24:38.807835239Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 12 00:24:38.827427 env[1824]: time="2025-07-12T00:24:38.827364903Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 12 00:24:38.845570 env[1824]: time="2025-07-12T00:24:38.845514530Z" level=info msg="CreateContainer within sandbox \"2c8b5e54dad7b4df62dad30c6608e4d2c019181a45952c7c91974af21e2481e2\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 12 00:24:38.869759 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2374005892.mount: Deactivated successfully. Jul 12 00:24:38.880280 env[1824]: time="2025-07-12T00:24:38.878561212Z" level=info msg="CreateContainer within sandbox \"2c8b5e54dad7b4df62dad30c6608e4d2c019181a45952c7c91974af21e2481e2\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"e9488a4ce8dc8fe720c5abe46ec846b49974d636895138fa93dc322c44cdf1cd\"" Jul 12 00:24:38.883038 env[1824]: time="2025-07-12T00:24:38.882882861Z" level=info msg="StartContainer for \"e9488a4ce8dc8fe720c5abe46ec846b49974d636895138fa93dc322c44cdf1cd\"" Jul 12 00:24:38.926555 systemd[1]: Started cri-containerd-e9488a4ce8dc8fe720c5abe46ec846b49974d636895138fa93dc322c44cdf1cd.scope. Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.969000 audit: BPF prog-id=132 op=LOAD Jul 12 00:24:38.970000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.970000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3334 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:38.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539343838613463653864633866653732306335616265343665633834 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3334 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:38.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539343838613463653864633866653732306335616265343665633834 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.971000 audit: BPF prog-id=133 op=LOAD Jul 12 00:24:38.971000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3334 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:38.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539343838613463653864633866653732306335616265343665633834 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.973000 audit: BPF prog-id=134 op=LOAD Jul 12 00:24:38.973000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3334 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:38.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539343838613463653864633866653732306335616265343665633834 Jul 12 00:24:38.974000 audit: BPF prog-id=134 op=UNLOAD Jul 12 00:24:38.974000 audit: BPF prog-id=133 op=UNLOAD Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:38.975000 audit: BPF prog-id=135 op=LOAD Jul 12 00:24:38.975000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3334 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:38.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539343838613463653864633866653732306335616265343665633834 Jul 12 00:24:39.022319 env[1824]: time="2025-07-12T00:24:39.022260742Z" level=info msg="StartContainer for \"e9488a4ce8dc8fe720c5abe46ec846b49974d636895138fa93dc322c44cdf1cd\" returns successfully" Jul 12 00:24:39.164699 kubelet[2829]: E0712 00:24:39.163825 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:39.434030 kubelet[2829]: I0712 00:24:39.433797 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-65b5487667-rknnd" podStartSLOduration=2.9625597519999998 podStartE2EDuration="5.433773525s" podCreationTimestamp="2025-07-12 00:24:34 +0000 UTC" firstStartedPulling="2025-07-12 00:24:36.338902433 +0000 UTC m=+29.737105784" lastFinishedPulling="2025-07-12 00:24:38.810116146 +0000 UTC m=+32.208319557" observedRunningTime="2025-07-12 00:24:39.433514783 +0000 UTC m=+32.831718146" watchObservedRunningTime="2025-07-12 00:24:39.433773525 +0000 UTC m=+32.831976912" Jul 12 00:24:39.446453 kubelet[2829]: E0712 00:24:39.446390 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.446677 kubelet[2829]: W0712 00:24:39.446645 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.446860 kubelet[2829]: E0712 00:24:39.446834 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.449065 kubelet[2829]: E0712 00:24:39.449024 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.449352 kubelet[2829]: W0712 00:24:39.449268 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.449529 kubelet[2829]: E0712 00:24:39.449500 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.450164 kubelet[2829]: E0712 00:24:39.450131 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.450386 kubelet[2829]: W0712 00:24:39.450352 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.450524 kubelet[2829]: E0712 00:24:39.450497 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.451188 kubelet[2829]: E0712 00:24:39.451153 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.451405 kubelet[2829]: W0712 00:24:39.451376 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.451532 kubelet[2829]: E0712 00:24:39.451505 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.452341 kubelet[2829]: E0712 00:24:39.452306 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.452582 kubelet[2829]: W0712 00:24:39.452547 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.452716 kubelet[2829]: E0712 00:24:39.452689 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.455182 kubelet[2829]: E0712 00:24:39.455141 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.455424 kubelet[2829]: W0712 00:24:39.455392 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.455598 kubelet[2829]: E0712 00:24:39.455570 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.456213 kubelet[2829]: E0712 00:24:39.456181 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.456435 kubelet[2829]: W0712 00:24:39.456403 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.456569 kubelet[2829]: E0712 00:24:39.456543 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.457167 kubelet[2829]: E0712 00:24:39.457135 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.457347 kubelet[2829]: W0712 00:24:39.457319 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.457522 kubelet[2829]: E0712 00:24:39.457495 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.458060 kubelet[2829]: E0712 00:24:39.458033 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.458259 kubelet[2829]: W0712 00:24:39.458227 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.458398 kubelet[2829]: E0712 00:24:39.458372 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.458910 kubelet[2829]: E0712 00:24:39.458880 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.459134 kubelet[2829]: W0712 00:24:39.459103 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.459291 kubelet[2829]: E0712 00:24:39.459264 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.461693 kubelet[2829]: E0712 00:24:39.461654 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.461928 kubelet[2829]: W0712 00:24:39.461897 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.462180 kubelet[2829]: E0712 00:24:39.462150 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.462722 kubelet[2829]: E0712 00:24:39.462693 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.462889 kubelet[2829]: W0712 00:24:39.462861 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.463126 kubelet[2829]: E0712 00:24:39.463082 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.470382 kubelet[2829]: E0712 00:24:39.470347 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.470614 kubelet[2829]: W0712 00:24:39.470584 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.470757 kubelet[2829]: E0712 00:24:39.470731 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.471349 kubelet[2829]: E0712 00:24:39.471318 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.471553 kubelet[2829]: W0712 00:24:39.471525 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.471723 kubelet[2829]: E0712 00:24:39.471697 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.472432 kubelet[2829]: E0712 00:24:39.472398 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.472658 kubelet[2829]: W0712 00:24:39.472629 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.472831 kubelet[2829]: E0712 00:24:39.472803 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.515271 kubelet[2829]: E0712 00:24:39.515203 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.515552 kubelet[2829]: W0712 00:24:39.515517 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.515753 kubelet[2829]: E0712 00:24:39.515722 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.516845 kubelet[2829]: E0712 00:24:39.516795 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.517153 kubelet[2829]: W0712 00:24:39.517096 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.517349 kubelet[2829]: E0712 00:24:39.517321 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.518126 kubelet[2829]: E0712 00:24:39.518025 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.518361 kubelet[2829]: W0712 00:24:39.518328 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.518528 kubelet[2829]: E0712 00:24:39.518500 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.519516 kubelet[2829]: E0712 00:24:39.519480 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.519777 kubelet[2829]: W0712 00:24:39.519744 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.520044 kubelet[2829]: E0712 00:24:39.519924 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.520807 kubelet[2829]: E0712 00:24:39.520724 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.520807 kubelet[2829]: W0712 00:24:39.520803 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.521099 kubelet[2829]: E0712 00:24:39.520836 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.521566 kubelet[2829]: E0712 00:24:39.521531 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.521694 kubelet[2829]: W0712 00:24:39.521565 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.521694 kubelet[2829]: E0712 00:24:39.521599 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.522358 kubelet[2829]: E0712 00:24:39.522313 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.522358 kubelet[2829]: W0712 00:24:39.522343 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.522566 kubelet[2829]: E0712 00:24:39.522369 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.523128 kubelet[2829]: E0712 00:24:39.523092 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.523128 kubelet[2829]: W0712 00:24:39.523126 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.523335 kubelet[2829]: E0712 00:24:39.523154 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.523620 kubelet[2829]: E0712 00:24:39.523569 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.523620 kubelet[2829]: W0712 00:24:39.523600 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.523806 kubelet[2829]: E0712 00:24:39.523627 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.525246 kubelet[2829]: E0712 00:24:39.525207 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.525538 kubelet[2829]: W0712 00:24:39.525502 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.525681 kubelet[2829]: E0712 00:24:39.525653 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.526674 kubelet[2829]: E0712 00:24:39.526636 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.526942 kubelet[2829]: W0712 00:24:39.526908 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.527122 kubelet[2829]: E0712 00:24:39.527094 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.528492 kubelet[2829]: E0712 00:24:39.528450 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.528732 kubelet[2829]: W0712 00:24:39.528697 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.528896 kubelet[2829]: E0712 00:24:39.528866 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.529714 kubelet[2829]: E0712 00:24:39.529678 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.529917 kubelet[2829]: W0712 00:24:39.529888 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.530107 kubelet[2829]: E0712 00:24:39.530080 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.530762 kubelet[2829]: E0712 00:24:39.530725 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.530999 kubelet[2829]: W0712 00:24:39.530932 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.531169 kubelet[2829]: E0712 00:24:39.531140 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.532512 kubelet[2829]: E0712 00:24:39.532472 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.532746 kubelet[2829]: W0712 00:24:39.532709 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.532942 kubelet[2829]: E0712 00:24:39.532913 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.533571 kubelet[2829]: E0712 00:24:39.533537 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.533752 kubelet[2829]: W0712 00:24:39.533722 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.533911 kubelet[2829]: E0712 00:24:39.533879 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.534808 kubelet[2829]: E0712 00:24:39.534752 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.535049 kubelet[2829]: W0712 00:24:39.535014 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.538278 kubelet[2829]: E0712 00:24:39.535226 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:39.539378 kubelet[2829]: E0712 00:24:39.539341 2829 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:24:39.539576 kubelet[2829]: W0712 00:24:39.539547 2829 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:24:39.539736 kubelet[2829]: E0712 00:24:39.539709 2829 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:24:40.028863 env[1824]: time="2025-07-12T00:24:40.028782918Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:40.033121 env[1824]: time="2025-07-12T00:24:40.033050333Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:40.036611 env[1824]: time="2025-07-12T00:24:40.036559345Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:40.039995 env[1824]: time="2025-07-12T00:24:40.039919855Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:40.041062 env[1824]: time="2025-07-12T00:24:40.040999250Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 12 00:24:40.051337 env[1824]: time="2025-07-12T00:24:40.051281104Z" level=info msg="CreateContainer within sandbox \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 12 00:24:40.084611 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3027181304.mount: Deactivated successfully. Jul 12 00:24:40.094359 env[1824]: time="2025-07-12T00:24:40.094254272Z" level=info msg="CreateContainer within sandbox \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7\"" Jul 12 00:24:40.097268 env[1824]: time="2025-07-12T00:24:40.097212269Z" level=info msg="StartContainer for \"de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7\"" Jul 12 00:24:40.162498 systemd[1]: Started cri-containerd-de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7.scope. Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.217667 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 12 00:24:40.217783 kernel: audit: type=1400 audit(1752279880.213:1003): avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:40.236674 kernel: audit: type=1300 audit(1752279880.213:1003): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:40.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465396534333038663431353131346234653863383763626365393239 Jul 12 00:24:40.247144 kernel: audit: type=1327 audit(1752279880.213:1003): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465396534333038663431353131346234653863383763626365393239 Jul 12 00:24:40.247608 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.262287 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.270592 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.278659 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.286702 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.287115 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.309589 kernel: audit: type=1400 audit(1752279880.213:1004): avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.213000 audit: BPF prog-id=136 op=LOAD Jul 12 00:24:40.213000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3380 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:40.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465396534333038663431353131346234653863383763626365393239 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.215000 audit: BPF prog-id=137 op=LOAD Jul 12 00:24:40.215000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3380 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:40.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465396534333038663431353131346234653863383763626365393239 Jul 12 00:24:40.223000 audit: BPF prog-id=137 op=UNLOAD Jul 12 00:24:40.223000 audit: BPF prog-id=136 op=UNLOAD Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:40.223000 audit: BPF prog-id=138 op=LOAD Jul 12 00:24:40.223000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3380 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:40.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465396534333038663431353131346234653863383763626365393239 Jul 12 00:24:40.313288 env[1824]: time="2025-07-12T00:24:40.313213562Z" level=info msg="StartContainer for \"de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7\" returns successfully" Jul 12 00:24:40.339705 systemd[1]: cri-containerd-de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7.scope: Deactivated successfully. Jul 12 00:24:40.341000 audit: BPF prog-id=138 op=UNLOAD Jul 12 00:24:40.372002 kubelet[2829]: I0712 00:24:40.371262 2829 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:24:40.778748 env[1824]: time="2025-07-12T00:24:40.778606032Z" level=info msg="shim disconnected" id=de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7 Jul 12 00:24:40.778748 env[1824]: time="2025-07-12T00:24:40.778673717Z" level=warning msg="cleaning up after shim disconnected" id=de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7 namespace=k8s.io Jul 12 00:24:40.778748 env[1824]: time="2025-07-12T00:24:40.778696375Z" level=info msg="cleaning up dead shim" Jul 12 00:24:40.792521 env[1824]: time="2025-07-12T00:24:40.792446244Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:24:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3546 runtime=io.containerd.runc.v2\n" Jul 12 00:24:40.821462 systemd[1]: run-containerd-runc-k8s.io-de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7-runc.7nmwPO.mount: Deactivated successfully. Jul 12 00:24:40.821636 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-de9e4308f415114b4e8c87cbce929c6ec8f438ebb2e0f5ef3e07d697cfaad1f7-rootfs.mount: Deactivated successfully. Jul 12 00:24:41.164449 kubelet[2829]: E0712 00:24:41.164398 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:41.379781 env[1824]: time="2025-07-12T00:24:41.379089993Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 12 00:24:43.165386 kubelet[2829]: E0712 00:24:43.165313 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:45.144043 env[1824]: time="2025-07-12T00:24:45.143985810Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:45.147363 env[1824]: time="2025-07-12T00:24:45.147311965Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:45.150752 env[1824]: time="2025-07-12T00:24:45.150675647Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:45.154762 env[1824]: time="2025-07-12T00:24:45.154676015Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:45.156172 env[1824]: time="2025-07-12T00:24:45.156088718Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 12 00:24:45.164692 kubelet[2829]: E0712 00:24:45.164610 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:45.166527 env[1824]: time="2025-07-12T00:24:45.165602388Z" level=info msg="CreateContainer within sandbox \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 12 00:24:45.197816 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4238833574.mount: Deactivated successfully. Jul 12 00:24:45.202446 env[1824]: time="2025-07-12T00:24:45.202364603Z" level=info msg="CreateContainer within sandbox \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592\"" Jul 12 00:24:45.204301 env[1824]: time="2025-07-12T00:24:45.203529342Z" level=info msg="StartContainer for \"bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592\"" Jul 12 00:24:45.252477 systemd[1]: run-containerd-runc-k8s.io-bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592-runc.E9vBq5.mount: Deactivated successfully. Jul 12 00:24:45.261734 systemd[1]: Started cri-containerd-bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592.scope. Jul 12 00:24:45.317118 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 12 00:24:45.317287 kernel: audit: type=1400 audit(1752279885.310:1010): avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.310000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.310000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.332336 kernel: audit: type=1300 audit(1752279885.310:1010): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264616130323231356339313261363537396234373165666162666234 Jul 12 00:24:45.342875 kernel: audit: type=1327 audit(1752279885.310:1010): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264616130323231356339313261363537396234373165666162666234 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.351638 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.370055 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.370187 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.379213 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.387609 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.397404 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.405767 kernel: audit: type=1400 audit(1752279885.316:1011): avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.316000 audit: BPF prog-id=139 op=LOAD Jul 12 00:24:45.316000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3380 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264616130323231356339313261363537396234373165666162666234 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.320000 audit: BPF prog-id=140 op=LOAD Jul 12 00:24:45.320000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3380 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264616130323231356339313261363537396234373165666162666234 Jul 12 00:24:45.331000 audit: BPF prog-id=140 op=UNLOAD Jul 12 00:24:45.331000 audit: BPF prog-id=139 op=UNLOAD Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { perfmon } for pid=3570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit[3570]: AVC avc: denied { bpf } for pid=3570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:45.332000 audit: BPF prog-id=141 op=LOAD Jul 12 00:24:45.332000 audit[3570]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3380 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:45.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264616130323231356339313261363537396234373165666162666234 Jul 12 00:24:45.419312 env[1824]: time="2025-07-12T00:24:45.419181110Z" level=info msg="StartContainer for \"bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592\" returns successfully" Jul 12 00:24:46.670939 env[1824]: time="2025-07-12T00:24:46.670852776Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:24:46.676236 systemd[1]: cri-containerd-bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592.scope: Deactivated successfully. Jul 12 00:24:46.676689 systemd[1]: cri-containerd-bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592.scope: Consumed 1.131s CPU time. Jul 12 00:24:46.678000 audit: BPF prog-id=141 op=UNLOAD Jul 12 00:24:46.714891 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592-rootfs.mount: Deactivated successfully. Jul 12 00:24:46.750850 kubelet[2829]: I0712 00:24:46.750792 2829 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 12 00:24:46.856538 systemd[1]: Created slice kubepods-burstable-pod7d682096_3a17_4390_b23a_c08da1aa1faf.slice. Jul 12 00:24:46.885299 systemd[1]: Created slice kubepods-besteffort-pod13066eeb_b554_4368_b141_352169772413.slice. Jul 12 00:24:46.890578 kubelet[2829]: I0712 00:24:46.890484 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/eb7dfc38-dd13-4716-9e74-13453bfe06e3-config-volume\") pod \"coredns-674b8bbfcf-dvwws\" (UID: \"eb7dfc38-dd13-4716-9e74-13453bfe06e3\") " pod="kube-system/coredns-674b8bbfcf-dvwws" Jul 12 00:24:46.891018 kubelet[2829]: I0712 00:24:46.890978 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rwc7z\" (UniqueName: \"kubernetes.io/projected/7d682096-3a17-4390-b23a-c08da1aa1faf-kube-api-access-rwc7z\") pod \"coredns-674b8bbfcf-qwzsc\" (UID: \"7d682096-3a17-4390-b23a-c08da1aa1faf\") " pod="kube-system/coredns-674b8bbfcf-qwzsc" Jul 12 00:24:46.891322 kubelet[2829]: I0712 00:24:46.891289 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5n7ct\" (UniqueName: \"kubernetes.io/projected/eb7dfc38-dd13-4716-9e74-13453bfe06e3-kube-api-access-5n7ct\") pod \"coredns-674b8bbfcf-dvwws\" (UID: \"eb7dfc38-dd13-4716-9e74-13453bfe06e3\") " pod="kube-system/coredns-674b8bbfcf-dvwws" Jul 12 00:24:46.891564 kubelet[2829]: I0712 00:24:46.891492 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7d682096-3a17-4390-b23a-c08da1aa1faf-config-volume\") pod \"coredns-674b8bbfcf-qwzsc\" (UID: \"7d682096-3a17-4390-b23a-c08da1aa1faf\") " pod="kube-system/coredns-674b8bbfcf-qwzsc" Jul 12 00:24:46.903716 kubelet[2829]: I0712 00:24:46.903665 2829 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:24:46.972705 systemd[1]: Created slice kubepods-burstable-podeb7dfc38_dd13_4716_9e74_13453bfe06e3.slice. Jul 12 00:24:46.992447 systemd[1]: Created slice kubepods-besteffort-pod84a02892_671d_49e3_808c_4c6bf0171928.slice. Jul 12 00:24:46.995384 kubelet[2829]: I0712 00:24:46.995301 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-89576\" (UniqueName: \"kubernetes.io/projected/3ff2f4df-ed0c-423f-8244-249894282491-kube-api-access-89576\") pod \"calico-apiserver-5b9ffbdcb7-mvfcn\" (UID: \"3ff2f4df-ed0c-423f-8244-249894282491\") " pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" Jul 12 00:24:46.995812 kubelet[2829]: I0712 00:24:46.995737 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3ff2f4df-ed0c-423f-8244-249894282491-calico-apiserver-certs\") pod \"calico-apiserver-5b9ffbdcb7-mvfcn\" (UID: \"3ff2f4df-ed0c-423f-8244-249894282491\") " pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" Jul 12 00:24:47.036353 kubelet[2829]: I0712 00:24:46.995834 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/13066eeb-b554-4368-b141-352169772413-tigera-ca-bundle\") pod \"calico-kube-controllers-57cbc47cc8-r8nlb\" (UID: \"13066eeb-b554-4368-b141-352169772413\") " pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" Jul 12 00:24:47.036353 kubelet[2829]: I0712 00:24:46.995905 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cpzxs\" (UniqueName: \"kubernetes.io/projected/13066eeb-b554-4368-b141-352169772413-kube-api-access-cpzxs\") pod \"calico-kube-controllers-57cbc47cc8-r8nlb\" (UID: \"13066eeb-b554-4368-b141-352169772413\") " pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" Jul 12 00:24:47.015220 systemd[1]: Created slice kubepods-besteffort-pod3ff2f4df_ed0c_423f_8244_249894282491.slice. Jul 12 00:24:47.092033 systemd[1]: Created slice kubepods-besteffort-pod0827bab2_3218_4e3b_9514_ca54f12cdbdd.slice. Jul 12 00:24:47.096491 kubelet[2829]: I0712 00:24:47.096440 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/84a02892-671d-49e3-808c-4c6bf0171928-config\") pod \"goldmane-768f4c5c69-n9njv\" (UID: \"84a02892-671d-49e3-808c-4c6bf0171928\") " pod="calico-system/goldmane-768f4c5c69-n9njv" Jul 12 00:24:47.096832 kubelet[2829]: I0712 00:24:47.096777 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/84a02892-671d-49e3-808c-4c6bf0171928-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-n9njv\" (UID: \"84a02892-671d-49e3-808c-4c6bf0171928\") " pod="calico-system/goldmane-768f4c5c69-n9njv" Jul 12 00:24:47.097120 kubelet[2829]: I0712 00:24:47.097070 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mlrtd\" (UniqueName: \"kubernetes.io/projected/84a02892-671d-49e3-808c-4c6bf0171928-kube-api-access-mlrtd\") pod \"goldmane-768f4c5c69-n9njv\" (UID: \"84a02892-671d-49e3-808c-4c6bf0171928\") " pod="calico-system/goldmane-768f4c5c69-n9njv" Jul 12 00:24:47.097432 kubelet[2829]: I0712 00:24:47.097398 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/84a02892-671d-49e3-808c-4c6bf0171928-goldmane-key-pair\") pod \"goldmane-768f4c5c69-n9njv\" (UID: \"84a02892-671d-49e3-808c-4c6bf0171928\") " pod="calico-system/goldmane-768f4c5c69-n9njv" Jul 12 00:24:47.148709 systemd[1]: Created slice kubepods-besteffort-podab98c6c3_b1d6_4476_b777_36e75bd63dee.slice. Jul 12 00:24:47.176638 env[1824]: time="2025-07-12T00:24:47.173665630Z" level=info msg="shim disconnected" id=bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592 Jul 12 00:24:47.176638 env[1824]: time="2025-07-12T00:24:47.173751413Z" level=warning msg="cleaning up after shim disconnected" id=bdaa02215c912a6579b471efabfb49e033909857da0d77d0591a5379cc596592 namespace=k8s.io Jul 12 00:24:47.176638 env[1824]: time="2025-07-12T00:24:47.173776519Z" level=info msg="cleaning up dead shim" Jul 12 00:24:47.203000 audit[3625]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3625 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:47.203000 audit[3625]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe94575b0 a2=0 a3=1 items=0 ppid=2981 pid=3625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:47.203000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:47.212000 audit[3625]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3625 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:24:47.212000 audit[3625]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe94575b0 a2=0 a3=1 items=0 ppid=2981 pid=3625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:47.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:24:47.220691 env[1824]: time="2025-07-12T00:24:47.219816688Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:24:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3621 runtime=io.containerd.runc.v2\n" Jul 12 00:24:47.222404 env[1824]: time="2025-07-12T00:24:47.222341680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-57cbc47cc8-r8nlb,Uid:13066eeb-b554-4368-b141-352169772413,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:47.223499 env[1824]: time="2025-07-12T00:24:47.223017883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-qwzsc,Uid:7d682096-3a17-4390-b23a-c08da1aa1faf,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:47.245076 systemd[1]: Created slice kubepods-besteffort-pod37a1ca1f_0d02_4335_a12b_e9edc5fb7fe1.slice. Jul 12 00:24:47.280855 env[1824]: time="2025-07-12T00:24:47.280764534Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wtrsr,Uid:37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:47.298540 env[1824]: time="2025-07-12T00:24:47.297593462Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dvwws,Uid:eb7dfc38-dd13-4716-9e74-13453bfe06e3,Namespace:kube-system,Attempt:0,}" Jul 12 00:24:47.300975 kubelet[2829]: I0712 00:24:47.299905 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-ca-bundle\") pod \"whisker-55f694594-bkfkx\" (UID: \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\") " pod="calico-system/whisker-55f694594-bkfkx" Jul 12 00:24:47.300975 kubelet[2829]: I0712 00:24:47.300016 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-shjmn\" (UniqueName: \"kubernetes.io/projected/ab98c6c3-b1d6-4476-b777-36e75bd63dee-kube-api-access-shjmn\") pod \"whisker-55f694594-bkfkx\" (UID: \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\") " pod="calico-system/whisker-55f694594-bkfkx" Jul 12 00:24:47.300975 kubelet[2829]: I0712 00:24:47.300089 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-backend-key-pair\") pod \"whisker-55f694594-bkfkx\" (UID: \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\") " pod="calico-system/whisker-55f694594-bkfkx" Jul 12 00:24:47.300975 kubelet[2829]: I0712 00:24:47.300175 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6klk8\" (UniqueName: \"kubernetes.io/projected/0827bab2-3218-4e3b-9514-ca54f12cdbdd-kube-api-access-6klk8\") pod \"calico-apiserver-5b9ffbdcb7-krnx2\" (UID: \"0827bab2-3218-4e3b-9514-ca54f12cdbdd\") " pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" Jul 12 00:24:47.300975 kubelet[2829]: I0712 00:24:47.300259 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/0827bab2-3218-4e3b-9514-ca54f12cdbdd-calico-apiserver-certs\") pod \"calico-apiserver-5b9ffbdcb7-krnx2\" (UID: \"0827bab2-3218-4e3b-9514-ca54f12cdbdd\") " pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" Jul 12 00:24:47.348448 env[1824]: time="2025-07-12T00:24:47.348377267Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-n9njv,Uid:84a02892-671d-49e3-808c-4c6bf0171928,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:47.348939 env[1824]: time="2025-07-12T00:24:47.348878605Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-mvfcn,Uid:3ff2f4df-ed0c-423f-8244-249894282491,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:24:47.498365 env[1824]: time="2025-07-12T00:24:47.498188895Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-55f694594-bkfkx,Uid:ab98c6c3-b1d6-4476-b777-36e75bd63dee,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:47.508280 env[1824]: time="2025-07-12T00:24:47.508184587Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 12 00:24:47.722426 env[1824]: time="2025-07-12T00:24:47.722369925Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-krnx2,Uid:0827bab2-3218-4e3b-9514-ca54f12cdbdd,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:24:47.850618 env[1824]: time="2025-07-12T00:24:47.850427583Z" level=error msg="Failed to destroy network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.855726 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1-shm.mount: Deactivated successfully. Jul 12 00:24:47.869727 env[1824]: time="2025-07-12T00:24:47.869607825Z" level=error msg="encountered an error cleaning up failed sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.869907 env[1824]: time="2025-07-12T00:24:47.869751260Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-57cbc47cc8-r8nlb,Uid:13066eeb-b554-4368-b141-352169772413,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.870745 kubelet[2829]: E0712 00:24:47.870598 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.873554 kubelet[2829]: E0712 00:24:47.870805 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" Jul 12 00:24:47.873554 kubelet[2829]: E0712 00:24:47.870850 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" Jul 12 00:24:47.873554 kubelet[2829]: E0712 00:24:47.870927 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-57cbc47cc8-r8nlb_calico-system(13066eeb-b554-4368-b141-352169772413)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-57cbc47cc8-r8nlb_calico-system(13066eeb-b554-4368-b141-352169772413)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" podUID="13066eeb-b554-4368-b141-352169772413" Jul 12 00:24:47.887075 env[1824]: time="2025-07-12T00:24:47.886988411Z" level=error msg="Failed to destroy network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.891252 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f-shm.mount: Deactivated successfully. Jul 12 00:24:47.894177 env[1824]: time="2025-07-12T00:24:47.894081070Z" level=error msg="encountered an error cleaning up failed sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.894357 env[1824]: time="2025-07-12T00:24:47.894199375Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wtrsr,Uid:37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.894735 kubelet[2829]: E0712 00:24:47.894641 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.894861 kubelet[2829]: E0712 00:24:47.894777 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:47.894861 kubelet[2829]: E0712 00:24:47.894815 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-wtrsr" Jul 12 00:24:47.895051 kubelet[2829]: E0712 00:24:47.894940 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-wtrsr_calico-system(37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-wtrsr_calico-system(37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:47.928623 env[1824]: time="2025-07-12T00:24:47.928532990Z" level=error msg="Failed to destroy network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.933044 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed-shm.mount: Deactivated successfully. Jul 12 00:24:47.942979 env[1824]: time="2025-07-12T00:24:47.936572917Z" level=error msg="encountered an error cleaning up failed sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.942979 env[1824]: time="2025-07-12T00:24:47.936682882Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-n9njv,Uid:84a02892-671d-49e3-808c-4c6bf0171928,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.943522 kubelet[2829]: E0712 00:24:47.937167 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.943522 kubelet[2829]: E0712 00:24:47.937287 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-n9njv" Jul 12 00:24:47.943522 kubelet[2829]: E0712 00:24:47.937373 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-n9njv" Jul 12 00:24:47.943744 kubelet[2829]: E0712 00:24:47.937522 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-n9njv_calico-system(84a02892-671d-49e3-808c-4c6bf0171928)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-n9njv_calico-system(84a02892-671d-49e3-808c-4c6bf0171928)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-n9njv" podUID="84a02892-671d-49e3-808c-4c6bf0171928" Jul 12 00:24:47.960645 env[1824]: time="2025-07-12T00:24:47.960556777Z" level=error msg="Failed to destroy network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.961410 env[1824]: time="2025-07-12T00:24:47.961314767Z" level=error msg="encountered an error cleaning up failed sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.961559 env[1824]: time="2025-07-12T00:24:47.961432543Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dvwws,Uid:eb7dfc38-dd13-4716-9e74-13453bfe06e3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.962130 kubelet[2829]: E0712 00:24:47.961836 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:47.962130 kubelet[2829]: E0712 00:24:47.961917 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-dvwws" Jul 12 00:24:47.962130 kubelet[2829]: E0712 00:24:47.961980 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-dvwws" Jul 12 00:24:47.962410 kubelet[2829]: E0712 00:24:47.962072 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-dvwws_kube-system(eb7dfc38-dd13-4716-9e74-13453bfe06e3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-dvwws_kube-system(eb7dfc38-dd13-4716-9e74-13453bfe06e3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-dvwws" podUID="eb7dfc38-dd13-4716-9e74-13453bfe06e3" Jul 12 00:24:48.021194 env[1824]: time="2025-07-12T00:24:48.021097954Z" level=error msg="Failed to destroy network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.021914 env[1824]: time="2025-07-12T00:24:48.021761088Z" level=error msg="encountered an error cleaning up failed sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.022090 env[1824]: time="2025-07-12T00:24:48.022019012Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-qwzsc,Uid:7d682096-3a17-4390-b23a-c08da1aa1faf,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.022502 kubelet[2829]: E0712 00:24:48.022415 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.022615 kubelet[2829]: E0712 00:24:48.022523 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-qwzsc" Jul 12 00:24:48.022615 kubelet[2829]: E0712 00:24:48.022584 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-qwzsc" Jul 12 00:24:48.022759 kubelet[2829]: E0712 00:24:48.022683 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-qwzsc_kube-system(7d682096-3a17-4390-b23a-c08da1aa1faf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-qwzsc_kube-system(7d682096-3a17-4390-b23a-c08da1aa1faf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-qwzsc" podUID="7d682096-3a17-4390-b23a-c08da1aa1faf" Jul 12 00:24:48.025766 env[1824]: time="2025-07-12T00:24:48.025217948Z" level=error msg="Failed to destroy network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.026215 env[1824]: time="2025-07-12T00:24:48.026120584Z" level=error msg="encountered an error cleaning up failed sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.026401 env[1824]: time="2025-07-12T00:24:48.026243785Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-mvfcn,Uid:3ff2f4df-ed0c-423f-8244-249894282491,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.026825 kubelet[2829]: E0712 00:24:48.026736 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.026980 kubelet[2829]: E0712 00:24:48.026848 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" Jul 12 00:24:48.026980 kubelet[2829]: E0712 00:24:48.026913 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" Jul 12 00:24:48.027176 kubelet[2829]: E0712 00:24:48.027076 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5b9ffbdcb7-mvfcn_calico-apiserver(3ff2f4df-ed0c-423f-8244-249894282491)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5b9ffbdcb7-mvfcn_calico-apiserver(3ff2f4df-ed0c-423f-8244-249894282491)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" podUID="3ff2f4df-ed0c-423f-8244-249894282491" Jul 12 00:24:48.034391 env[1824]: time="2025-07-12T00:24:48.034252071Z" level=error msg="Failed to destroy network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.035096 env[1824]: time="2025-07-12T00:24:48.035001335Z" level=error msg="encountered an error cleaning up failed sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.035254 env[1824]: time="2025-07-12T00:24:48.035125233Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-55f694594-bkfkx,Uid:ab98c6c3-b1d6-4476-b777-36e75bd63dee,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.036600 kubelet[2829]: E0712 00:24:48.035444 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.036600 kubelet[2829]: E0712 00:24:48.035690 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-55f694594-bkfkx" Jul 12 00:24:48.036600 kubelet[2829]: E0712 00:24:48.035771 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-55f694594-bkfkx" Jul 12 00:24:48.036968 kubelet[2829]: E0712 00:24:48.035903 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-55f694594-bkfkx_calico-system(ab98c6c3-b1d6-4476-b777-36e75bd63dee)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-55f694594-bkfkx_calico-system(ab98c6c3-b1d6-4476-b777-36e75bd63dee)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-55f694594-bkfkx" podUID="ab98c6c3-b1d6-4476-b777-36e75bd63dee" Jul 12 00:24:48.081979 env[1824]: time="2025-07-12T00:24:48.080125182Z" level=error msg="Failed to destroy network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.081979 env[1824]: time="2025-07-12T00:24:48.080814622Z" level=error msg="encountered an error cleaning up failed sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.081979 env[1824]: time="2025-07-12T00:24:48.080893324Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-krnx2,Uid:0827bab2-3218-4e3b-9514-ca54f12cdbdd,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.082376 kubelet[2829]: E0712 00:24:48.081297 2829 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.082376 kubelet[2829]: E0712 00:24:48.081437 2829 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" Jul 12 00:24:48.082376 kubelet[2829]: E0712 00:24:48.081520 2829 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" Jul 12 00:24:48.082628 kubelet[2829]: E0712 00:24:48.081626 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5b9ffbdcb7-krnx2_calico-apiserver(0827bab2-3218-4e3b-9514-ca54f12cdbdd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5b9ffbdcb7-krnx2_calico-apiserver(0827bab2-3218-4e3b-9514-ca54f12cdbdd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" podUID="0827bab2-3218-4e3b-9514-ca54f12cdbdd" Jul 12 00:24:48.491294 kubelet[2829]: I0712 00:24:48.490329 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:24:48.492528 env[1824]: time="2025-07-12T00:24:48.492457570Z" level=info msg="StopPodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\"" Jul 12 00:24:48.496258 kubelet[2829]: I0712 00:24:48.496000 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:24:48.497892 env[1824]: time="2025-07-12T00:24:48.497119932Z" level=info msg="StopPodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\"" Jul 12 00:24:48.514629 kubelet[2829]: I0712 00:24:48.514554 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:24:48.516311 env[1824]: time="2025-07-12T00:24:48.516219415Z" level=info msg="StopPodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\"" Jul 12 00:24:48.520796 kubelet[2829]: I0712 00:24:48.520727 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:24:48.523776 env[1824]: time="2025-07-12T00:24:48.522210638Z" level=info msg="StopPodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\"" Jul 12 00:24:48.532105 kubelet[2829]: I0712 00:24:48.527304 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:24:48.532105 kubelet[2829]: I0712 00:24:48.531102 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:24:48.532604 env[1824]: time="2025-07-12T00:24:48.532357772Z" level=info msg="StopPodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\"" Jul 12 00:24:48.532917 env[1824]: time="2025-07-12T00:24:48.532870379Z" level=info msg="StopPodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\"" Jul 12 00:24:48.541051 kubelet[2829]: I0712 00:24:48.539807 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:24:48.541214 env[1824]: time="2025-07-12T00:24:48.541088008Z" level=info msg="StopPodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\"" Jul 12 00:24:48.545670 kubelet[2829]: I0712 00:24:48.544812 2829 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:24:48.546195 env[1824]: time="2025-07-12T00:24:48.546093464Z" level=info msg="StopPodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\"" Jul 12 00:24:48.710068 env[1824]: time="2025-07-12T00:24:48.709932069Z" level=error msg="StopPodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" failed" error="failed to destroy network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.710438 kubelet[2829]: E0712 00:24:48.710350 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:24:48.710594 kubelet[2829]: E0712 00:24:48.710454 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e"} Jul 12 00:24:48.710708 kubelet[2829]: E0712 00:24:48.710584 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.710708 kubelet[2829]: E0712 00:24:48.710649 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-55f694594-bkfkx" podUID="ab98c6c3-b1d6-4476-b777-36e75bd63dee" Jul 12 00:24:48.716340 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e-shm.mount: Deactivated successfully. Jul 12 00:24:48.716556 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e-shm.mount: Deactivated successfully. Jul 12 00:24:48.716708 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c-shm.mount: Deactivated successfully. Jul 12 00:24:48.716850 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8-shm.mount: Deactivated successfully. Jul 12 00:24:48.717074 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5-shm.mount: Deactivated successfully. Jul 12 00:24:48.815106 env[1824]: time="2025-07-12T00:24:48.814887385Z" level=error msg="StopPodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" failed" error="failed to destroy network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.817904 kubelet[2829]: E0712 00:24:48.817748 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:24:48.818599 kubelet[2829]: E0712 00:24:48.818114 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c"} Jul 12 00:24:48.818599 kubelet[2829]: E0712 00:24:48.818223 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3ff2f4df-ed0c-423f-8244-249894282491\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.818599 kubelet[2829]: E0712 00:24:48.818292 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3ff2f4df-ed0c-423f-8244-249894282491\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" podUID="3ff2f4df-ed0c-423f-8244-249894282491" Jul 12 00:24:48.825376 env[1824]: time="2025-07-12T00:24:48.825255060Z" level=error msg="StopPodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" failed" error="failed to destroy network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.825674 kubelet[2829]: E0712 00:24:48.825610 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:24:48.825786 kubelet[2829]: E0712 00:24:48.825688 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed"} Jul 12 00:24:48.825786 kubelet[2829]: E0712 00:24:48.825750 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"84a02892-671d-49e3-808c-4c6bf0171928\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.826063 kubelet[2829]: E0712 00:24:48.825796 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"84a02892-671d-49e3-808c-4c6bf0171928\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-n9njv" podUID="84a02892-671d-49e3-808c-4c6bf0171928" Jul 12 00:24:48.860286 env[1824]: time="2025-07-12T00:24:48.860187645Z" level=error msg="StopPodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" failed" error="failed to destroy network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.860870 kubelet[2829]: E0712 00:24:48.860668 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:24:48.861063 kubelet[2829]: E0712 00:24:48.861011 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5"} Jul 12 00:24:48.861155 kubelet[2829]: E0712 00:24:48.861092 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7d682096-3a17-4390-b23a-c08da1aa1faf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.861274 kubelet[2829]: E0712 00:24:48.861152 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7d682096-3a17-4390-b23a-c08da1aa1faf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-qwzsc" podUID="7d682096-3a17-4390-b23a-c08da1aa1faf" Jul 12 00:24:48.861822 env[1824]: time="2025-07-12T00:24:48.861729353Z" level=error msg="StopPodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" failed" error="failed to destroy network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.862257 kubelet[2829]: E0712 00:24:48.862198 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:24:48.862378 kubelet[2829]: E0712 00:24:48.862273 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e"} Jul 12 00:24:48.862378 kubelet[2829]: E0712 00:24:48.862326 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0827bab2-3218-4e3b-9514-ca54f12cdbdd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.862583 kubelet[2829]: E0712 00:24:48.862366 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0827bab2-3218-4e3b-9514-ca54f12cdbdd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" podUID="0827bab2-3218-4e3b-9514-ca54f12cdbdd" Jul 12 00:24:48.871977 env[1824]: time="2025-07-12T00:24:48.871875947Z" level=error msg="StopPodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" failed" error="failed to destroy network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.872813 kubelet[2829]: E0712 00:24:48.872505 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:24:48.872813 kubelet[2829]: E0712 00:24:48.872607 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f"} Jul 12 00:24:48.872813 kubelet[2829]: E0712 00:24:48.872691 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.872813 kubelet[2829]: E0712 00:24:48.872734 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-wtrsr" podUID="37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1" Jul 12 00:24:48.878510 env[1824]: time="2025-07-12T00:24:48.878420891Z" level=error msg="StopPodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" failed" error="failed to destroy network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.879187 kubelet[2829]: E0712 00:24:48.879085 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:24:48.879187 kubelet[2829]: E0712 00:24:48.879167 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8"} Jul 12 00:24:48.879400 kubelet[2829]: E0712 00:24:48.879229 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"eb7dfc38-dd13-4716-9e74-13453bfe06e3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.879400 kubelet[2829]: E0712 00:24:48.879276 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"eb7dfc38-dd13-4716-9e74-13453bfe06e3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-dvwws" podUID="eb7dfc38-dd13-4716-9e74-13453bfe06e3" Jul 12 00:24:48.883516 env[1824]: time="2025-07-12T00:24:48.883434508Z" level=error msg="StopPodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" failed" error="failed to destroy network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:24:48.884323 kubelet[2829]: E0712 00:24:48.884006 2829 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:24:48.884323 kubelet[2829]: E0712 00:24:48.884107 2829 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1"} Jul 12 00:24:48.884323 kubelet[2829]: E0712 00:24:48.884189 2829 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"13066eeb-b554-4368-b141-352169772413\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:24:48.884323 kubelet[2829]: E0712 00:24:48.884233 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"13066eeb-b554-4368-b141-352169772413\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" podUID="13066eeb-b554-4368-b141-352169772413" Jul 12 00:24:56.036361 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3506927081.mount: Deactivated successfully. Jul 12 00:24:56.098117 env[1824]: time="2025-07-12T00:24:56.098054454Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.100183 env[1824]: time="2025-07-12T00:24:56.100131941Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.105990 env[1824]: time="2025-07-12T00:24:56.104142729Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.106989 env[1824]: time="2025-07-12T00:24:56.106906218Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:24:56.108228 env[1824]: time="2025-07-12T00:24:56.107556536Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 12 00:24:56.146370 env[1824]: time="2025-07-12T00:24:56.146280565Z" level=info msg="CreateContainer within sandbox \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 12 00:24:56.172400 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount567763997.mount: Deactivated successfully. Jul 12 00:24:56.176510 env[1824]: time="2025-07-12T00:24:56.176422144Z" level=info msg="CreateContainer within sandbox \"8cd190364608b7ea229c5fd76688d6e4e5e89dbf1ae041d5b94f06ade9c33625\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0121e06142eb441d0a43a020a6db2d7842e2cc86c3f4e6126252a6bc3d13018a\"" Jul 12 00:24:56.178555 env[1824]: time="2025-07-12T00:24:56.177393961Z" level=info msg="StartContainer for \"0121e06142eb441d0a43a020a6db2d7842e2cc86c3f4e6126252a6bc3d13018a\"" Jul 12 00:24:56.214326 systemd[1]: Started cri-containerd-0121e06142eb441d0a43a020a6db2d7842e2cc86c3f4e6126252a6bc3d13018a.scope. Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277672 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 12 00:24:56.277877 kernel: audit: type=1400 audit(1752279896.274:1019): avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:56.296865 kernel: audit: type=1300 audit(1752279896.274:1019): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3380 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:56.297135 kernel: audit: type=1327 audit(1752279896.274:1019): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323165303631343265623434316430613433613032306136646232 Jul 12 00:24:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323165303631343265623434316430613433613032306136646232 Jul 12 00:24:56.307662 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.322506 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.330877 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.338715 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.349031 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.349168 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.364424 kernel: audit: type=1400 audit(1752279896.274:1020): avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.274000 audit: BPF prog-id=142 op=LOAD Jul 12 00:24:56.274000 audit[3980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3380 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:56.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323165303631343265623434316430613433613032306136646232 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.277000 audit: BPF prog-id=143 op=LOAD Jul 12 00:24:56.277000 audit[3980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3380 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:56.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323165303631343265623434316430613433613032306136646232 Jul 12 00:24:56.284000 audit: BPF prog-id=143 op=UNLOAD Jul 12 00:24:56.285000 audit: BPF prog-id=142 op=UNLOAD Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { perfmon } for pid=3980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit[3980]: AVC avc: denied { bpf } for pid=3980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:56.285000 audit: BPF prog-id=144 op=LOAD Jul 12 00:24:56.285000 audit[3980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3380 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:56.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323165303631343265623434316430613433613032306136646232 Jul 12 00:24:56.371125 env[1824]: time="2025-07-12T00:24:56.371048018Z" level=info msg="StartContainer for \"0121e06142eb441d0a43a020a6db2d7842e2cc86c3f4e6126252a6bc3d13018a\" returns successfully" Jul 12 00:24:56.608613 kubelet[2829]: I0712 00:24:56.603400 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-vtxjv" podStartSLOduration=3.169087093 podStartE2EDuration="22.603374135s" podCreationTimestamp="2025-07-12 00:24:34 +0000 UTC" firstStartedPulling="2025-07-12 00:24:36.676920325 +0000 UTC m=+30.075123676" lastFinishedPulling="2025-07-12 00:24:56.111207379 +0000 UTC m=+49.509410718" observedRunningTime="2025-07-12 00:24:56.595808307 +0000 UTC m=+49.994011682" watchObservedRunningTime="2025-07-12 00:24:56.603374135 +0000 UTC m=+50.001577498" Jul 12 00:24:56.660458 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 12 00:24:56.660630 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 12 00:24:56.857661 env[1824]: time="2025-07-12T00:24:56.857592063Z" level=info msg="StopPodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\"" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.047 [INFO][4028] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.049 [INFO][4028] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" iface="eth0" netns="/var/run/netns/cni-e6c58743-64ec-4810-9db1-860c23f20796" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.052 [INFO][4028] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" iface="eth0" netns="/var/run/netns/cni-e6c58743-64ec-4810-9db1-860c23f20796" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.055 [INFO][4028] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" iface="eth0" netns="/var/run/netns/cni-e6c58743-64ec-4810-9db1-860c23f20796" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.055 [INFO][4028] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.055 [INFO][4028] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.153 [INFO][4042] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.153 [INFO][4042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.153 [INFO][4042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.172 [WARNING][4042] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.172 [INFO][4042] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.174 [INFO][4042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:24:57.198706 env[1824]: 2025-07-12 00:24:57.189 [INFO][4028] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:24:57.206035 systemd[1]: run-netns-cni\x2de6c58743\x2d64ec\x2d4810\x2d9db1\x2d860c23f20796.mount: Deactivated successfully. Jul 12 00:24:57.207732 env[1824]: time="2025-07-12T00:24:57.207671351Z" level=info msg="TearDown network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" successfully" Jul 12 00:24:57.207942 env[1824]: time="2025-07-12T00:24:57.207885108Z" level=info msg="StopPodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" returns successfully" Jul 12 00:24:57.397023 kubelet[2829]: I0712 00:24:57.395257 2829 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-backend-key-pair\") pod \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\" (UID: \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\") " Jul 12 00:24:57.397023 kubelet[2829]: I0712 00:24:57.395406 2829 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-shjmn\" (UniqueName: \"kubernetes.io/projected/ab98c6c3-b1d6-4476-b777-36e75bd63dee-kube-api-access-shjmn\") pod \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\" (UID: \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\") " Jul 12 00:24:57.397023 kubelet[2829]: I0712 00:24:57.395506 2829 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-ca-bundle\") pod \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\" (UID: \"ab98c6c3-b1d6-4476-b777-36e75bd63dee\") " Jul 12 00:24:57.397023 kubelet[2829]: I0712 00:24:57.396535 2829 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "ab98c6c3-b1d6-4476-b777-36e75bd63dee" (UID: "ab98c6c3-b1d6-4476-b777-36e75bd63dee"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 12 00:24:57.412491 systemd[1]: var-lib-kubelet-pods-ab98c6c3\x2db1d6\x2d4476\x2db777\x2d36e75bd63dee-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 12 00:24:57.416342 kubelet[2829]: I0712 00:24:57.416281 2829 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "ab98c6c3-b1d6-4476-b777-36e75bd63dee" (UID: "ab98c6c3-b1d6-4476-b777-36e75bd63dee"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 12 00:24:57.428404 kubelet[2829]: I0712 00:24:57.425131 2829 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ab98c6c3-b1d6-4476-b777-36e75bd63dee-kube-api-access-shjmn" (OuterVolumeSpecName: "kube-api-access-shjmn") pod "ab98c6c3-b1d6-4476-b777-36e75bd63dee" (UID: "ab98c6c3-b1d6-4476-b777-36e75bd63dee"). InnerVolumeSpecName "kube-api-access-shjmn". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 12 00:24:57.428405 systemd[1]: var-lib-kubelet-pods-ab98c6c3\x2db1d6\x2d4476\x2db777\x2d36e75bd63dee-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dshjmn.mount: Deactivated successfully. Jul 12 00:24:57.496708 kubelet[2829]: I0712 00:24:57.496561 2829 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-ca-bundle\") on node \"ip-172-31-25-27\" DevicePath \"\"" Jul 12 00:24:57.496975 kubelet[2829]: I0712 00:24:57.496924 2829 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ab98c6c3-b1d6-4476-b777-36e75bd63dee-whisker-backend-key-pair\") on node \"ip-172-31-25-27\" DevicePath \"\"" Jul 12 00:24:57.497179 kubelet[2829]: I0712 00:24:57.497149 2829 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-shjmn\" (UniqueName: \"kubernetes.io/projected/ab98c6c3-b1d6-4476-b777-36e75bd63dee-kube-api-access-shjmn\") on node \"ip-172-31-25-27\" DevicePath \"\"" Jul 12 00:24:57.571415 kubelet[2829]: I0712 00:24:57.571362 2829 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:24:57.580505 systemd[1]: Removed slice kubepods-besteffort-podab98c6c3_b1d6_4476_b777_36e75bd63dee.slice. Jul 12 00:24:57.714969 systemd[1]: Created slice kubepods-besteffort-pod47a18abc_4784_49a8_8833_9ea585a2f274.slice. Jul 12 00:24:57.799358 kubelet[2829]: I0712 00:24:57.799216 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/47a18abc-4784-49a8-8833-9ea585a2f274-whisker-backend-key-pair\") pod \"whisker-68b5b7898-vfkmr\" (UID: \"47a18abc-4784-49a8-8833-9ea585a2f274\") " pod="calico-system/whisker-68b5b7898-vfkmr" Jul 12 00:24:57.800128 kubelet[2829]: I0712 00:24:57.800094 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wzwrf\" (UniqueName: \"kubernetes.io/projected/47a18abc-4784-49a8-8833-9ea585a2f274-kube-api-access-wzwrf\") pod \"whisker-68b5b7898-vfkmr\" (UID: \"47a18abc-4784-49a8-8833-9ea585a2f274\") " pod="calico-system/whisker-68b5b7898-vfkmr" Jul 12 00:24:57.800440 kubelet[2829]: I0712 00:24:57.800409 2829 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/47a18abc-4784-49a8-8833-9ea585a2f274-whisker-ca-bundle\") pod \"whisker-68b5b7898-vfkmr\" (UID: \"47a18abc-4784-49a8-8833-9ea585a2f274\") " pod="calico-system/whisker-68b5b7898-vfkmr" Jul 12 00:24:58.025540 env[1824]: time="2025-07-12T00:24:58.025415524Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68b5b7898-vfkmr,Uid:47a18abc-4784-49a8-8833-9ea585a2f274,Namespace:calico-system,Attempt:0,}" Jul 12 00:24:58.283884 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:24:58.284082 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7830f7f81d6: link becomes ready Jul 12 00:24:58.284207 systemd-networkd[1544]: cali7830f7f81d6: Link UP Jul 12 00:24:58.285634 (udev-worker)[4085]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:24:58.285749 systemd-networkd[1544]: cali7830f7f81d6: Gained carrier Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.112 [INFO][4064] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.137 [INFO][4064] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0 whisker-68b5b7898- calico-system 47a18abc-4784-49a8-8833-9ea585a2f274 970 0 2025-07-12 00:24:57 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:68b5b7898 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-25-27 whisker-68b5b7898-vfkmr eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali7830f7f81d6 [] [] }} ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.137 [INFO][4064] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.192 [INFO][4077] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" HandleID="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Workload="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.193 [INFO][4077] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" HandleID="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Workload="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d30c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-27", "pod":"whisker-68b5b7898-vfkmr", "timestamp":"2025-07-12 00:24:58.192780272 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.193 [INFO][4077] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.193 [INFO][4077] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.193 [INFO][4077] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.209 [INFO][4077] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.219 [INFO][4077] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.227 [INFO][4077] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.231 [INFO][4077] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.236 [INFO][4077] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.237 [INFO][4077] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.239 [INFO][4077] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8 Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.249 [INFO][4077] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.259 [INFO][4077] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.129/26] block=192.168.15.128/26 handle="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.259 [INFO][4077] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.129/26] handle="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" host="ip-172-31-25-27" Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.259 [INFO][4077] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:24:58.320196 env[1824]: 2025-07-12 00:24:58.259 [INFO][4077] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.129/26] IPv6=[] ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" HandleID="k8s-pod-network.bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Workload="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.322012 env[1824]: 2025-07-12 00:24:58.263 [INFO][4064] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0", GenerateName:"whisker-68b5b7898-", Namespace:"calico-system", SelfLink:"", UID:"47a18abc-4784-49a8-8833-9ea585a2f274", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"68b5b7898", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"whisker-68b5b7898-vfkmr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.15.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali7830f7f81d6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:24:58.322012 env[1824]: 2025-07-12 00:24:58.263 [INFO][4064] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.129/32] ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.322012 env[1824]: 2025-07-12 00:24:58.263 [INFO][4064] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7830f7f81d6 ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.322012 env[1824]: 2025-07-12 00:24:58.288 [INFO][4064] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.322012 env[1824]: 2025-07-12 00:24:58.289 [INFO][4064] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0", GenerateName:"whisker-68b5b7898-", Namespace:"calico-system", SelfLink:"", UID:"47a18abc-4784-49a8-8833-9ea585a2f274", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"68b5b7898", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8", Pod:"whisker-68b5b7898-vfkmr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.15.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali7830f7f81d6", MAC:"0e:8a:39:4d:db:32", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:24:58.322012 env[1824]: 2025-07-12 00:24:58.317 [INFO][4064] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8" Namespace="calico-system" Pod="whisker-68b5b7898-vfkmr" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--68b5b7898--vfkmr-eth0" Jul 12 00:24:58.342424 env[1824]: time="2025-07-12T00:24:58.342035980Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:58.342424 env[1824]: time="2025-07-12T00:24:58.342115980Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:58.342424 env[1824]: time="2025-07-12T00:24:58.342152698Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:58.342774 env[1824]: time="2025-07-12T00:24:58.342498738Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8 pid=4099 runtime=io.containerd.runc.v2 Jul 12 00:24:58.390611 systemd[1]: Started cri-containerd-bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8.scope. Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.423000 audit: BPF prog-id=145 op=LOAD Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4099 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263663333663230373666376166356133393738656539323231353133 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4099 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263663333663230373666376166356133393738656539323231353133 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.425000 audit: BPF prog-id=146 op=LOAD Jul 12 00:24:58.425000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4099 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263663333663230373666376166356133393738656539323231353133 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.427000 audit: BPF prog-id=147 op=LOAD Jul 12 00:24:58.427000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4099 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.427000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263663333663230373666376166356133393738656539323231353133 Jul 12 00:24:58.428000 audit: BPF prog-id=147 op=UNLOAD Jul 12 00:24:58.428000 audit: BPF prog-id=146 op=UNLOAD Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { perfmon } for pid=4109 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit[4109]: AVC avc: denied { bpf } for pid=4109 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:58.428000 audit: BPF prog-id=148 op=LOAD Jul 12 00:24:58.428000 audit[4109]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4099 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263663333663230373666376166356133393738656539323231353133 Jul 12 00:24:58.497614 env[1824]: time="2025-07-12T00:24:58.497556547Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-68b5b7898-vfkmr,Uid:47a18abc-4784-49a8-8833-9ea585a2f274,Namespace:calico-system,Attempt:0,} returns sandbox id \"bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8\"" Jul 12 00:24:58.502480 env[1824]: time="2025-07-12T00:24:58.502420353Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 12 00:24:58.748000 audit[4182]: AVC avc: denied { write } for pid=4182 comm="tee" name="fd" dev="proc" ino=21658 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.748000 audit[4182]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcd8f77dd a2=241 a3=1b6 items=1 ppid=4146 pid=4182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.748000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 12 00:24:58.748000 audit: PATH item=0 name="/dev/fd/63" inode=22585 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.748000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:58.773000 audit[4180]: AVC avc: denied { write } for pid=4180 comm="tee" name="fd" dev="proc" ino=21663 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.773000 audit[4180]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff85657cd a2=241 a3=1b6 items=1 ppid=4144 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.773000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 12 00:24:58.773000 audit: PATH item=0 name="/dev/fd/63" inode=21644 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:58.820000 audit[4191]: AVC avc: denied { write } for pid=4191 comm="tee" name="fd" dev="proc" ino=22597 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.827000 audit[4187]: AVC avc: denied { write } for pid=4187 comm="tee" name="fd" dev="proc" ino=22600 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.829000 audit[4193]: AVC avc: denied { write } for pid=4193 comm="tee" name="fd" dev="proc" ino=22603 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.820000 audit[4191]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdd89f7de a2=241 a3=1b6 items=1 ppid=4148 pid=4191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.820000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 12 00:24:58.820000 audit: PATH item=0 name="/dev/fd/63" inode=22590 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.820000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:58.827000 audit[4187]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7eaf7dd a2=241 a3=1b6 items=1 ppid=4143 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.827000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 12 00:24:58.827000 audit: PATH item=0 name="/dev/fd/63" inode=21660 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.827000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:58.829000 audit[4193]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd25787df a2=241 a3=1b6 items=1 ppid=4140 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.829000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 12 00:24:58.829000 audit: PATH item=0 name="/dev/fd/63" inode=21665 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.829000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:58.864000 audit[4196]: AVC avc: denied { write } for pid=4196 comm="tee" name="fd" dev="proc" ino=22609 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.864000 audit[4196]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff3fe17ce a2=241 a3=1b6 items=1 ppid=4145 pid=4196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.864000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 12 00:24:58.864000 audit: PATH item=0 name="/dev/fd/63" inode=21666 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.864000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:58.871000 audit[4199]: AVC avc: denied { write } for pid=4199 comm="tee" name="fd" dev="proc" ino=22615 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:24:58.871000 audit[4199]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe5e0f7dd a2=241 a3=1b6 items=1 ppid=4142 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:58.871000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 12 00:24:58.871000 audit: PATH item=0 name="/dev/fd/63" inode=21667 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:24:58.871000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:24:59.035982 systemd[1]: run-containerd-runc-k8s.io-bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8-runc.FCGQ7G.mount: Deactivated successfully. Jul 12 00:24:59.167454 env[1824]: time="2025-07-12T00:24:59.167376885Z" level=info msg="StopPodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\"" Jul 12 00:24:59.181938 kubelet[2829]: I0712 00:24:59.181881 2829 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="ab98c6c3-b1d6-4476-b777-36e75bd63dee" path="/var/lib/kubelet/pods/ab98c6c3-b1d6-4476-b777-36e75bd63dee/volumes" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.307 [INFO][4231] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.308 [INFO][4231] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" iface="eth0" netns="/var/run/netns/cni-377496ce-1fd8-bcbe-e334-9db3e3c4c699" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.308 [INFO][4231] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" iface="eth0" netns="/var/run/netns/cni-377496ce-1fd8-bcbe-e334-9db3e3c4c699" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.308 [INFO][4231] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" iface="eth0" netns="/var/run/netns/cni-377496ce-1fd8-bcbe-e334-9db3e3c4c699" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.309 [INFO][4231] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.309 [INFO][4231] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.408 [INFO][4241] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.409 [INFO][4241] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.409 [INFO][4241] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.425 [WARNING][4241] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.425 [INFO][4241] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.428 [INFO][4241] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:24:59.436211 env[1824]: 2025-07-12 00:24:59.432 [INFO][4231] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:24:59.442157 systemd[1]: run-netns-cni\x2d377496ce\x2d1fd8\x2dbcbe\x2de334\x2d9db3e3c4c699.mount: Deactivated successfully. Jul 12 00:24:59.443153 env[1824]: time="2025-07-12T00:24:59.443095178Z" level=info msg="TearDown network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" successfully" Jul 12 00:24:59.443355 env[1824]: time="2025-07-12T00:24:59.443318068Z" level=info msg="StopPodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" returns successfully" Jul 12 00:24:59.448267 env[1824]: time="2025-07-12T00:24:59.448211335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-krnx2,Uid:0827bab2-3218-4e3b-9514-ca54f12cdbdd,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.555000 audit: BPF prog-id=149 op=LOAD Jul 12 00:24:59.555000 audit[4272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce60c9a8 a2=98 a3=ffffce60c998 items=0 ppid=4158 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.555000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:24:59.559000 audit: BPF prog-id=149 op=UNLOAD Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.559000 audit: BPF prog-id=150 op=LOAD Jul 12 00:24:59.559000 audit[4272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce60c858 a2=74 a3=95 items=0 ppid=4158 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.559000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:24:59.562000 audit: BPF prog-id=150 op=UNLOAD Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.562000 audit: BPF prog-id=151 op=LOAD Jul 12 00:24:59.562000 audit[4272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce60c888 a2=40 a3=ffffce60c8b8 items=0 ppid=4158 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.562000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:24:59.577000 audit: BPF prog-id=151 op=UNLOAD Jul 12 00:24:59.578000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.578000 audit[4272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffce60c9a0 a2=50 a3=0 items=0 ppid=4158 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.578000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.598000 audit: BPF prog-id=152 op=LOAD Jul 12 00:24:59.598000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffd7b1058 a2=98 a3=fffffd7b1048 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.598000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:24:59.601000 audit: BPF prog-id=152 op=UNLOAD Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.602000 audit: BPF prog-id=153 op=LOAD Jul 12 00:24:59.602000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffd7b0ce8 a2=74 a3=95 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.602000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:24:59.612000 audit: BPF prog-id=153 op=UNLOAD Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.612000 audit: BPF prog-id=154 op=LOAD Jul 12 00:24:59.612000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffd7b0d48 a2=94 a3=2 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.612000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:24:59.618000 audit: BPF prog-id=154 op=UNLOAD Jul 12 00:24:59.742565 systemd-networkd[1544]: cali7830f7f81d6: Gained IPv6LL Jul 12 00:24:59.820274 systemd-networkd[1544]: cali2021c8beafa: Link UP Jul 12 00:24:59.824051 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:24:59.824215 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2021c8beafa: link becomes ready Jul 12 00:24:59.824456 systemd-networkd[1544]: cali2021c8beafa: Gained carrier Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.620 [INFO][4255] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0 calico-apiserver-5b9ffbdcb7- calico-apiserver 0827bab2-3218-4e3b-9514-ca54f12cdbdd 980 0 2025-07-12 00:24:26 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5b9ffbdcb7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-27 calico-apiserver-5b9ffbdcb7-krnx2 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2021c8beafa [] [] }} ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.621 [INFO][4255] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.713 [INFO][4288] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" HandleID="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.713 [INFO][4288] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" HandleID="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d38f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-27", "pod":"calico-apiserver-5b9ffbdcb7-krnx2", "timestamp":"2025-07-12 00:24:59.713541885 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.714 [INFO][4288] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.714 [INFO][4288] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.714 [INFO][4288] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.733 [INFO][4288] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.749 [INFO][4288] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.762 [INFO][4288] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.766 [INFO][4288] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.772 [INFO][4288] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.772 [INFO][4288] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.776 [INFO][4288] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9 Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.793 [INFO][4288] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.809 [INFO][4288] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.130/26] block=192.168.15.128/26 handle="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.809 [INFO][4288] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.130/26] handle="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" host="ip-172-31-25-27" Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.809 [INFO][4288] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:24:59.864657 env[1824]: 2025-07-12 00:24:59.809 [INFO][4288] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.130/26] IPv6=[] ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" HandleID="k8s-pod-network.f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.866100 env[1824]: 2025-07-12 00:24:59.812 [INFO][4255] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"0827bab2-3218-4e3b-9514-ca54f12cdbdd", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"calico-apiserver-5b9ffbdcb7-krnx2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2021c8beafa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:24:59.866100 env[1824]: 2025-07-12 00:24:59.813 [INFO][4255] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.130/32] ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.866100 env[1824]: 2025-07-12 00:24:59.813 [INFO][4255] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2021c8beafa ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.866100 env[1824]: 2025-07-12 00:24:59.827 [INFO][4255] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.866100 env[1824]: 2025-07-12 00:24:59.827 [INFO][4255] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"0827bab2-3218-4e3b-9514-ca54f12cdbdd", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9", Pod:"calico-apiserver-5b9ffbdcb7-krnx2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2021c8beafa", MAC:"aa:cd:5a:dd:5f:af", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:24:59.866100 env[1824]: 2025-07-12 00:24:59.858 [INFO][4255] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-krnx2" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:24:59.894065 env[1824]: time="2025-07-12T00:24:59.893613956Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:24:59.894065 env[1824]: time="2025-07-12T00:24:59.893699296Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:24:59.894065 env[1824]: time="2025-07-12T00:24:59.893724135Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:24:59.894065 env[1824]: time="2025-07-12T00:24:59.893992767Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9 pid=4308 runtime=io.containerd.runc.v2 Jul 12 00:24:59.944293 systemd[1]: Started cri-containerd-f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9.scope. Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.989000 audit: BPF prog-id=155 op=LOAD Jul 12 00:24:59.989000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffd7b0d08 a2=40 a3=fffffd7b0d38 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.989000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:24:59.991000 audit: BPF prog-id=155 op=UNLOAD Jul 12 00:24:59.991000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:24:59.991000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffffd7b0e20 a2=50 a3=0 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:24:59.991000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.007000 audit: BPF prog-id=156 op=LOAD Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffd7b0d78 a2=28 a3=fffffd7b0ea8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffd7b0da8 a2=28 a3=fffffd7b0ed8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffd7b0c58 a2=28 a3=fffffd7b0d88 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffd7b0dc8 a2=28 a3=fffffd7b0ef8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffd7b0da8 a2=28 a3=fffffd7b0ed8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffd7b0d98 a2=28 a3=fffffd7b0ec8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffd7b0dc8 a2=28 a3=fffffd7b0ef8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffd7b0da8 a2=28 a3=fffffd7b0ed8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffd7b0dc8 a2=28 a3=fffffd7b0ef8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffd7b0d98 a2=28 a3=fffffd7b0ec8 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffd7b0e18 a2=28 a3=fffffd7b0f58 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffffd7b0b50 a2=50 a3=0 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit: BPF prog-id=157 op=LOAD Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffd7b0b58 a2=94 a3=5 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.011000 audit: BPF prog-id=157 op=UNLOAD Jul 12 00:25:00.011000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.011000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffffd7b0c60 a2=50 a3=0 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.011000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffffd7b0da8 a2=4 a3=3 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.014000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.014000 audit[4284]: AVC avc: denied { confidentiality } for pid=4284 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:00.014000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffd7b0d88 a2=94 a3=6 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.014000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.015000 audit[4284]: AVC avc: denied { confidentiality } for pid=4284 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:00.015000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffd7b0558 a2=94 a3=83 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.015000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { perfmon } for pid=4284 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { bpf } for pid=4284 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.016000 audit[4284]: AVC avc: denied { confidentiality } for pid=4284 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:00.016000 audit[4284]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffd7b0558 a2=94 a3=83 items=0 ppid=4158 pid=4284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.016000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4308 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356433666364373863363730633463626238626233336562336166 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4308 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356433666364373863363730633463626238626233336562336166 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.024000 audit: BPF prog-id=158 op=LOAD Jul 12 00:25:00.024000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4308 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356433666364373863363730633463626238626233336562336166 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.025000 audit: BPF prog-id=159 op=LOAD Jul 12 00:25:00.025000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4308 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356433666364373863363730633463626238626233336562336166 Jul 12 00:25:00.026000 audit: BPF prog-id=159 op=UNLOAD Jul 12 00:25:00.026000 audit: BPF prog-id=158 op=UNLOAD Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { perfmon } for pid=4319 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit[4319]: AVC avc: denied { bpf } for pid=4319 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.026000 audit: BPF prog-id=160 op=LOAD Jul 12 00:25:00.026000 audit[4319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4308 pid=4319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637356433666364373863363730633463626238626233336562336166 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.092000 audit: BPF prog-id=161 op=LOAD Jul 12 00:25:00.092000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb7f6bc8 a2=98 a3=fffffb7f6bb8 items=0 ppid=4158 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.092000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:25:00.093000 audit: BPF prog-id=161 op=UNLOAD Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit: BPF prog-id=162 op=LOAD Jul 12 00:25:00.093000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb7f6a78 a2=74 a3=95 items=0 ppid=4158 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.093000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:25:00.093000 audit: BPF prog-id=162 op=UNLOAD Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { perfmon } for pid=4338 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit[4338]: AVC avc: denied { bpf } for pid=4338 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.093000 audit: BPF prog-id=163 op=LOAD Jul 12 00:25:00.093000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb7f6aa8 a2=40 a3=fffffb7f6ad8 items=0 ppid=4158 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.093000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:25:00.093000 audit: BPF prog-id=163 op=UNLOAD Jul 12 00:25:00.149172 env[1824]: time="2025-07-12T00:25:00.149105784Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-krnx2,Uid:0827bab2-3218-4e3b-9514-ca54f12cdbdd,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9\"" Jul 12 00:25:00.402318 env[1824]: time="2025-07-12T00:25:00.396919411Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:00.407788 env[1824]: time="2025-07-12T00:25:00.407731031Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:00.413869 env[1824]: time="2025-07-12T00:25:00.413811148Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:00.419988 env[1824]: time="2025-07-12T00:25:00.419915504Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:00.423504 env[1824]: time="2025-07-12T00:25:00.421872084Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 12 00:25:00.430043 env[1824]: time="2025-07-12T00:25:00.429942488Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:25:00.438760 env[1824]: time="2025-07-12T00:25:00.438686232Z" level=info msg="CreateContainer within sandbox \"bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 12 00:25:00.474753 systemd-networkd[1544]: vxlan.calico: Link UP Jul 12 00:25:00.474767 systemd-networkd[1544]: vxlan.calico: Gained carrier Jul 12 00:25:00.489232 env[1824]: time="2025-07-12T00:25:00.489164362Z" level=info msg="CreateContainer within sandbox \"bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"d5a42513bf38c73e98454a7c490ab3ed4e81661d7ad88e35d59c1005770c10c5\"" Jul 12 00:25:00.490477 env[1824]: time="2025-07-12T00:25:00.490421370Z" level=info msg="StartContainer for \"d5a42513bf38c73e98454a7c490ab3ed4e81661d7ad88e35d59c1005770c10c5\"" Jul 12 00:25:00.562442 systemd[1]: Started cri-containerd-d5a42513bf38c73e98454a7c490ab3ed4e81661d7ad88e35d59c1005770c10c5.scope. Jul 12 00:25:00.587997 systemd[1]: run-containerd-runc-k8s.io-d5a42513bf38c73e98454a7c490ab3ed4e81661d7ad88e35d59c1005770c10c5-runc.OdQASi.mount: Deactivated successfully. Jul 12 00:25:00.641757 (udev-worker)[4013]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.655000 audit: BPF prog-id=164 op=LOAD Jul 12 00:25:00.655000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcbcce378 a2=98 a3=ffffcbcce368 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.655000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.662000 audit: BPF prog-id=164 op=UNLOAD Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit: BPF prog-id=165 op=LOAD Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcbcce058 a2=74 a3=95 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit: BPF prog-id=165 op=UNLOAD Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit: BPF prog-id=166 op=LOAD Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcbcce0b8 a2=94 a3=2 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit: BPF prog-id=166 op=UNLOAD Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcbcce0e8 a2=28 a3=ffffcbcce218 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbcce118 a2=28 a3=ffffcbcce248 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbccdfc8 a2=28 a3=ffffcbcce0f8 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcbcce138 a2=28 a3=ffffcbcce268 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcbcce118 a2=28 a3=ffffcbcce248 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcbcce108 a2=28 a3=ffffcbcce238 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcbcce138 a2=28 a3=ffffcbcce268 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbcce118 a2=28 a3=ffffcbcce248 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbcce138 a2=28 a3=ffffcbcce268 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcbcce108 a2=28 a3=ffffcbcce238 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcbcce188 a2=28 a3=ffffcbcce2c8 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.668000 audit: BPF prog-id=167 op=LOAD Jul 12 00:25:00.668000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcbccdfa8 a2=40 a3=ffffcbccdfd8 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.668000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.669000 audit: BPF prog-id=167 op=UNLOAD Jul 12 00:25:00.669000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.669000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffcbccdfd0 a2=50 a3=0 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.669000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffcbccdfd0 a2=50 a3=0 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.670000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit: BPF prog-id=168 op=LOAD Jul 12 00:25:00.670000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcbccd738 a2=94 a3=2 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.670000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.670000 audit: BPF prog-id=168 op=UNLOAD Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { perfmon } for pid=4395 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit[4395]: AVC avc: denied { bpf } for pid=4395 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.670000 audit: BPF prog-id=169 op=LOAD Jul 12 00:25:00.670000 audit[4395]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcbccd8c8 a2=94 a3=30 items=0 ppid=4158 pid=4395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.670000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.718000 audit: BPF prog-id=170 op=LOAD Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4099 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613432353133626633386337336539383435346137633439306162 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4099 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613432353133626633386337336539383435346137633439306162 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit: BPF prog-id=171 op=LOAD Jul 12 00:25:00.719000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4099 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613432353133626633386337336539383435346137633439306162 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.719000 audit: BPF prog-id=172 op=LOAD Jul 12 00:25:00.719000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4099 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613432353133626633386337336539383435346137633439306162 Jul 12 00:25:00.720000 audit: BPF prog-id=172 op=UNLOAD Jul 12 00:25:00.720000 audit: BPF prog-id=171 op=UNLOAD Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.720000 audit: BPF prog-id=173 op=LOAD Jul 12 00:25:00.720000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4099 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435613432353133626633386337336539383435346137633439306162 Jul 12 00:25:00.712000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.712000 audit: BPF prog-id=174 op=LOAD Jul 12 00:25:00.712000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff891c068 a2=98 a3=fffff891c058 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.712000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:00.721000 audit: BPF prog-id=174 op=UNLOAD Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit: BPF prog-id=175 op=LOAD Jul 12 00:25:00.721000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff891bcf8 a2=74 a3=95 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.721000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:00.721000 audit: BPF prog-id=175 op=UNLOAD Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:00.721000 audit: BPF prog-id=176 op=LOAD Jul 12 00:25:00.721000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff891bd58 a2=94 a3=2 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:00.721000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:00.721000 audit: BPF prog-id=176 op=UNLOAD Jul 12 00:25:00.816511 env[1824]: time="2025-07-12T00:25:00.816443171Z" level=info msg="StartContainer for \"d5a42513bf38c73e98454a7c490ab3ed4e81661d7ad88e35d59c1005770c10c5\" returns successfully" Jul 12 00:25:00.933000 audit[4388]: AVC avc: denied { search } for pid=4388 comm="nginx" name="crypto" dev="proc" ino=22177 scontext=system_u:system_r:svirt_lxc_net_t:s0:c325,c899 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 12 00:25:00.933000 audit[4388]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffaf2a7958 a2=0 a3=0 items=0 ppid=4099 pid=4388 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c325,c899 key=(null) Jul 12 00:25:00.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 12 00:25:01.022708 systemd-networkd[1544]: cali2021c8beafa: Gained IPv6LL Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.060000 audit: BPF prog-id=177 op=LOAD Jul 12 00:25:01.060000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff891bd18 a2=40 a3=fffff891bd48 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.060000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.062000 audit: BPF prog-id=177 op=UNLOAD Jul 12 00:25:01.062000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.062000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff891be30 a2=50 a3=0 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.062000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.081000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.081000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff891bd88 a2=28 a3=fffff891beb8 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.081000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.082000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.082000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff891bdb8 a2=28 a3=fffff891bee8 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.082000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.082000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.082000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff891bc68 a2=28 a3=fffff891bd98 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.082000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.083000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.083000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff891bdd8 a2=28 a3=fffff891bf08 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.083000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.084000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.084000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff891bdb8 a2=28 a3=fffff891bee8 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.084000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.085000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.085000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff891bda8 a2=28 a3=fffff891bed8 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.085000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.086000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.086000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff891bdd8 a2=28 a3=fffff891bf08 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.086000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.087000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.087000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff891bdb8 a2=28 a3=fffff891bee8 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.087000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.087000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.087000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff891bdd8 a2=28 a3=fffff891bf08 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.087000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.088000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.088000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff891bda8 a2=28 a3=fffff891bed8 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.088000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.088000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.088000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff891be28 a2=28 a3=fffff891bf68 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.088000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.089000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.089000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff891bb60 a2=50 a3=0 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.089000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.090000 audit: BPF prog-id=178 op=LOAD Jul 12 00:25:01.090000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff891bb68 a2=94 a3=5 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.090000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.092000 audit: BPF prog-id=178 op=UNLOAD Jul 12 00:25:01.092000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.092000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff891bc70 a2=50 a3=0 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.092000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff891bdb8 a2=4 a3=3 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.093000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.093000 audit[4400]: AVC avc: denied { confidentiality } for pid=4400 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:01.093000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff891bd98 a2=94 a3=6 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.093000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { confidentiality } for pid=4400 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:01.095000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff891b568 a2=94 a3=83 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { perfmon } for pid=4400 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.095000 audit[4400]: AVC avc: denied { confidentiality } for pid=4400 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:25:01.095000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff891b568 a2=94 a3=83 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.095000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.096000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.096000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff891cfa8 a2=10 a3=fffff891d098 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.096000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.096000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff891ce68 a2=10 a3=fffff891cf58 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.096000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.096000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff891cdd8 a2=10 a3=fffff891cf58 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.096000 audit[4400]: AVC avc: denied { bpf } for pid=4400 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.096000 audit[4400]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff891cdd8 a2=10 a3=fffff891cf58 items=0 ppid=4158 pid=4400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.096000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:25:01.110000 audit: BPF prog-id=169 op=UNLOAD Jul 12 00:25:01.110000 audit[4416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=32 a0=3 a1=ffffcdd75050 a2=0 a3=ffffb3564fa8 items=0 ppid=4158 pid=4416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.110000 audit: PROCTITLE proctitle=6970006C696E6B0064656C0063616C69636F5F746D705F41 Jul 12 00:25:01.171861 env[1824]: time="2025-07-12T00:25:01.165905269Z" level=info msg="StopPodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\"" Jul 12 00:25:01.302010 kernel: kauditd_printk_skb: 754 callbacks suppressed Jul 12 00:25:01.302198 kernel: audit: type=1325 audit(1752279901.292:1185): table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4455 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.292000 audit[4455]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4455 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.322433 kernel: audit: type=1300 audit(1752279901.292:1185): arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc5c81460 a2=0 a3=ffffb4c2cfa8 items=0 ppid=4158 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.292000 audit[4455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc5c81460 a2=0 a3=ffffb4c2cfa8 items=0 ppid=4158 pid=4455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.292000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.355693 kernel: audit: type=1327 audit(1752279901.292:1185): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.355888 kernel: audit: type=1325 audit(1752279901.341:1186): table=nat:102 family=2 entries=15 op=nft_register_chain pid=4454 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.341000 audit[4454]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=4454 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.341000 audit[4454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe2a7f2b0 a2=0 a3=ffff857eafa8 items=0 ppid=4158 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.373539 kernel: audit: type=1300 audit(1752279901.341:1186): arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe2a7f2b0 a2=0 a3=ffff857eafa8 items=0 ppid=4158 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.341000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.380655 kernel: audit: type=1327 audit(1752279901.341:1186): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.388000 audit[4453]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=4453 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.388000 audit[4453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffff4f1f50 a2=0 a3=ffffb827efa8 items=0 ppid=4158 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.407614 kernel: audit: type=1325 audit(1752279901.388:1187): table=raw:103 family=2 entries=21 op=nft_register_chain pid=4453 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.407779 kernel: audit: type=1300 audit(1752279901.388:1187): arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffff4f1f50 a2=0 a3=ffffb827efa8 items=0 ppid=4158 pid=4453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.388000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.415578 kernel: audit: type=1327 audit(1752279901.388:1187): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.407000 audit[4457]: NETFILTER_CFG table=filter:104 family=2 entries=136 op=nft_register_chain pid=4457 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.446999 kernel: audit: type=1325 audit(1752279901.407:1188): table=filter:104 family=2 entries=136 op=nft_register_chain pid=4457 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.407000 audit[4457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=78424 a0=3 a1=fffffa332ee0 a2=0 a3=ffff8754cfa8 items=0 ppid=4158 pid=4457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.407000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.290 [INFO][4436] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.291 [INFO][4436] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" iface="eth0" netns="/var/run/netns/cni-d4f2d0b2-c7e8-10a8-dc06-bd2f7d055d1a" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.291 [INFO][4436] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" iface="eth0" netns="/var/run/netns/cni-d4f2d0b2-c7e8-10a8-dc06-bd2f7d055d1a" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.309 [INFO][4436] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" iface="eth0" netns="/var/run/netns/cni-d4f2d0b2-c7e8-10a8-dc06-bd2f7d055d1a" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.323 [INFO][4436] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.323 [INFO][4436] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.430 [INFO][4461] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.451 [INFO][4461] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.451 [INFO][4461] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.469 [WARNING][4461] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.470 [INFO][4461] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.475 [INFO][4461] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:01.481049 env[1824]: 2025-07-12 00:25:01.477 [INFO][4436] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:01.487020 systemd[1]: run-netns-cni\x2dd4f2d0b2\x2dc7e8\x2d10a8\x2ddc06\x2dbd2f7d055d1a.mount: Deactivated successfully. Jul 12 00:25:01.487800 env[1824]: time="2025-07-12T00:25:01.487739412Z" level=info msg="TearDown network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" successfully" Jul 12 00:25:01.487994 env[1824]: time="2025-07-12T00:25:01.487937032Z" level=info msg="StopPodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" returns successfully" Jul 12 00:25:01.489883 env[1824]: time="2025-07-12T00:25:01.489806045Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wtrsr,Uid:37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1,Namespace:calico-system,Attempt:1,}" Jul 12 00:25:01.718629 (udev-worker)[4398]: Network interface NamePolicy= disabled on kernel command line. Jul 12 00:25:01.722276 systemd-networkd[1544]: cali5eae00fbbf4: Link UP Jul 12 00:25:01.726124 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5eae00fbbf4: link becomes ready Jul 12 00:25:01.726312 systemd-networkd[1544]: cali5eae00fbbf4: Gained carrier Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.586 [INFO][4473] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0 csi-node-driver- calico-system 37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1 993 0 2025-07-12 00:24:34 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-25-27 csi-node-driver-wtrsr eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali5eae00fbbf4 [] [] }} ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.586 [INFO][4473] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.640 [INFO][4485] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" HandleID="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.643 [INFO][4485] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" HandleID="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000255130), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-27", "pod":"csi-node-driver-wtrsr", "timestamp":"2025-07-12 00:25:01.640542342 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.643 [INFO][4485] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.643 [INFO][4485] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.644 [INFO][4485] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.659 [INFO][4485] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.669 [INFO][4485] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.679 [INFO][4485] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.682 [INFO][4485] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.688 [INFO][4485] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.688 [INFO][4485] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.691 [INFO][4485] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451 Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.700 [INFO][4485] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.710 [INFO][4485] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.131/26] block=192.168.15.128/26 handle="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.710 [INFO][4485] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.131/26] handle="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" host="ip-172-31-25-27" Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.710 [INFO][4485] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:01.786236 env[1824]: 2025-07-12 00:25:01.711 [INFO][4485] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.131/26] IPv6=[] ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" HandleID="k8s-pod-network.9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.787593 env[1824]: 2025-07-12 00:25:01.714 [INFO][4473] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"csi-node-driver-wtrsr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.15.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5eae00fbbf4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:01.787593 env[1824]: 2025-07-12 00:25:01.714 [INFO][4473] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.131/32] ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.787593 env[1824]: 2025-07-12 00:25:01.714 [INFO][4473] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5eae00fbbf4 ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.787593 env[1824]: 2025-07-12 00:25:01.727 [INFO][4473] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.787593 env[1824]: 2025-07-12 00:25:01.731 [INFO][4473] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451", Pod:"csi-node-driver-wtrsr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.15.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5eae00fbbf4", MAC:"ee:c9:09:39:b9:b9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:01.787593 env[1824]: 2025-07-12 00:25:01.775 [INFO][4473] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451" Namespace="calico-system" Pod="csi-node-driver-wtrsr" WorkloadEndpoint="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:01.802000 audit[4500]: NETFILTER_CFG table=filter:105 family=2 entries=40 op=nft_register_chain pid=4500 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:01.802000 audit[4500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffc8df7660 a2=0 a3=ffff8a38cfa8 items=0 ppid=4158 pid=4500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.802000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:01.825566 env[1824]: time="2025-07-12T00:25:01.825179947Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:01.825566 env[1824]: time="2025-07-12T00:25:01.825294650Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:01.825566 env[1824]: time="2025-07-12T00:25:01.825321757Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:01.826386 env[1824]: time="2025-07-12T00:25:01.826270825Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451 pid=4509 runtime=io.containerd.runc.v2 Jul 12 00:25:01.876756 systemd[1]: Started cri-containerd-9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451.scope. Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.918000 audit: BPF prog-id=179 op=LOAD Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4509 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963393361633738333266313730303033626561656665336636356132 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4509 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963393361633738333266313730303033626561656665336636356132 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.920000 audit: BPF prog-id=180 op=LOAD Jul 12 00:25:01.920000 audit[4518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4509 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963393361633738333266313730303033626561656665336636356132 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.922000 audit: BPF prog-id=181 op=LOAD Jul 12 00:25:01.922000 audit[4518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4509 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963393361633738333266313730303033626561656665336636356132 Jul 12 00:25:01.923000 audit: BPF prog-id=181 op=UNLOAD Jul 12 00:25:01.923000 audit: BPF prog-id=180 op=UNLOAD Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { perfmon } for pid=4518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit[4518]: AVC avc: denied { bpf } for pid=4518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:01.924000 audit: BPF prog-id=182 op=LOAD Jul 12 00:25:01.924000 audit[4518]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4509 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:01.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963393361633738333266313730303033626561656665336636356132 Jul 12 00:25:01.953209 env[1824]: time="2025-07-12T00:25:01.953129071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wtrsr,Uid:37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1,Namespace:calico-system,Attempt:1,} returns sandbox id \"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451\"" Jul 12 00:25:02.161000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.161000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=401378f6b0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:25:02.161000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:25:02.161000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.161000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=401373bc40 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:25:02.161000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:25:02.163000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6767 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.163000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=401387f4a0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:25:02.163000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:25:02.173723 env[1824]: time="2025-07-12T00:25:02.173671885Z" level=info msg="StopPodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\"" Jul 12 00:25:02.176388 env[1824]: time="2025-07-12T00:25:02.176338695Z" level=info msg="StopPodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\"" Jul 12 00:25:02.204000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6771 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.204000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=401378fa40 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:25:02.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:25:02.242000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.242000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=40138ba360 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:25:02.242000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:25:02.242000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.242000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=401387f830 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:25:02.242000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:25:02.369648 systemd-networkd[1544]: vxlan.calico: Gained IPv6LL Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.421 [INFO][4559] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.422 [INFO][4559] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" iface="eth0" netns="/var/run/netns/cni-1e4ecf39-ed03-d479-d648-6d41e9ae4960" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.422 [INFO][4559] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" iface="eth0" netns="/var/run/netns/cni-1e4ecf39-ed03-d479-d648-6d41e9ae4960" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.423 [INFO][4559] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" iface="eth0" netns="/var/run/netns/cni-1e4ecf39-ed03-d479-d648-6d41e9ae4960" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.423 [INFO][4559] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.425 [INFO][4559] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.589 [INFO][4572] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.589 [INFO][4572] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.592 [INFO][4572] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.635 [WARNING][4572] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.635 [INFO][4572] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.655 [INFO][4572] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:02.665491 env[1824]: 2025-07-12 00:25:02.659 [INFO][4559] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:02.671626 systemd[1]: run-netns-cni\x2d1e4ecf39\x2ded03\x2dd479\x2dd648\x2d6d41e9ae4960.mount: Deactivated successfully. Jul 12 00:25:02.678139 env[1824]: time="2025-07-12T00:25:02.678072369Z" level=info msg="TearDown network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" successfully" Jul 12 00:25:02.678363 env[1824]: time="2025-07-12T00:25:02.678327948Z" level=info msg="StopPodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" returns successfully" Jul 12 00:25:02.679374 env[1824]: time="2025-07-12T00:25:02.679302278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-mvfcn,Uid:3ff2f4df-ed0c-423f-8244-249894282491,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.488 [INFO][4560] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.488 [INFO][4560] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" iface="eth0" netns="/var/run/netns/cni-dcd40fa5-a684-6623-afb8-5b19d9a9c063" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.488 [INFO][4560] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" iface="eth0" netns="/var/run/netns/cni-dcd40fa5-a684-6623-afb8-5b19d9a9c063" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.489 [INFO][4560] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" iface="eth0" netns="/var/run/netns/cni-dcd40fa5-a684-6623-afb8-5b19d9a9c063" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.489 [INFO][4560] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.489 [INFO][4560] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.674 [INFO][4578] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.674 [INFO][4578] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.674 [INFO][4578] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.709 [WARNING][4578] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.709 [INFO][4578] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.719 [INFO][4578] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:02.748395 env[1824]: 2025-07-12 00:25:02.743 [INFO][4560] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:02.754201 systemd[1]: run-netns-cni\x2ddcd40fa5\x2da684\x2d6623\x2dafb8\x2d5b19d9a9c063.mount: Deactivated successfully. Jul 12 00:25:02.754938 env[1824]: time="2025-07-12T00:25:02.754841109Z" level=info msg="TearDown network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" successfully" Jul 12 00:25:02.755214 env[1824]: time="2025-07-12T00:25:02.755162230Z" level=info msg="StopPodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" returns successfully" Jul 12 00:25:02.760044 env[1824]: time="2025-07-12T00:25:02.758707841Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-57cbc47cc8-r8nlb,Uid:13066eeb-b554-4368-b141-352169772413,Namespace:calico-system,Attempt:1,}" Jul 12 00:25:02.967000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.967000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40010cb560 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:25:02.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:02.970000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:02.970000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a2e180 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:25:02.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:03.187889 env[1824]: time="2025-07-12T00:25:03.186433478Z" level=info msg="StopPodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\"" Jul 12 00:25:03.204140 systemd-networkd[1544]: caliaf7d5860130: Link UP Jul 12 00:25:03.212584 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:25:03.212669 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaf7d5860130: link becomes ready Jul 12 00:25:03.213024 systemd-networkd[1544]: caliaf7d5860130: Gained carrier Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:02.881 [INFO][4585] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0 calico-apiserver-5b9ffbdcb7- calico-apiserver 3ff2f4df-ed0c-423f-8244-249894282491 1003 0 2025-07-12 00:24:26 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5b9ffbdcb7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-25-27 calico-apiserver-5b9ffbdcb7-mvfcn eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliaf7d5860130 [] [] }} ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:02.881 [INFO][4585] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.012 [INFO][4606] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" HandleID="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.013 [INFO][4606] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" HandleID="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003a6450), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-25-27", "pod":"calico-apiserver-5b9ffbdcb7-mvfcn", "timestamp":"2025-07-12 00:25:03.012157785 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.013 [INFO][4606] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.014 [INFO][4606] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.014 [INFO][4606] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.056 [INFO][4606] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.081 [INFO][4606] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.096 [INFO][4606] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.100 [INFO][4606] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.118 [INFO][4606] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.118 [INFO][4606] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.126 [INFO][4606] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584 Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.138 [INFO][4606] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.161 [INFO][4606] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.132/26] block=192.168.15.128/26 handle="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.161 [INFO][4606] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.132/26] handle="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" host="ip-172-31-25-27" Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.161 [INFO][4606] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:03.278911 env[1824]: 2025-07-12 00:25:03.162 [INFO][4606] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.132/26] IPv6=[] ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" HandleID="k8s-pod-network.3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.280330 env[1824]: 2025-07-12 00:25:03.185 [INFO][4585] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3ff2f4df-ed0c-423f-8244-249894282491", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"calico-apiserver-5b9ffbdcb7-mvfcn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf7d5860130", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:03.280330 env[1824]: 2025-07-12 00:25:03.185 [INFO][4585] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.132/32] ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.280330 env[1824]: 2025-07-12 00:25:03.185 [INFO][4585] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaf7d5860130 ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.280330 env[1824]: 2025-07-12 00:25:03.243 [INFO][4585] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.280330 env[1824]: 2025-07-12 00:25:03.243 [INFO][4585] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3ff2f4df-ed0c-423f-8244-249894282491", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584", Pod:"calico-apiserver-5b9ffbdcb7-mvfcn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf7d5860130", MAC:"d2:9e:32:f9:a0:4e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:03.280330 env[1824]: 2025-07-12 00:25:03.267 [INFO][4585] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584" Namespace="calico-apiserver" Pod="calico-apiserver-5b9ffbdcb7-mvfcn" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:03.357533 kubelet[2829]: I0712 00:25:03.357475 2829 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:25:03.380286 systemd-networkd[1544]: caliacd7e13a1b7: Link UP Jul 12 00:25:03.390161 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliacd7e13a1b7: link becomes ready Jul 12 00:25:03.388313 systemd-networkd[1544]: caliacd7e13a1b7: Gained carrier Jul 12 00:25:03.390684 systemd-networkd[1544]: cali5eae00fbbf4: Gained IPv6LL Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:02.947 [INFO][4594] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0 calico-kube-controllers-57cbc47cc8- calico-system 13066eeb-b554-4368-b141-352169772413 1004 0 2025-07-12 00:24:34 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:57cbc47cc8 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-25-27 calico-kube-controllers-57cbc47cc8-r8nlb eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] caliacd7e13a1b7 [] [] }} ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:02.947 [INFO][4594] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.073 [INFO][4614] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" HandleID="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.075 [INFO][4614] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" HandleID="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002bd730), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-27", "pod":"calico-kube-controllers-57cbc47cc8-r8nlb", "timestamp":"2025-07-12 00:25:03.073493225 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.075 [INFO][4614] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.161 [INFO][4614] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.162 [INFO][4614] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.228 [INFO][4614] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.256 [INFO][4614] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.297 [INFO][4614] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.305 [INFO][4614] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.314 [INFO][4614] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.314 [INFO][4614] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.327 [INFO][4614] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.337 [INFO][4614] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.353 [INFO][4614] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.133/26] block=192.168.15.128/26 handle="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.353 [INFO][4614] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.133/26] handle="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" host="ip-172-31-25-27" Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.354 [INFO][4614] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:03.444751 env[1824]: 2025-07-12 00:25:03.354 [INFO][4614] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.133/26] IPv6=[] ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" HandleID="k8s-pod-network.5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.446222 env[1824]: 2025-07-12 00:25:03.363 [INFO][4594] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0", GenerateName:"calico-kube-controllers-57cbc47cc8-", Namespace:"calico-system", SelfLink:"", UID:"13066eeb-b554-4368-b141-352169772413", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"57cbc47cc8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"calico-kube-controllers-57cbc47cc8-r8nlb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.15.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliacd7e13a1b7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:03.446222 env[1824]: 2025-07-12 00:25:03.363 [INFO][4594] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.133/32] ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.446222 env[1824]: 2025-07-12 00:25:03.363 [INFO][4594] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliacd7e13a1b7 ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.446222 env[1824]: 2025-07-12 00:25:03.396 [INFO][4594] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.446222 env[1824]: 2025-07-12 00:25:03.397 [INFO][4594] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0", GenerateName:"calico-kube-controllers-57cbc47cc8-", Namespace:"calico-system", SelfLink:"", UID:"13066eeb-b554-4368-b141-352169772413", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"57cbc47cc8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f", Pod:"calico-kube-controllers-57cbc47cc8-r8nlb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.15.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliacd7e13a1b7", MAC:"0a:99:f2:be:6d:c0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:03.446222 env[1824]: 2025-07-12 00:25:03.428 [INFO][4594] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f" Namespace="calico-system" Pod="calico-kube-controllers-57cbc47cc8-r8nlb" WorkloadEndpoint="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:03.483130 env[1824]: time="2025-07-12T00:25:03.474787744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:03.483130 env[1824]: time="2025-07-12T00:25:03.475203051Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:03.483130 env[1824]: time="2025-07-12T00:25:03.475355410Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:03.485766 env[1824]: time="2025-07-12T00:25:03.484796595Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584 pid=4655 runtime=io.containerd.runc.v2 Jul 12 00:25:03.505000 audit[4666]: NETFILTER_CFG table=filter:106 family=2 entries=45 op=nft_register_chain pid=4666 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:03.505000 audit[4666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24264 a0=3 a1=fffff31b9d50 a2=0 a3=ffffbe0eafa8 items=0 ppid=4158 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.505000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:03.540200 systemd[1]: Started cri-containerd-3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584.scope. Jul 12 00:25:03.674284 env[1824]: time="2025-07-12T00:25:03.672446897Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:03.674284 env[1824]: time="2025-07-12T00:25:03.672528819Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:03.674284 env[1824]: time="2025-07-12T00:25:03.672556682Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:03.674284 env[1824]: time="2025-07-12T00:25:03.674157142Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f pid=4709 runtime=io.containerd.runc.v2 Jul 12 00:25:03.720000 audit[4721]: NETFILTER_CFG table=filter:107 family=2 entries=54 op=nft_register_chain pid=4721 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:03.720000 audit[4721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25992 a0=3 a1=ffffcd850190 a2=0 a3=ffff8f034fa8 items=0 ppid=4158 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.720000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.470 [INFO][4636] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.471 [INFO][4636] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" iface="eth0" netns="/var/run/netns/cni-ad7ec09e-169b-4f2e-03a0-1d76520a5882" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.472 [INFO][4636] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" iface="eth0" netns="/var/run/netns/cni-ad7ec09e-169b-4f2e-03a0-1d76520a5882" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.474 [INFO][4636] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" iface="eth0" netns="/var/run/netns/cni-ad7ec09e-169b-4f2e-03a0-1d76520a5882" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.474 [INFO][4636] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.474 [INFO][4636] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.677 [INFO][4670] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.677 [INFO][4670] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.677 [INFO][4670] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.748 [WARNING][4670] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.748 [INFO][4670] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.752 [INFO][4670] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:03.757505 env[1824]: 2025-07-12 00:25:03.754 [INFO][4636] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:03.764367 systemd[1]: run-netns-cni\x2dad7ec09e\x2d169b\x2d4f2e\x2d03a0\x2d1d76520a5882.mount: Deactivated successfully. Jul 12 00:25:03.769440 env[1824]: time="2025-07-12T00:25:03.769356500Z" level=info msg="TearDown network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" successfully" Jul 12 00:25:03.769695 env[1824]: time="2025-07-12T00:25:03.769651990Z" level=info msg="StopPodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" returns successfully" Jul 12 00:25:03.771176 env[1824]: time="2025-07-12T00:25:03.771120935Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dvwws,Uid:eb7dfc38-dd13-4716-9e74-13453bfe06e3,Namespace:kube-system,Attempt:1,}" Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.786000 audit: BPF prog-id=183 op=LOAD Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4655 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365333830353734653935333161663035303434373932613839643736 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4655 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365333830353734653935333161663035303434373932613839643736 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.788000 audit: BPF prog-id=184 op=LOAD Jul 12 00:25:03.788000 audit[4669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4655 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365333830353734653935333161663035303434373932613839643736 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.802000 audit: BPF prog-id=185 op=LOAD Jul 12 00:25:03.802000 audit[4669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4655 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365333830353734653935333161663035303434373932613839643736 Jul 12 00:25:03.803000 audit: BPF prog-id=185 op=UNLOAD Jul 12 00:25:03.803000 audit: BPF prog-id=184 op=UNLOAD Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { perfmon } for pid=4669 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit[4669]: AVC avc: denied { bpf } for pid=4669 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:03.803000 audit: BPF prog-id=186 op=LOAD Jul 12 00:25:03.803000 audit[4669]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4655 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:03.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365333830353734653935333161663035303434373932613839643736 Jul 12 00:25:03.875425 systemd[1]: Started cri-containerd-5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f.scope. Jul 12 00:25:03.996339 env[1824]: time="2025-07-12T00:25:03.996278057Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b9ffbdcb7-mvfcn,Uid:3ff2f4df-ed0c-423f-8244-249894282491,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584\"" Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.027000 audit: BPF prog-id=187 op=LOAD Jul 12 00:25:04.037000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.037000 audit[4724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4709 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562386532383134356464653734346238373131653166663436353239 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4709 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562386532383134356464653734346238373131653166663436353239 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.042000 audit: BPF prog-id=188 op=LOAD Jul 12 00:25:04.042000 audit[4724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4709 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562386532383134356464653734346238373131653166663436353239 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.046000 audit: BPF prog-id=189 op=LOAD Jul 12 00:25:04.046000 audit[4724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4709 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562386532383134356464653734346238373131653166663436353239 Jul 12 00:25:04.053000 audit: BPF prog-id=189 op=UNLOAD Jul 12 00:25:04.053000 audit: BPF prog-id=188 op=UNLOAD Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:04.053000 audit: BPF prog-id=190 op=LOAD Jul 12 00:25:04.053000 audit[4724]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4709 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:04.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562386532383134356464653734346238373131653166663436353239 Jul 12 00:25:04.166379 env[1824]: time="2025-07-12T00:25:04.166299171Z" level=info msg="StopPodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\"" Jul 12 00:25:04.178688 env[1824]: time="2025-07-12T00:25:04.178598994Z" level=info msg="StopPodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\"" Jul 12 00:25:04.361984 env[1824]: time="2025-07-12T00:25:04.361900782Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-57cbc47cc8-r8nlb,Uid:13066eeb-b554-4368-b141-352169772413,Namespace:calico-system,Attempt:1,} returns sandbox id \"5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f\"" Jul 12 00:25:04.478759 systemd-networkd[1544]: caliaf7d5860130: Gained IPv6LL Jul 12 00:25:04.630368 systemd-networkd[1544]: cali4f681fae7a6: Link UP Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.360 [INFO][4799] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.360 [INFO][4799] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" iface="eth0" netns="/var/run/netns/cni-889ae020-c3be-5c74-375e-df3109110adc" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.361 [INFO][4799] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" iface="eth0" netns="/var/run/netns/cni-889ae020-c3be-5c74-375e-df3109110adc" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.362 [INFO][4799] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" iface="eth0" netns="/var/run/netns/cni-889ae020-c3be-5c74-375e-df3109110adc" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.362 [INFO][4799] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.362 [INFO][4799] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.589 [INFO][4826] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.593 [INFO][4826] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.608 [INFO][4826] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.647 [WARNING][4826] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.647 [INFO][4826] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.660 [INFO][4826] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:04.675077 env[1824]: 2025-07-12 00:25:04.664 [INFO][4799] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:04.676448 env[1824]: time="2025-07-12T00:25:04.675085619Z" level=info msg="TearDown network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" successfully" Jul 12 00:25:04.676448 env[1824]: time="2025-07-12T00:25:04.675146553Z" level=info msg="StopPodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" returns successfully" Jul 12 00:25:04.683332 env[1824]: time="2025-07-12T00:25:04.678930795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-n9njv,Uid:84a02892-671d-49e3-808c-4c6bf0171928,Namespace:calico-system,Attempt:1,}" Jul 12 00:25:04.681049 systemd[1]: run-netns-cni\x2d889ae020\x2dc3be\x2d5c74\x2d375e\x2ddf3109110adc.mount: Deactivated successfully. Jul 12 00:25:04.691356 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:25:04.691520 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4f681fae7a6: link becomes ready Jul 12 00:25:04.691548 systemd-networkd[1544]: cali4f681fae7a6: Gained carrier Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.144 [INFO][4741] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0 coredns-674b8bbfcf- kube-system eb7dfc38-dd13-4716-9e74-13453bfe06e3 1014 0 2025-07-12 00:24:12 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-27 coredns-674b8bbfcf-dvwws eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4f681fae7a6 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.145 [INFO][4741] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.443 [INFO][4780] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" HandleID="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.444 [INFO][4780] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" HandleID="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d4b0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-27", "pod":"coredns-674b8bbfcf-dvwws", "timestamp":"2025-07-12 00:25:04.442062506 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.444 [INFO][4780] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.444 [INFO][4780] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.444 [INFO][4780] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.483 [INFO][4780] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.510 [INFO][4780] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.541 [INFO][4780] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.545 [INFO][4780] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.557 [INFO][4780] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.557 [INFO][4780] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.564 [INFO][4780] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5 Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.587 [INFO][4780] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.608 [INFO][4780] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.134/26] block=192.168.15.128/26 handle="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.608 [INFO][4780] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.134/26] handle="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" host="ip-172-31-25-27" Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.608 [INFO][4780] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:04.744447 env[1824]: 2025-07-12 00:25:04.608 [INFO][4780] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.134/26] IPv6=[] ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" HandleID="k8s-pod-network.8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.746762 env[1824]: 2025-07-12 00:25:04.612 [INFO][4741] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"eb7dfc38-dd13-4716-9e74-13453bfe06e3", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"coredns-674b8bbfcf-dvwws", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4f681fae7a6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:04.746762 env[1824]: 2025-07-12 00:25:04.612 [INFO][4741] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.134/32] ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.746762 env[1824]: 2025-07-12 00:25:04.614 [INFO][4741] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4f681fae7a6 ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.746762 env[1824]: 2025-07-12 00:25:04.635 [INFO][4741] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.746762 env[1824]: 2025-07-12 00:25:04.695 [INFO][4741] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"eb7dfc38-dd13-4716-9e74-13453bfe06e3", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5", Pod:"coredns-674b8bbfcf-dvwws", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4f681fae7a6", MAC:"02:6d:f8:f4:8e:06", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:04.746762 env[1824]: 2025-07-12 00:25:04.728 [INFO][4741] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5" Namespace="kube-system" Pod="coredns-674b8bbfcf-dvwws" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.552 [INFO][4806] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.552 [INFO][4806] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" iface="eth0" netns="/var/run/netns/cni-52e22949-9bfc-70b4-9e58-30ab4a8cdfe9" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.552 [INFO][4806] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" iface="eth0" netns="/var/run/netns/cni-52e22949-9bfc-70b4-9e58-30ab4a8cdfe9" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.553 [INFO][4806] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" iface="eth0" netns="/var/run/netns/cni-52e22949-9bfc-70b4-9e58-30ab4a8cdfe9" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.553 [INFO][4806] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.553 [INFO][4806] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.781 [INFO][4842] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.781 [INFO][4842] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.782 [INFO][4842] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.803 [WARNING][4842] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.803 [INFO][4842] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.812 [INFO][4842] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:04.845675 env[1824]: 2025-07-12 00:25:04.829 [INFO][4806] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:04.845675 env[1824]: time="2025-07-12T00:25:04.841251464Z" level=info msg="TearDown network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" successfully" Jul 12 00:25:04.845675 env[1824]: time="2025-07-12T00:25:04.841310694Z" level=info msg="StopPodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" returns successfully" Jul 12 00:25:04.837109 systemd[1]: run-netns-cni\x2d52e22949\x2d9bfc\x2d70b4\x2d9e58\x2d30ab4a8cdfe9.mount: Deactivated successfully. Jul 12 00:25:04.848029 env[1824]: time="2025-07-12T00:25:04.847849502Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-qwzsc,Uid:7d682096-3a17-4390-b23a-c08da1aa1faf,Namespace:kube-system,Attempt:1,}" Jul 12 00:25:04.862775 systemd-networkd[1544]: caliacd7e13a1b7: Gained IPv6LL Jul 12 00:25:04.894051 env[1824]: time="2025-07-12T00:25:04.889349802Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:04.894051 env[1824]: time="2025-07-12T00:25:04.889457558Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:04.894051 env[1824]: time="2025-07-12T00:25:04.889484930Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:04.894051 env[1824]: time="2025-07-12T00:25:04.889799224Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5 pid=4873 runtime=io.containerd.runc.v2 Jul 12 00:25:04.978225 systemd[1]: Started cri-containerd-8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5.scope. Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.128000 audit: BPF prog-id=191 op=LOAD Jul 12 00:25:05.136000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.136000 audit[4882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4873 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865363066303134656339656461663435396263663265363063353965 Jul 12 00:25:05.136000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.136000 audit[4882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4873 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865363066303134656339656461663435396263663265363063353965 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit: BPF prog-id=192 op=LOAD Jul 12 00:25:05.139000 audit[4882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4873 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865363066303134656339656461663435396263663265363063353965 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit: BPF prog-id=193 op=LOAD Jul 12 00:25:05.139000 audit[4882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4873 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865363066303134656339656461663435396263663265363063353965 Jul 12 00:25:05.139000 audit: BPF prog-id=193 op=UNLOAD Jul 12 00:25:05.139000 audit: BPF prog-id=192 op=UNLOAD Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { perfmon } for pid=4882 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit[4882]: AVC avc: denied { bpf } for pid=4882 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.139000 audit: BPF prog-id=194 op=LOAD Jul 12 00:25:05.139000 audit[4882]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4873 pid=4882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865363066303134656339656461663435396263663265363063353965 Jul 12 00:25:05.341990 env[1824]: time="2025-07-12T00:25:05.340670188Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dvwws,Uid:eb7dfc38-dd13-4716-9e74-13453bfe06e3,Namespace:kube-system,Attempt:1,} returns sandbox id \"8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5\"" Jul 12 00:25:05.343258 systemd-networkd[1544]: cali50852c10656: Link UP Jul 12 00:25:05.351296 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali50852c10656: link becomes ready Jul 12 00:25:05.351653 systemd-networkd[1544]: cali50852c10656: Gained carrier Jul 12 00:25:05.379701 env[1824]: time="2025-07-12T00:25:05.379632588Z" level=info msg="CreateContainer within sandbox \"8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:25:05.425000 audit[4940]: NETFILTER_CFG table=filter:108 family=2 entries=54 op=nft_register_chain pid=4940 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:05.425000 audit[4940]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26100 a0=3 a1=ffffc03b95e0 a2=0 a3=ffff8a820fa8 items=0 ppid=4158 pid=4940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.425000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:05.436878 env[1824]: time="2025-07-12T00:25:05.436758780Z" level=info msg="CreateContainer within sandbox \"8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9d36fa6307d77b81ae48a4eb0e0f9cf2a9b9a3738cd9b576a78aa0e156b7a0cf\"" Jul 12 00:25:05.438452 env[1824]: time="2025-07-12T00:25:05.438301314Z" level=info msg="StartContainer for \"9d36fa6307d77b81ae48a4eb0e0f9cf2a9b9a3738cd9b576a78aa0e156b7a0cf\"" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:04.994 [INFO][4855] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0 goldmane-768f4c5c69- calico-system 84a02892-671d-49e3-808c-4c6bf0171928 1022 0 2025-07-12 00:24:34 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-25-27 goldmane-768f4c5c69-n9njv eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali50852c10656 [] [] }} ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:04.994 [INFO][4855] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.177 [INFO][4908] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" HandleID="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.178 [INFO][4908] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" HandleID="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d38b0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-25-27", "pod":"goldmane-768f4c5c69-n9njv", "timestamp":"2025-07-12 00:25:05.177578067 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.178 [INFO][4908] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.178 [INFO][4908] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.178 [INFO][4908] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.201 [INFO][4908] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.228 [INFO][4908] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.243 [INFO][4908] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.258 [INFO][4908] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.277 [INFO][4908] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.277 [INFO][4908] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.283 [INFO][4908] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5 Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.296 [INFO][4908] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.318 [INFO][4908] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.135/26] block=192.168.15.128/26 handle="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.318 [INFO][4908] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.135/26] handle="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" host="ip-172-31-25-27" Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.318 [INFO][4908] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:05.449183 env[1824]: 2025-07-12 00:25:05.319 [INFO][4908] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.135/26] IPv6=[] ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" HandleID="k8s-pod-network.3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.451181 env[1824]: 2025-07-12 00:25:05.330 [INFO][4855] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"84a02892-671d-49e3-808c-4c6bf0171928", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"goldmane-768f4c5c69-n9njv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.15.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali50852c10656", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:05.451181 env[1824]: 2025-07-12 00:25:05.330 [INFO][4855] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.135/32] ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.451181 env[1824]: 2025-07-12 00:25:05.330 [INFO][4855] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali50852c10656 ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.451181 env[1824]: 2025-07-12 00:25:05.360 [INFO][4855] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.451181 env[1824]: 2025-07-12 00:25:05.361 [INFO][4855] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"84a02892-671d-49e3-808c-4c6bf0171928", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5", Pod:"goldmane-768f4c5c69-n9njv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.15.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali50852c10656", MAC:"5e:73:cc:09:8a:cb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:05.451181 env[1824]: 2025-07-12 00:25:05.442 [INFO][4855] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5" Namespace="calico-system" Pod="goldmane-768f4c5c69-n9njv" WorkloadEndpoint="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:05.518314 env[1824]: time="2025-07-12T00:25:05.517053311Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:05.518314 env[1824]: time="2025-07-12T00:25:05.517120713Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:05.518314 env[1824]: time="2025-07-12T00:25:05.517146608Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:05.518314 env[1824]: time="2025-07-12T00:25:05.517395734Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5 pid=4964 runtime=io.containerd.runc.v2 Jul 12 00:25:05.547059 systemd-networkd[1544]: cali69b282ef620: Link UP Jul 12 00:25:05.554442 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali69b282ef620: link becomes ready Jul 12 00:25:05.553311 systemd-networkd[1544]: cali69b282ef620: Gained carrier Jul 12 00:25:05.595713 systemd[1]: Started cri-containerd-9d36fa6307d77b81ae48a4eb0e0f9cf2a9b9a3738cd9b576a78aa0e156b7a0cf.scope. Jul 12 00:25:05.622351 systemd[1]: Started cri-containerd-3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5.scope. Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.106 [INFO][4881] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0 coredns-674b8bbfcf- kube-system 7d682096-3a17-4390-b23a-c08da1aa1faf 1024 0 2025-07-12 00:24:12 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-25-27 coredns-674b8bbfcf-qwzsc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali69b282ef620 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.106 [INFO][4881] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.324 [INFO][4921] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" HandleID="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.324 [INFO][4921] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" HandleID="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024a9b0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-25-27", "pod":"coredns-674b8bbfcf-qwzsc", "timestamp":"2025-07-12 00:25:05.324114688 +0000 UTC"}, Hostname:"ip-172-31-25-27", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.324 [INFO][4921] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.324 [INFO][4921] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.325 [INFO][4921] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-25-27' Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.453 [INFO][4921] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.469 [INFO][4921] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.483 [INFO][4921] ipam/ipam.go 511: Trying affinity for 192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.487 [INFO][4921] ipam/ipam.go 158: Attempting to load block cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.494 [INFO][4921] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.15.128/26 host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.494 [INFO][4921] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.15.128/26 handle="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.497 [INFO][4921] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.506 [INFO][4921] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.15.128/26 handle="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.532 [INFO][4921] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.15.136/26] block=192.168.15.128/26 handle="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.532 [INFO][4921] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.15.136/26] handle="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" host="ip-172-31-25-27" Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.532 [INFO][4921] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:05.631716 env[1824]: 2025-07-12 00:25:05.532 [INFO][4921] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.15.136/26] IPv6=[] ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" HandleID="k8s-pod-network.56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.633285 env[1824]: 2025-07-12 00:25:05.536 [INFO][4881] cni-plugin/k8s.go 418: Populated endpoint ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7d682096-3a17-4390-b23a-c08da1aa1faf", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"", Pod:"coredns-674b8bbfcf-qwzsc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali69b282ef620", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:05.633285 env[1824]: 2025-07-12 00:25:05.537 [INFO][4881] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.15.136/32] ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.633285 env[1824]: 2025-07-12 00:25:05.537 [INFO][4881] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali69b282ef620 ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.633285 env[1824]: 2025-07-12 00:25:05.557 [INFO][4881] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.633285 env[1824]: 2025-07-12 00:25:05.574 [INFO][4881] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7d682096-3a17-4390-b23a-c08da1aa1faf", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f", Pod:"coredns-674b8bbfcf-qwzsc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali69b282ef620", MAC:"fe:6d:da:b9:b6:21", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:05.633285 env[1824]: 2025-07-12 00:25:05.614 [INFO][4881] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f" Namespace="kube-system" Pod="coredns-674b8bbfcf-qwzsc" WorkloadEndpoint="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:05.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.669000 audit: BPF prog-id=195 op=LOAD Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4873 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333666613633303764373762383161653438613465623065306639 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4873 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333666613633303764373762383161653438613465623065306639 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.672000 audit: BPF prog-id=196 op=LOAD Jul 12 00:25:05.672000 audit[4953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4873 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333666613633303764373762383161653438613465623065306639 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit: BPF prog-id=197 op=LOAD Jul 12 00:25:05.673000 audit[4953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4873 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333666613633303764373762383161653438613465623065306639 Jul 12 00:25:05.673000 audit: BPF prog-id=197 op=UNLOAD Jul 12 00:25:05.673000 audit: BPF prog-id=196 op=UNLOAD Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.673000 audit: BPF prog-id=198 op=LOAD Jul 12 00:25:05.673000 audit[4953]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4873 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964333666613633303764373762383161653438613465623065306639 Jul 12 00:25:05.727635 env[1824]: time="2025-07-12T00:25:05.727473437Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:25:05.728225 env[1824]: time="2025-07-12T00:25:05.727668684Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:25:05.728225 env[1824]: time="2025-07-12T00:25:05.727754830Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:25:05.732658 env[1824]: time="2025-07-12T00:25:05.732514115Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f pid=5010 runtime=io.containerd.runc.v2 Jul 12 00:25:05.782939 env[1824]: time="2025-07-12T00:25:05.782846574Z" level=info msg="StartContainer for \"9d36fa6307d77b81ae48a4eb0e0f9cf2a9b9a3738cd9b576a78aa0e156b7a0cf\" returns successfully" Jul 12 00:25:05.819896 systemd[1]: Started cri-containerd-56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f.scope. Jul 12 00:25:05.829404 systemd[1]: run-containerd-runc-k8s.io-56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f-runc.cjDB6W.mount: Deactivated successfully. Jul 12 00:25:05.822000 audit[5035]: NETFILTER_CFG table=filter:109 family=2 entries=66 op=nft_register_chain pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:05.822000 audit[5035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=32768 a0=3 a1=ffffe99b0600 a2=0 a3=ffffb223afa8 items=0 ppid=4158 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.822000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:05.886901 systemd-networkd[1544]: cali4f681fae7a6: Gained IPv6LL Jul 12 00:25:05.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.961000 audit: BPF prog-id=199 op=LOAD Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5010 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333037633131303436343236386466626561383862646134303432 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5010 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333037633131303436343236386466626561383862646134303432 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit: BPF prog-id=200 op=LOAD Jul 12 00:25:05.964000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5010 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333037633131303436343236386466626561383862646134303432 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.964000 audit: BPF prog-id=201 op=LOAD Jul 12 00:25:05.964000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5010 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333037633131303436343236386466626561383862646134303432 Jul 12 00:25:05.964000 audit: BPF prog-id=201 op=UNLOAD Jul 12 00:25:05.965000 audit: BPF prog-id=200 op=UNLOAD Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:05.965000 audit: BPF prog-id=202 op=LOAD Jul 12 00:25:05.965000 audit[5026]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5010 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:05.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536333037633131303436343236386466626561383862646134303432 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.004000 audit: BPF prog-id=203 op=LOAD Jul 12 00:25:06.005000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.005000 audit[4975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4964 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343261363132636637653338326131633463343932386437613837 Jul 12 00:25:06.005000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.005000 audit[4975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4964 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343261363132636637653338326131633463343932386437613837 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit: BPF prog-id=204 op=LOAD Jul 12 00:25:06.007000 audit[4975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4964 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343261363132636637653338326131633463343932386437613837 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.007000 audit: BPF prog-id=205 op=LOAD Jul 12 00:25:06.007000 audit[4975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4964 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343261363132636637653338326131633463343932386437613837 Jul 12 00:25:06.007000 audit: BPF prog-id=205 op=UNLOAD Jul 12 00:25:06.007000 audit: BPF prog-id=204 op=UNLOAD Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { perfmon } for pid=4975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit[4975]: AVC avc: denied { bpf } for pid=4975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.008000 audit: BPF prog-id=206 op=LOAD Jul 12 00:25:06.008000 audit[4975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4964 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343261363132636637653338326131633463343932386437613837 Jul 12 00:25:06.084746 env[1824]: time="2025-07-12T00:25:06.084668938Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-qwzsc,Uid:7d682096-3a17-4390-b23a-c08da1aa1faf,Namespace:kube-system,Attempt:1,} returns sandbox id \"56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f\"" Jul 12 00:25:06.107824 env[1824]: time="2025-07-12T00:25:06.107766870Z" level=info msg="CreateContainer within sandbox \"56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:25:06.165377 env[1824]: time="2025-07-12T00:25:06.165252782Z" level=info msg="CreateContainer within sandbox \"56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"8e1a95eb5da5849b9f6c39297b056d8ce14cc69a84b416a59643f1e11a8a1732\"" Jul 12 00:25:06.166557 env[1824]: time="2025-07-12T00:25:06.166421624Z" level=info msg="StartContainer for \"8e1a95eb5da5849b9f6c39297b056d8ce14cc69a84b416a59643f1e11a8a1732\"" Jul 12 00:25:06.196000 audit[5077]: NETFILTER_CFG table=filter:110 family=2 entries=48 op=nft_register_chain pid=5077 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:25:06.196000 audit[5077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22688 a0=3 a1=fffff95e0b00 a2=0 a3=ffffae6b6fa8 items=0 ppid=4158 pid=5077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.196000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:25:06.258376 systemd[1]: Started cri-containerd-8e1a95eb5da5849b9f6c39297b056d8ce14cc69a84b416a59643f1e11a8a1732.scope. Jul 12 00:25:06.340288 kernel: kauditd_printk_skb: 443 callbacks suppressed Jul 12 00:25:06.340430 kernel: audit: type=1400 audit(1752279906.328:1329): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.354246 kernel: audit: type=1400 audit(1752279906.338:1330): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.374587 kernel: audit: type=1400 audit(1752279906.338:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.374789 kernel: audit: type=1400 audit(1752279906.338:1332): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.397719 kernel: audit: type=1400 audit(1752279906.338:1333): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.410425 kernel: audit: type=1400 audit(1752279906.338:1334): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.423670 kernel: audit: type=1400 audit(1752279906.338:1335): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.435462 kernel: audit: type=1400 audit(1752279906.338:1336): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.450182 kernel: audit: type=1400 audit(1752279906.338:1337): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.466146 kernel: audit: type=1400 audit(1752279906.338:1338): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.338000 audit: BPF prog-id=207 op=LOAD Jul 12 00:25:06.380000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.380000 audit[5079]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=5010 pid=5079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316139356562356461353834396239663663333932393762303536 Jul 12 00:25:06.380000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.380000 audit[5079]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=5010 pid=5079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316139356562356461353834396239663663333932393762303536 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit: BPF prog-id=208 op=LOAD Jul 12 00:25:06.381000 audit[5079]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=5010 pid=5079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316139356562356461353834396239663663333932393762303536 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit: BPF prog-id=209 op=LOAD Jul 12 00:25:06.381000 audit[5079]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=5010 pid=5079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316139356562356461353834396239663663333932393762303536 Jul 12 00:25:06.381000 audit: BPF prog-id=209 op=UNLOAD Jul 12 00:25:06.381000 audit: BPF prog-id=208 op=UNLOAD Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { perfmon } for pid=5079 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit[5079]: AVC avc: denied { bpf } for pid=5079 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:06.381000 audit: BPF prog-id=210 op=LOAD Jul 12 00:25:06.381000 audit[5079]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=5010 pid=5079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:06.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316139356562356461353834396239663663333932393762303536 Jul 12 00:25:06.481838 env[1824]: time="2025-07-12T00:25:06.480453532Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-n9njv,Uid:84a02892-671d-49e3-808c-4c6bf0171928,Namespace:calico-system,Attempt:1,} returns sandbox id \"3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5\"" Jul 12 00:25:06.482000 audit[4993]: AVC avc: denied { getattr } for pid=4993 comm="coredns" path="cgroup:[4026532995]" dev="nsfs" ino=4026532995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c536 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:25:06.482000 audit[4993]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056390 a2=40001581b8 a3=0 items=0 ppid=4873 pid=4993 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c536 key=(null) Jul 12 00:25:06.482000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:25:06.578647 env[1824]: time="2025-07-12T00:25:06.578483077Z" level=info msg="StartContainer for \"8e1a95eb5da5849b9f6c39297b056d8ce14cc69a84b416a59643f1e11a8a1732\" returns successfully" Jul 12 00:25:06.634000 audit[5089]: AVC avc: denied { getattr } for pid=5089 comm="coredns" path="cgroup:[4026533006]" dev="nsfs" ino=4026533006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c744,c931 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:25:06.634000 audit[5089]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400014ac30 a2=400014c578 a3=0 items=0 ppid=5010 pid=5089 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c744,c931 key=(null) Jul 12 00:25:06.634000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:25:06.679872 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2449753538.mount: Deactivated successfully. Jul 12 00:25:06.906876 kubelet[2829]: I0712 00:25:06.906238 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-dvwws" podStartSLOduration=54.906208356 podStartE2EDuration="54.906208356s" podCreationTimestamp="2025-07-12 00:24:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:25:06.809192786 +0000 UTC m=+60.207396161" watchObservedRunningTime="2025-07-12 00:25:06.906208356 +0000 UTC m=+60.304411707" Jul 12 00:25:06.995627 env[1824]: time="2025-07-12T00:25:06.995561640Z" level=info msg="StopPodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\"" Jul 12 00:25:07.107000 audit[5134]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=5134 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:07.107000 audit[5134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff107c320 a2=0 a3=1 items=0 ppid=2981 pid=5134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:07.107000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:07.122000 audit[5134]: NETFILTER_CFG table=nat:112 family=2 entries=14 op=nft_register_rule pid=5134 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:07.122000 audit[5134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff107c320 a2=0 a3=1 items=0 ppid=2981 pid=5134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:07.122000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:07.231354 systemd-networkd[1544]: cali50852c10656: Gained IPv6LL Jul 12 00:25:07.298177 systemd-networkd[1544]: cali69b282ef620: Gained IPv6LL Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.183 [WARNING][5130] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0", GenerateName:"calico-kube-controllers-57cbc47cc8-", Namespace:"calico-system", SelfLink:"", UID:"13066eeb-b554-4368-b141-352169772413", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"57cbc47cc8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f", Pod:"calico-kube-controllers-57cbc47cc8-r8nlb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.15.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliacd7e13a1b7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.183 [INFO][5130] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.183 [INFO][5130] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" iface="eth0" netns="" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.183 [INFO][5130] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.183 [INFO][5130] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.358 [INFO][5139] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.358 [INFO][5139] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.359 [INFO][5139] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.405 [WARNING][5139] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.405 [INFO][5139] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.419 [INFO][5139] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:07.428093 env[1824]: 2025-07-12 00:25:07.421 [INFO][5130] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.429352 env[1824]: time="2025-07-12T00:25:07.428137376Z" level=info msg="TearDown network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" successfully" Jul 12 00:25:07.429352 env[1824]: time="2025-07-12T00:25:07.428186167Z" level=info msg="StopPodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" returns successfully" Jul 12 00:25:07.430543 env[1824]: time="2025-07-12T00:25:07.430482087Z" level=info msg="RemovePodSandbox for \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\"" Jul 12 00:25:07.430909 env[1824]: time="2025-07-12T00:25:07.430801303Z" level=info msg="Forcibly stopping sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\"" Jul 12 00:25:07.550000 audit[5151]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=5151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:07.550000 audit[5151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe58c6af0 a2=0 a3=1 items=0 ppid=2981 pid=5151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:07.550000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:07.586000 audit[5151]: NETFILTER_CFG table=nat:114 family=2 entries=14 op=nft_register_rule pid=5151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:07.586000 audit[5151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffe58c6af0 a2=0 a3=1 items=0 ppid=2981 pid=5151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:07.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.655 [WARNING][5156] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0", GenerateName:"calico-kube-controllers-57cbc47cc8-", Namespace:"calico-system", SelfLink:"", UID:"13066eeb-b554-4368-b141-352169772413", ResourceVersion:"1013", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"57cbc47cc8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f", Pod:"calico-kube-controllers-57cbc47cc8-r8nlb", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.15.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliacd7e13a1b7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.655 [INFO][5156] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.655 [INFO][5156] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" iface="eth0" netns="" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.655 [INFO][5156] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.656 [INFO][5156] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.746 [INFO][5164] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.746 [INFO][5164] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.746 [INFO][5164] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.784 [WARNING][5164] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.784 [INFO][5164] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" HandleID="k8s-pod-network.612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Workload="ip--172--31--25--27-k8s-calico--kube--controllers--57cbc47cc8--r8nlb-eth0" Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.788 [INFO][5164] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:07.809553 env[1824]: 2025-07-12 00:25:07.791 [INFO][5156] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1" Jul 12 00:25:07.810766 env[1824]: time="2025-07-12T00:25:07.810706725Z" level=info msg="TearDown network for sandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" successfully" Jul 12 00:25:07.827488 kubelet[2829]: I0712 00:25:07.827356 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-qwzsc" podStartSLOduration=55.827307987 podStartE2EDuration="55.827307987s" podCreationTimestamp="2025-07-12 00:24:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:25:06.912868393 +0000 UTC m=+60.311071768" watchObservedRunningTime="2025-07-12 00:25:07.827307987 +0000 UTC m=+61.225511350" Jul 12 00:25:07.829231 env[1824]: time="2025-07-12T00:25:07.829153424Z" level=info msg="RemovePodSandbox \"612191430a221eb6da1e9660edbba501c67408e81af211ca177e0772ffe329e1\" returns successfully" Jul 12 00:25:07.832031 env[1824]: time="2025-07-12T00:25:07.831936593Z" level=info msg="StopPodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\"" Jul 12 00:25:07.848166 env[1824]: time="2025-07-12T00:25:07.848108384Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:07.855406 env[1824]: time="2025-07-12T00:25:07.855349907Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:07.863076 env[1824]: time="2025-07-12T00:25:07.861935813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:07.870195 env[1824]: time="2025-07-12T00:25:07.870126370Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:07.871491 env[1824]: time="2025-07-12T00:25:07.871415057Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:25:07.880424 env[1824]: time="2025-07-12T00:25:07.880328862Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 12 00:25:07.885650 env[1824]: time="2025-07-12T00:25:07.885566586Z" level=info msg="CreateContainer within sandbox \"f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:25:07.941293 env[1824]: time="2025-07-12T00:25:07.941184742Z" level=info msg="CreateContainer within sandbox \"f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ddf03626fc46f035b21b1b7cd5a9a14fce9a7cfb2160ca8109fcdd1e198be247\"" Jul 12 00:25:07.942447 env[1824]: time="2025-07-12T00:25:07.942380719Z" level=info msg="StartContainer for \"ddf03626fc46f035b21b1b7cd5a9a14fce9a7cfb2160ca8109fcdd1e198be247\"" Jul 12 00:25:08.041893 systemd[1]: Started cri-containerd-ddf03626fc46f035b21b1b7cd5a9a14fce9a7cfb2160ca8109fcdd1e198be247.scope. Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.072 [WARNING][5178] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451", Pod:"csi-node-driver-wtrsr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.15.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5eae00fbbf4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.074 [INFO][5178] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.074 [INFO][5178] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" iface="eth0" netns="" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.074 [INFO][5178] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.074 [INFO][5178] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.170 [INFO][5203] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.170 [INFO][5203] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.170 [INFO][5203] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.203 [WARNING][5203] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.203 [INFO][5203] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.212 [INFO][5203] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:08.221199 env[1824]: 2025-07-12 00:25:08.215 [INFO][5178] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.223142 env[1824]: time="2025-07-12T00:25:08.223079322Z" level=info msg="TearDown network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" successfully" Jul 12 00:25:08.223364 env[1824]: time="2025-07-12T00:25:08.223293481Z" level=info msg="StopPodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" returns successfully" Jul 12 00:25:08.224865 env[1824]: time="2025-07-12T00:25:08.224798070Z" level=info msg="RemovePodSandbox for \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\"" Jul 12 00:25:08.225073 env[1824]: time="2025-07-12T00:25:08.224880616Z" level=info msg="Forcibly stopping sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\"" Jul 12 00:25:08.259000 audit[5218]: NETFILTER_CFG table=filter:115 family=2 entries=17 op=nft_register_rule pid=5218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:08.259000 audit[5218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffccb0c5d0 a2=0 a3=1 items=0 ppid=2981 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:08.293000 audit[5218]: NETFILTER_CFG table=nat:116 family=2 entries=47 op=nft_register_chain pid=5218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:08.293000 audit[5218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffccb0c5d0 a2=0 a3=1 items=0 ppid=2981 pid=5218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.293000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:08.332000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:08.332000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400204e020 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:25:08.332000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:08.340000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:08.340000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40015c4a80 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:25:08.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:08.341000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:08.341000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40015c4ac0 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:25:08.341000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:08.345000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:25:08.345000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400204e380 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:25:08.345000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:25:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.369000 audit: BPF prog-id=211 op=LOAD Jul 12 00:25:08.370000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.370000 audit[5190]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4308 pid=5190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464663033363236666334366630333562323162316237636435613961 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4308 pid=5190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464663033363236666334366630333562323162316237636435613961 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit: BPF prog-id=212 op=LOAD Jul 12 00:25:08.376000 audit[5190]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4308 pid=5190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464663033363236666334366630333562323162316237636435613961 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit: BPF prog-id=213 op=LOAD Jul 12 00:25:08.376000 audit[5190]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4308 pid=5190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464663033363236666334366630333562323162316237636435613961 Jul 12 00:25:08.376000 audit: BPF prog-id=213 op=UNLOAD Jul 12 00:25:08.376000 audit: BPF prog-id=212 op=UNLOAD Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { perfmon } for pid=5190 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit[5190]: AVC avc: denied { bpf } for pid=5190 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:08.376000 audit: BPF prog-id=214 op=LOAD Jul 12 00:25:08.376000 audit[5190]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4308 pid=5190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464663033363236666334366630333562323162316237636435613961 Jul 12 00:25:08.475081 env[1824]: time="2025-07-12T00:25:08.474910837Z" level=info msg="StartContainer for \"ddf03626fc46f035b21b1b7cd5a9a14fce9a7cfb2160ca8109fcdd1e198be247\" returns successfully" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.393 [WARNING][5217] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"37a1ca1f-0d02-4335-a12b-e9edc5fb7fe1", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451", Pod:"csi-node-driver-wtrsr", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.15.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali5eae00fbbf4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.394 [INFO][5217] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.394 [INFO][5217] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" iface="eth0" netns="" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.394 [INFO][5217] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.394 [INFO][5217] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.491 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.492 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.492 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.509 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.509 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" HandleID="k8s-pod-network.600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Workload="ip--172--31--25--27-k8s-csi--node--driver--wtrsr-eth0" Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.512 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:08.519516 env[1824]: 2025-07-12 00:25:08.515 [INFO][5217] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f" Jul 12 00:25:08.520889 env[1824]: time="2025-07-12T00:25:08.520820970Z" level=info msg="TearDown network for sandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" successfully" Jul 12 00:25:08.528861 env[1824]: time="2025-07-12T00:25:08.528737831Z" level=info msg="RemovePodSandbox \"600c7f2b10136a06b34553b6af691b93426f8b11fd38f07f898852e15ce2175f\" returns successfully" Jul 12 00:25:08.530002 env[1824]: time="2025-07-12T00:25:08.529920659Z" level=info msg="StopPodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\"" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.645 [WARNING][5259] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3ff2f4df-ed0c-423f-8244-249894282491", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584", Pod:"calico-apiserver-5b9ffbdcb7-mvfcn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf7d5860130", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.646 [INFO][5259] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.647 [INFO][5259] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" iface="eth0" netns="" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.647 [INFO][5259] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.647 [INFO][5259] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.741 [INFO][5266] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.741 [INFO][5266] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.741 [INFO][5266] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.760 [WARNING][5266] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.761 [INFO][5266] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.764 [INFO][5266] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:08.801591 env[1824]: 2025-07-12 00:25:08.790 [INFO][5259] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:08.801591 env[1824]: time="2025-07-12T00:25:08.801447849Z" level=info msg="TearDown network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" successfully" Jul 12 00:25:08.801591 env[1824]: time="2025-07-12T00:25:08.801499244Z" level=info msg="StopPodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" returns successfully" Jul 12 00:25:08.812464 env[1824]: time="2025-07-12T00:25:08.803570018Z" level=info msg="RemovePodSandbox for \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\"" Jul 12 00:25:08.812464 env[1824]: time="2025-07-12T00:25:08.803640264Z" level=info msg="Forcibly stopping sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\"" Jul 12 00:25:08.824124 systemd[1]: Started sshd@7-172.31.25.27:22-147.75.109.163:34186.service. Jul 12 00:25:08.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.27:22-147.75.109.163:34186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:08.929435 systemd[1]: run-containerd-runc-k8s.io-ddf03626fc46f035b21b1b7cd5a9a14fce9a7cfb2160ca8109fcdd1e198be247-runc.gsPApY.mount: Deactivated successfully. Jul 12 00:25:08.984000 audit[5297]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=5297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:08.984000 audit[5297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe53a5c30 a2=0 a3=1 items=0 ppid=2981 pid=5297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.984000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:08.995000 audit[5297]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:08.995000 audit[5297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe53a5c30 a2=0 a3=1 items=0 ppid=2981 pid=5297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:08.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:09.056000 audit[5277]: USER_ACCT pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:09.057639 sshd[5277]: Accepted publickey for core from 147.75.109.163 port 34186 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:09.059000 audit[5277]: CRED_ACQ pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:09.059000 audit[5277]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4e4cff0 a2=3 a3=1 items=0 ppid=1 pid=5277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:09.059000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:09.062522 sshd[5277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:09.079879 systemd[1]: Started session-8.scope. Jul 12 00:25:09.087227 systemd-logind[1813]: New session 8 of user core. Jul 12 00:25:09.098000 audit[5277]: USER_START pid=5277 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:09.102000 audit[5305]: CRED_ACQ pid=5305 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.007 [WARNING][5285] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"3ff2f4df-ed0c-423f-8244-249894282491", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584", Pod:"calico-apiserver-5b9ffbdcb7-mvfcn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf7d5860130", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.008 [INFO][5285] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.008 [INFO][5285] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" iface="eth0" netns="" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.008 [INFO][5285] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.008 [INFO][5285] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.082 [INFO][5299] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.084 [INFO][5299] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.085 [INFO][5299] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.129 [WARNING][5299] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.129 [INFO][5299] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" HandleID="k8s-pod-network.933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--mvfcn-eth0" Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.135 [INFO][5299] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:09.144141 env[1824]: 2025-07-12 00:25:09.138 [INFO][5285] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c" Jul 12 00:25:09.145468 env[1824]: time="2025-07-12T00:25:09.145325611Z" level=info msg="TearDown network for sandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" successfully" Jul 12 00:25:09.160495 env[1824]: time="2025-07-12T00:25:09.160400862Z" level=info msg="RemovePodSandbox \"933723e6abdc73435a6606ec4531928cd1095d963c8454a601020597c9bb7b5c\" returns successfully" Jul 12 00:25:09.162375 env[1824]: time="2025-07-12T00:25:09.162306151Z" level=info msg="StopPodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\"" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.317 [WARNING][5319] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"eb7dfc38-dd13-4716-9e74-13453bfe06e3", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5", Pod:"coredns-674b8bbfcf-dvwws", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4f681fae7a6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.318 [INFO][5319] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.318 [INFO][5319] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" iface="eth0" netns="" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.318 [INFO][5319] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.318 [INFO][5319] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.422 [INFO][5330] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.423 [INFO][5330] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.423 [INFO][5330] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.458 [WARNING][5330] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.458 [INFO][5330] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.464 [INFO][5330] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:09.474985 env[1824]: 2025-07-12 00:25:09.470 [INFO][5319] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.474985 env[1824]: time="2025-07-12T00:25:09.472764254Z" level=info msg="TearDown network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" successfully" Jul 12 00:25:09.474985 env[1824]: time="2025-07-12T00:25:09.472809169Z" level=info msg="StopPodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" returns successfully" Jul 12 00:25:09.477058 env[1824]: time="2025-07-12T00:25:09.477005012Z" level=info msg="RemovePodSandbox for \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\"" Jul 12 00:25:09.477399 env[1824]: time="2025-07-12T00:25:09.477265767Z" level=info msg="Forcibly stopping sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\"" Jul 12 00:25:09.569757 sshd[5277]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:09.579000 audit[5277]: USER_END pid=5277 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:09.579000 audit[5277]: CRED_DISP pid=5277 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:09.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.25.27:22-147.75.109.163:34186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:09.583148 systemd[1]: sshd@7-172.31.25.27:22-147.75.109.163:34186.service: Deactivated successfully. Jul 12 00:25:09.584561 systemd[1]: session-8.scope: Deactivated successfully. Jul 12 00:25:09.589149 systemd-logind[1813]: Session 8 logged out. Waiting for processes to exit. Jul 12 00:25:09.590815 systemd-logind[1813]: Removed session 8. Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.716 [WARNING][5346] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"eb7dfc38-dd13-4716-9e74-13453bfe06e3", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"8e60f014ec9edaf459bcf2e60c59e7b54e344c625613b405b95f378cc3e20fb5", Pod:"coredns-674b8bbfcf-dvwws", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4f681fae7a6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.718 [INFO][5346] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.718 [INFO][5346] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" iface="eth0" netns="" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.719 [INFO][5346] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.719 [INFO][5346] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.815 [INFO][5354] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.819 [INFO][5354] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.820 [INFO][5354] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.878 [WARNING][5354] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.878 [INFO][5354] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" HandleID="k8s-pod-network.da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--dvwws-eth0" Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.954 [INFO][5354] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:09.972447 env[1824]: 2025-07-12 00:25:09.961 [INFO][5346] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8" Jul 12 00:25:09.973410 env[1824]: time="2025-07-12T00:25:09.972486382Z" level=info msg="TearDown network for sandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" successfully" Jul 12 00:25:09.983977 env[1824]: time="2025-07-12T00:25:09.982160076Z" level=info msg="RemovePodSandbox \"da90358fc8ec08bb01299592f0e1db27dec05e12d9e5cd4fe900bc9c63f2a1d8\" returns successfully" Jul 12 00:25:09.983977 env[1824]: time="2025-07-12T00:25:09.982852175Z" level=info msg="StopPodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\"" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.219 [WARNING][5369] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.219 [INFO][5369] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.219 [INFO][5369] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" iface="eth0" netns="" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.219 [INFO][5369] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.219 [INFO][5369] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.323 [INFO][5376] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.323 [INFO][5376] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.323 [INFO][5376] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.394 [WARNING][5376] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.394 [INFO][5376] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.397 [INFO][5376] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:10.404444 env[1824]: 2025-07-12 00:25:10.399 [INFO][5369] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.406175 env[1824]: time="2025-07-12T00:25:10.406120723Z" level=info msg="TearDown network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" successfully" Jul 12 00:25:10.406326 env[1824]: time="2025-07-12T00:25:10.406290220Z" level=info msg="StopPodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" returns successfully" Jul 12 00:25:10.407128 env[1824]: time="2025-07-12T00:25:10.407065431Z" level=info msg="RemovePodSandbox for \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\"" Jul 12 00:25:10.407293 env[1824]: time="2025-07-12T00:25:10.407129294Z" level=info msg="Forcibly stopping sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\"" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.534 [WARNING][5390] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" WorkloadEndpoint="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.534 [INFO][5390] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.534 [INFO][5390] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" iface="eth0" netns="" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.534 [INFO][5390] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.534 [INFO][5390] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.610 [INFO][5398] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.610 [INFO][5398] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.611 [INFO][5398] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.633 [WARNING][5398] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.633 [INFO][5398] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" HandleID="k8s-pod-network.673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Workload="ip--172--31--25--27-k8s-whisker--55f694594--bkfkx-eth0" Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.637 [INFO][5398] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:10.648085 env[1824]: 2025-07-12 00:25:10.639 [INFO][5390] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e" Jul 12 00:25:10.649642 env[1824]: time="2025-07-12T00:25:10.649535310Z" level=info msg="TearDown network for sandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" successfully" Jul 12 00:25:10.655135 env[1824]: time="2025-07-12T00:25:10.654991658Z" level=info msg="RemovePodSandbox \"673ea43bcacabb3a06b6080bb99be9c2b9b9d21b809980b47c9dfffff7e8049e\" returns successfully" Jul 12 00:25:10.657059 env[1824]: time="2025-07-12T00:25:10.656996957Z" level=info msg="StopPodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\"" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.795 [WARNING][5412] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7d682096-3a17-4390-b23a-c08da1aa1faf", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f", Pod:"coredns-674b8bbfcf-qwzsc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali69b282ef620", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.796 [INFO][5412] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.796 [INFO][5412] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" iface="eth0" netns="" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.796 [INFO][5412] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.796 [INFO][5412] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.930 [INFO][5419] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.932 [INFO][5419] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.932 [INFO][5419] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.958 [WARNING][5419] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.958 [INFO][5419] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.961 [INFO][5419] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:10.968133 env[1824]: 2025-07-12 00:25:10.965 [INFO][5412] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:10.969282 env[1824]: time="2025-07-12T00:25:10.968185950Z" level=info msg="TearDown network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" successfully" Jul 12 00:25:10.969282 env[1824]: time="2025-07-12T00:25:10.968264645Z" level=info msg="StopPodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" returns successfully" Jul 12 00:25:10.969781 env[1824]: time="2025-07-12T00:25:10.969708053Z" level=info msg="RemovePodSandbox for \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\"" Jul 12 00:25:10.970099 env[1824]: time="2025-07-12T00:25:10.970017132Z" level=info msg="Forcibly stopping sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\"" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.115 [WARNING][5433] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7d682096-3a17-4390-b23a-c08da1aa1faf", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"56307c110464268dfbea88bda40429607c554367fcce9a59b24be4390f946e4f", Pod:"coredns-674b8bbfcf-qwzsc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.15.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali69b282ef620", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.116 [INFO][5433] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.116 [INFO][5433] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" iface="eth0" netns="" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.116 [INFO][5433] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.116 [INFO][5433] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.211 [INFO][5440] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.211 [INFO][5440] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.213 [INFO][5440] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.230 [WARNING][5440] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.230 [INFO][5440] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" HandleID="k8s-pod-network.52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Workload="ip--172--31--25--27-k8s-coredns--674b8bbfcf--qwzsc-eth0" Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.241 [INFO][5440] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:11.247805 env[1824]: 2025-07-12 00:25:11.245 [INFO][5433] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5" Jul 12 00:25:11.248889 env[1824]: time="2025-07-12T00:25:11.247778005Z" level=info msg="TearDown network for sandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" successfully" Jul 12 00:25:11.255652 env[1824]: time="2025-07-12T00:25:11.255565558Z" level=info msg="RemovePodSandbox \"52b8377740a0268ec3251e3b89d5922702b414056a42ca5d088ee63780d136b5\" returns successfully" Jul 12 00:25:11.256524 env[1824]: time="2025-07-12T00:25:11.256477569Z" level=info msg="StopPodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\"" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.410 [WARNING][5458] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"84a02892-671d-49e3-808c-4c6bf0171928", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5", Pod:"goldmane-768f4c5c69-n9njv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.15.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali50852c10656", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.411 [INFO][5458] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.411 [INFO][5458] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" iface="eth0" netns="" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.411 [INFO][5458] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.411 [INFO][5458] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.524 [INFO][5465] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.524 [INFO][5465] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.525 [INFO][5465] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.544 [WARNING][5465] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.545 [INFO][5465] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.547 [INFO][5465] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:11.557217 env[1824]: 2025-07-12 00:25:11.551 [INFO][5458] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.558812 env[1824]: time="2025-07-12T00:25:11.557179947Z" level=info msg="TearDown network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" successfully" Jul 12 00:25:11.558812 env[1824]: time="2025-07-12T00:25:11.557444004Z" level=info msg="StopPodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" returns successfully" Jul 12 00:25:11.559383 env[1824]: time="2025-07-12T00:25:11.559310925Z" level=info msg="RemovePodSandbox for \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\"" Jul 12 00:25:11.559647 env[1824]: time="2025-07-12T00:25:11.559554066Z" level=info msg="Forcibly stopping sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\"" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.723 [WARNING][5480] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"84a02892-671d-49e3-808c-4c6bf0171928", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5", Pod:"goldmane-768f4c5c69-n9njv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.15.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali50852c10656", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.724 [INFO][5480] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.724 [INFO][5480] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" iface="eth0" netns="" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.724 [INFO][5480] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.724 [INFO][5480] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.815 [INFO][5492] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.815 [INFO][5492] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.815 [INFO][5492] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.843 [WARNING][5492] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.843 [INFO][5492] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" HandleID="k8s-pod-network.14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Workload="ip--172--31--25--27-k8s-goldmane--768f4c5c69--n9njv-eth0" Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.848 [INFO][5492] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:11.856676 env[1824]: 2025-07-12 00:25:11.850 [INFO][5480] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed" Jul 12 00:25:11.858076 env[1824]: time="2025-07-12T00:25:11.856630611Z" level=info msg="TearDown network for sandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" successfully" Jul 12 00:25:11.868073 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2864237988.mount: Deactivated successfully. Jul 12 00:25:11.873603 env[1824]: time="2025-07-12T00:25:11.873513171Z" level=info msg="RemovePodSandbox \"14033a704d75c3352b60a8f82502aad03e2d656721d38a277881658c18dc79ed\" returns successfully" Jul 12 00:25:11.876554 env[1824]: time="2025-07-12T00:25:11.876474885Z" level=info msg="StopPodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\"" Jul 12 00:25:11.907367 env[1824]: time="2025-07-12T00:25:11.907303298Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:11.910696 env[1824]: time="2025-07-12T00:25:11.910621251Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:11.922977 env[1824]: time="2025-07-12T00:25:11.918097829Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:11.925346 env[1824]: time="2025-07-12T00:25:11.925264955Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:11.933981 env[1824]: time="2025-07-12T00:25:11.926741486Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 12 00:25:11.940011 env[1824]: time="2025-07-12T00:25:11.939889158Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 12 00:25:11.948799 env[1824]: time="2025-07-12T00:25:11.948742153Z" level=info msg="CreateContainer within sandbox \"bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 12 00:25:11.986457 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1584638369.mount: Deactivated successfully. Jul 12 00:25:12.003282 env[1824]: time="2025-07-12T00:25:12.003186198Z" level=info msg="CreateContainer within sandbox \"bcf33f2076f7af5a3978ee9221513fe72bf27774dd694b56a87226831f180dc8\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"26b253c4207460e7cffe20014d26f590bfcdcb565bd57a228814098b9e976acc\"" Jul 12 00:25:12.004408 env[1824]: time="2025-07-12T00:25:12.004322836Z" level=info msg="StartContainer for \"26b253c4207460e7cffe20014d26f590bfcdcb565bd57a228814098b9e976acc\"" Jul 12 00:25:12.078682 systemd[1]: Started cri-containerd-26b253c4207460e7cffe20014d26f590bfcdcb565bd57a228814098b9e976acc.scope. Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.092 [WARNING][5508] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"0827bab2-3218-4e3b-9514-ca54f12cdbdd", ResourceVersion:"1105", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9", Pod:"calico-apiserver-5b9ffbdcb7-krnx2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2021c8beafa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.093 [INFO][5508] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.093 [INFO][5508] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" iface="eth0" netns="" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.093 [INFO][5508] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.093 [INFO][5508] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.180 [INFO][5531] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.181 [INFO][5531] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.181 [INFO][5531] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.200 [WARNING][5531] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.201 [INFO][5531] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.206 [INFO][5531] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:12.211786 env[1824]: 2025-07-12 00:25:12.208 [INFO][5508] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.212852 env[1824]: time="2025-07-12T00:25:12.212798623Z" level=info msg="TearDown network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" successfully" Jul 12 00:25:12.213031 env[1824]: time="2025-07-12T00:25:12.212982665Z" level=info msg="StopPodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" returns successfully" Jul 12 00:25:12.213883 env[1824]: time="2025-07-12T00:25:12.213818226Z" level=info msg="RemovePodSandbox for \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\"" Jul 12 00:25:12.214097 env[1824]: time="2025-07-12T00:25:12.213881262Z" level=info msg="Forcibly stopping sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\"" Jul 12 00:25:12.300771 kernel: kauditd_printk_skb: 157 callbacks suppressed Jul 12 00:25:12.301004 kernel: audit: type=1400 audit(1752279912.284:1388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.311099 kernel: audit: type=1400 audit(1752279912.296:1389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.318867 kernel: audit: type=1400 audit(1752279912.296:1390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.328257 kernel: audit: type=1400 audit(1752279912.296:1391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.344334 kernel: audit: type=1400 audit(1752279912.296:1392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.357822 kernel: audit: type=1400 audit(1752279912.296:1393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.368182 kernel: audit: type=1400 audit(1752279912.296:1394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.378982 kernel: audit: type=1400 audit(1752279912.296:1395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.389912 kernel: audit: type=1400 audit(1752279912.296:1396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.398065 kernel: audit: type=1400 audit(1752279912.296:1397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.296000 audit: BPF prog-id=215 op=LOAD Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4099 pid=5520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:12.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623235336334323037343630653763666665323030313464323666 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4099 pid=5520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:12.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623235336334323037343630653763666665323030313464323666 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit: BPF prog-id=216 op=LOAD Jul 12 00:25:12.301000 audit[5520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4099 pid=5520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:12.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623235336334323037343630653763666665323030313464323666 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.301000 audit: BPF prog-id=217 op=LOAD Jul 12 00:25:12.301000 audit[5520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4099 pid=5520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:12.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623235336334323037343630653763666665323030313464323666 Jul 12 00:25:12.302000 audit: BPF prog-id=217 op=UNLOAD Jul 12 00:25:12.302000 audit: BPF prog-id=216 op=UNLOAD Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { perfmon } for pid=5520 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit[5520]: AVC avc: denied { bpf } for pid=5520 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:12.302000 audit: BPF prog-id=218 op=LOAD Jul 12 00:25:12.302000 audit[5520]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4099 pid=5520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:12.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236623235336334323037343630653763666665323030313464323666 Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.410 [WARNING][5552] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0", GenerateName:"calico-apiserver-5b9ffbdcb7-", Namespace:"calico-apiserver", SelfLink:"", UID:"0827bab2-3218-4e3b-9514-ca54f12cdbdd", ResourceVersion:"1105", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b9ffbdcb7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-25-27", ContainerID:"f75d3fcd78c670c4cbb8bb33eb3af2019ff31763eb28b80f9e85c3a297ea24d9", Pod:"calico-apiserver-5b9ffbdcb7-krnx2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.15.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2021c8beafa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.411 [INFO][5552] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.411 [INFO][5552] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" iface="eth0" netns="" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.411 [INFO][5552] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.411 [INFO][5552] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.478 [INFO][5560] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.479 [INFO][5560] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.479 [INFO][5560] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.498 [WARNING][5560] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.498 [INFO][5560] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" HandleID="k8s-pod-network.acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Workload="ip--172--31--25--27-k8s-calico--apiserver--5b9ffbdcb7--krnx2-eth0" Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.514 [INFO][5560] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:25:12.531271 env[1824]: 2025-07-12 00:25:12.524 [INFO][5552] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e" Jul 12 00:25:12.531271 env[1824]: time="2025-07-12T00:25:12.530635874Z" level=info msg="TearDown network for sandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" successfully" Jul 12 00:25:12.549332 env[1824]: time="2025-07-12T00:25:12.549201627Z" level=info msg="RemovePodSandbox \"acc3d97b004e92bfc19d178697de40bc9a7a92f6940d7f6e6d7be1deb5ca5c6e\" returns successfully" Jul 12 00:25:12.552321 env[1824]: time="2025-07-12T00:25:12.552209510Z" level=info msg="StartContainer for \"26b253c4207460e7cffe20014d26f590bfcdcb565bd57a228814098b9e976acc\" returns successfully" Jul 12 00:25:12.868425 systemd[1]: run-containerd-runc-k8s.io-26b253c4207460e7cffe20014d26f590bfcdcb565bd57a228814098b9e976acc-runc.4qyv4f.mount: Deactivated successfully. Jul 12 00:25:13.000821 kubelet[2829]: I0712 00:25:13.000712 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-krnx2" podStartSLOduration=39.276167636 podStartE2EDuration="47.000683353s" podCreationTimestamp="2025-07-12 00:24:26 +0000 UTC" firstStartedPulling="2025-07-12 00:25:00.152117733 +0000 UTC m=+53.550321084" lastFinishedPulling="2025-07-12 00:25:07.876633462 +0000 UTC m=+61.274836801" observedRunningTime="2025-07-12 00:25:08.929513549 +0000 UTC m=+62.327716912" watchObservedRunningTime="2025-07-12 00:25:13.000683353 +0000 UTC m=+66.398886728" Jul 12 00:25:13.244000 audit[5580]: NETFILTER_CFG table=filter:119 family=2 entries=13 op=nft_register_rule pid=5580 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:13.244000 audit[5580]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff9a05a10 a2=0 a3=1 items=0 ppid=2981 pid=5580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:13.244000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:13.257000 audit[5580]: NETFILTER_CFG table=nat:120 family=2 entries=27 op=nft_register_chain pid=5580 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:13.257000 audit[5580]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff9a05a10 a2=0 a3=1 items=0 ppid=2981 pid=5580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:13.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:13.867367 env[1824]: time="2025-07-12T00:25:13.867308554Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:13.871868 env[1824]: time="2025-07-12T00:25:13.871770852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:13.878123 env[1824]: time="2025-07-12T00:25:13.878054191Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:13.887326 env[1824]: time="2025-07-12T00:25:13.887245916Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:13.887884 env[1824]: time="2025-07-12T00:25:13.887813307Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 12 00:25:13.892880 env[1824]: time="2025-07-12T00:25:13.892808207Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:25:13.899788 env[1824]: time="2025-07-12T00:25:13.899702220Z" level=info msg="CreateContainer within sandbox \"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 12 00:25:13.938744 env[1824]: time="2025-07-12T00:25:13.938409452Z" level=info msg="CreateContainer within sandbox \"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"add19dbaabe0be6508b3770dbbba419ba626c474d582b25e27bd56a46921e26d\"" Jul 12 00:25:13.940113 env[1824]: time="2025-07-12T00:25:13.940044087Z" level=info msg="StartContainer for \"add19dbaabe0be6508b3770dbbba419ba626c474d582b25e27bd56a46921e26d\"" Jul 12 00:25:14.024243 systemd[1]: Started cri-containerd-add19dbaabe0be6508b3770dbbba419ba626c474d582b25e27bd56a46921e26d.scope. Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4509 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164643139646261616265306265363530386233373730646262626134 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit: BPF prog-id=219 op=LOAD Jul 12 00:25:14.190000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4509 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164643139646261616265306265363530386233373730646262626134 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit: BPF prog-id=220 op=LOAD Jul 12 00:25:14.190000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4509 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164643139646261616265306265363530386233373730646262626134 Jul 12 00:25:14.190000 audit: BPF prog-id=220 op=UNLOAD Jul 12 00:25:14.190000 audit: BPF prog-id=219 op=UNLOAD Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { perfmon } for pid=5593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit[5593]: AVC avc: denied { bpf } for pid=5593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.190000 audit: BPF prog-id=221 op=LOAD Jul 12 00:25:14.190000 audit[5593]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4509 pid=5593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164643139646261616265306265363530386233373730646262626134 Jul 12 00:25:14.230161 env[1824]: time="2025-07-12T00:25:14.230089496Z" level=info msg="StartContainer for \"add19dbaabe0be6508b3770dbbba419ba626c474d582b25e27bd56a46921e26d\" returns successfully" Jul 12 00:25:14.321124 env[1824]: time="2025-07-12T00:25:14.321045689Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:14.325861 env[1824]: time="2025-07-12T00:25:14.325781701Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:14.329524 env[1824]: time="2025-07-12T00:25:14.329454066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:14.334388 env[1824]: time="2025-07-12T00:25:14.334309453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:14.335785 env[1824]: time="2025-07-12T00:25:14.335717005Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:25:14.340306 env[1824]: time="2025-07-12T00:25:14.340228990Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 12 00:25:14.346299 env[1824]: time="2025-07-12T00:25:14.346217576Z" level=info msg="CreateContainer within sandbox \"3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:25:14.372810 env[1824]: time="2025-07-12T00:25:14.372720143Z" level=info msg="CreateContainer within sandbox \"3e380574e9531af05044792a89d7655fa64ce282cdde4e1b7bf8beb6e98df584\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c8adcdeaacea3ac2bd0a764b32973134cf7ce3d8bcb044895420f7e8f3e06ff3\"" Jul 12 00:25:14.373931 env[1824]: time="2025-07-12T00:25:14.373847774Z" level=info msg="StartContainer for \"c8adcdeaacea3ac2bd0a764b32973134cf7ce3d8bcb044895420f7e8f3e06ff3\"" Jul 12 00:25:14.433120 systemd[1]: Started cri-containerd-c8adcdeaacea3ac2bd0a764b32973134cf7ce3d8bcb044895420f7e8f3e06ff3.scope. Jul 12 00:25:14.603508 systemd[1]: Started sshd@8-172.31.25.27:22-147.75.109.163:34188.service. Jul 12 00:25:14.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.27:22-147.75.109.163:34188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:14.795000 audit[5643]: USER_ACCT pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:14.797201 sshd[5643]: Accepted publickey for core from 147.75.109.163 port 34188 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:14.799000 audit[5643]: CRED_ACQ pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:14.799000 audit[5643]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6679940 a2=3 a3=1 items=0 ppid=1 pid=5643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.799000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:14.802888 sshd[5643]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:14.816991 systemd-logind[1813]: New session 9 of user core. Jul 12 00:25:14.819617 systemd[1]: Started session-9.scope. Jul 12 00:25:14.837000 audit[5643]: USER_START pid=5643 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:14.841000 audit[5645]: CRED_ACQ pid=5645 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.911000 audit: BPF prog-id=222 op=LOAD Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4655 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338616463646561616365613361633262643061373634623332393733 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4655 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338616463646561616365613361633262643061373634623332393733 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit: BPF prog-id=223 op=LOAD Jul 12 00:25:14.912000 audit[5626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4655 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338616463646561616365613361633262643061373634623332393733 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.912000 audit: BPF prog-id=224 op=LOAD Jul 12 00:25:14.912000 audit[5626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4655 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338616463646561616365613361633262643061373634623332393733 Jul 12 00:25:14.913000 audit: BPF prog-id=224 op=UNLOAD Jul 12 00:25:14.913000 audit: BPF prog-id=223 op=UNLOAD Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { perfmon } for pid=5626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit[5626]: AVC avc: denied { bpf } for pid=5626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:14.913000 audit: BPF prog-id=225 op=LOAD Jul 12 00:25:14.913000 audit[5626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4655 pid=5626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:14.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338616463646561616365613361633262643061373634623332393733 Jul 12 00:25:15.058979 env[1824]: time="2025-07-12T00:25:15.058874192Z" level=info msg="StartContainer for \"c8adcdeaacea3ac2bd0a764b32973134cf7ce3d8bcb044895420f7e8f3e06ff3\" returns successfully" Jul 12 00:25:15.125000 audit[5226]: AVC avc: denied { watch } for pid=5226 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_24_47.2669211648/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c692 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c465,c692 tclass=file permissive=0 Jul 12 00:25:15.125000 audit[5226]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010a2180 a2=fc6 a3=0 items=0 ppid=4308 pid=5226 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c692 key=(null) Jul 12 00:25:15.125000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:25:15.232142 kubelet[2829]: I0712 00:25:15.232032 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-68b5b7898-vfkmr" podStartSLOduration=4.79458322 podStartE2EDuration="18.232006085s" podCreationTimestamp="2025-07-12 00:24:57 +0000 UTC" firstStartedPulling="2025-07-12 00:24:58.500787205 +0000 UTC m=+51.898990556" lastFinishedPulling="2025-07-12 00:25:11.938210082 +0000 UTC m=+65.336413421" observedRunningTime="2025-07-12 00:25:13.022204662 +0000 UTC m=+66.420408025" watchObservedRunningTime="2025-07-12 00:25:15.232006085 +0000 UTC m=+68.630209460" Jul 12 00:25:15.347645 sshd[5643]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:15.350000 audit[5643]: USER_END pid=5643 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:15.350000 audit[5643]: CRED_DISP pid=5643 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:15.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.27:22-147.75.109.163:34188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:15.354670 systemd-logind[1813]: Session 9 logged out. Waiting for processes to exit. Jul 12 00:25:15.355150 systemd[1]: sshd@8-172.31.25.27:22-147.75.109.163:34188.service: Deactivated successfully. Jul 12 00:25:15.356640 systemd[1]: session-9.scope: Deactivated successfully. Jul 12 00:25:15.360396 systemd-logind[1813]: Removed session 9. Jul 12 00:25:15.375000 audit[5666]: NETFILTER_CFG table=filter:121 family=2 entries=11 op=nft_register_rule pid=5666 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:15.375000 audit[5666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe8ef3f40 a2=0 a3=1 items=0 ppid=2981 pid=5666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:15.375000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:15.382000 audit[5666]: NETFILTER_CFG table=nat:122 family=2 entries=29 op=nft_register_chain pid=5666 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:15.382000 audit[5666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe8ef3f40 a2=0 a3=1 items=0 ppid=2981 pid=5666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:15.382000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:16.134000 audit[5675]: NETFILTER_CFG table=filter:123 family=2 entries=10 op=nft_register_rule pid=5675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:16.134000 audit[5675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd34b12e0 a2=0 a3=1 items=0 ppid=2981 pid=5675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:16.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:16.418000 audit[5675]: NETFILTER_CFG table=nat:124 family=2 entries=32 op=nft_register_rule pid=5675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:16.418000 audit[5675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd34b12e0 a2=0 a3=1 items=0 ppid=2981 pid=5675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:16.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:17.779590 env[1824]: time="2025-07-12T00:25:17.779503480Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:17.785443 env[1824]: time="2025-07-12T00:25:17.785327565Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:17.790645 env[1824]: time="2025-07-12T00:25:17.790573540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:17.795565 env[1824]: time="2025-07-12T00:25:17.795486024Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:17.798379 env[1824]: time="2025-07-12T00:25:17.797003515Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 12 00:25:17.813716 env[1824]: time="2025-07-12T00:25:17.813660697Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 12 00:25:17.854748 env[1824]: time="2025-07-12T00:25:17.854672460Z" level=info msg="CreateContainer within sandbox \"5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 12 00:25:17.908734 env[1824]: time="2025-07-12T00:25:17.908596433Z" level=info msg="CreateContainer within sandbox \"5b8e28145dde744b8711e1ff465294debf7f50e4ceae396cbe947bc3299fe33f\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248\"" Jul 12 00:25:17.911297 env[1824]: time="2025-07-12T00:25:17.911221845Z" level=info msg="StartContainer for \"2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248\"" Jul 12 00:25:17.967093 kubelet[2829]: I0712 00:25:17.965245 2829 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:25:18.035934 systemd[1]: Started cri-containerd-2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248.scope. Jul 12 00:25:18.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.279005 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 12 00:25:18.279198 kernel: audit: type=1400 audit(1752279918.275:1446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.297230 kernel: audit: type=1400 audit(1752279918.286:1447): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.308111 kernel: audit: type=1400 audit(1752279918.286:1448): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.317910 kernel: audit: type=1400 audit(1752279918.286:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.326084 kernel: audit: type=1400 audit(1752279918.286:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.335498 kernel: audit: type=1400 audit(1752279918.286:1451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.344730 kernel: audit: type=1400 audit(1752279918.286:1452): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.355187 kernel: audit: type=1400 audit(1752279918.286:1453): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.363790 kernel: audit: type=1400 audit(1752279918.286:1454): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.373208 kernel: audit: type=1400 audit(1752279918.286:1455): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.286000 audit: BPF prog-id=226 op=LOAD Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4709 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:18.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313666666336646435386334313934323631643662333961316661 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4709 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:18.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313666666336646435386334313934323631643662333961316661 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit: BPF prog-id=227 op=LOAD Jul 12 00:25:18.287000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4709 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:18.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313666666336646435386334313934323631643662333961316661 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit: BPF prog-id=228 op=LOAD Jul 12 00:25:18.287000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4709 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:18.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313666666336646435386334313934323631643662333961316661 Jul 12 00:25:18.287000 audit: BPF prog-id=228 op=UNLOAD Jul 12 00:25:18.287000 audit: BPF prog-id=227 op=UNLOAD Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { perfmon } for pid=5687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit[5687]: AVC avc: denied { bpf } for pid=5687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:18.287000 audit: BPF prog-id=229 op=LOAD Jul 12 00:25:18.287000 audit[5687]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4709 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:18.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239313666666336646435386334313934323631643662333961316661 Jul 12 00:25:18.545965 env[1824]: time="2025-07-12T00:25:18.545878668Z" level=info msg="StartContainer for \"2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248\" returns successfully" Jul 12 00:25:18.813525 amazon-ssm-agent[1821]: 2025-07-12 00:25:18 INFO [HealthCheck] HealthCheck reporting agent health. Jul 12 00:25:19.030578 kubelet[2829]: I0712 00:25:19.028898 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5b9ffbdcb7-mvfcn" podStartSLOduration=42.689453606 podStartE2EDuration="53.028876111s" podCreationTimestamp="2025-07-12 00:24:26 +0000 UTC" firstStartedPulling="2025-07-12 00:25:03.999138968 +0000 UTC m=+57.397342307" lastFinishedPulling="2025-07-12 00:25:14.338561461 +0000 UTC m=+67.736764812" observedRunningTime="2025-07-12 00:25:16.019597567 +0000 UTC m=+69.417800930" watchObservedRunningTime="2025-07-12 00:25:19.028876111 +0000 UTC m=+72.427079474" Jul 12 00:25:19.130110 systemd[1]: run-containerd-runc-k8s.io-2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248-runc.qbcz4y.mount: Deactivated successfully. Jul 12 00:25:20.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.27:22-147.75.109.163:50234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:20.378089 systemd[1]: Started sshd@9-172.31.25.27:22-147.75.109.163:50234.service. Jul 12 00:25:20.602000 audit[5742]: USER_ACCT pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:20.603640 sshd[5742]: Accepted publickey for core from 147.75.109.163 port 50234 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:20.604000 audit[5742]: CRED_ACQ pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:20.605000 audit[5742]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec2fade0 a2=3 a3=1 items=0 ppid=1 pid=5742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:20.605000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:20.608408 sshd[5742]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:20.621041 systemd[1]: Started session-10.scope. Jul 12 00:25:20.623973 systemd-logind[1813]: New session 10 of user core. Jul 12 00:25:20.638000 audit[5742]: USER_START pid=5742 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:20.641000 audit[5744]: CRED_ACQ pid=5744 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:20.818158 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1732890046.mount: Deactivated successfully. Jul 12 00:25:21.128503 sshd[5742]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:21.131000 audit[5742]: USER_END pid=5742 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:21.131000 audit[5742]: CRED_DISP pid=5742 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:21.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.27:22-147.75.109.163:50234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:21.135430 systemd[1]: sshd@9-172.31.25.27:22-147.75.109.163:50234.service: Deactivated successfully. Jul 12 00:25:21.136823 systemd[1]: session-10.scope: Deactivated successfully. Jul 12 00:25:21.146199 systemd-logind[1813]: Session 10 logged out. Waiting for processes to exit. Jul 12 00:25:21.156832 systemd[1]: Started sshd@10-172.31.25.27:22-147.75.109.163:50246.service. Jul 12 00:25:21.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.27:22-147.75.109.163:50246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:21.165535 systemd-logind[1813]: Removed session 10. Jul 12 00:25:21.347000 audit[5756]: USER_ACCT pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:21.349197 sshd[5756]: Accepted publickey for core from 147.75.109.163 port 50246 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:21.356000 audit[5756]: CRED_ACQ pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:21.356000 audit[5756]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7ed9310 a2=3 a3=1 items=0 ppid=1 pid=5756 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:21.356000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:21.358764 sshd[5756]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:21.373319 systemd[1]: Started session-11.scope. Jul 12 00:25:21.375088 systemd-logind[1813]: New session 11 of user core. Jul 12 00:25:21.382249 kubelet[2829]: I0712 00:25:21.381100 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-57cbc47cc8-r8nlb" podStartSLOduration=33.949132625 podStartE2EDuration="47.38107472s" podCreationTimestamp="2025-07-12 00:24:34 +0000 UTC" firstStartedPulling="2025-07-12 00:25:04.367544008 +0000 UTC m=+57.765747371" lastFinishedPulling="2025-07-12 00:25:17.799486127 +0000 UTC m=+71.197689466" observedRunningTime="2025-07-12 00:25:19.030228643 +0000 UTC m=+72.428431994" watchObservedRunningTime="2025-07-12 00:25:21.38107472 +0000 UTC m=+74.779278107" Jul 12 00:25:21.391000 audit[5756]: USER_START pid=5756 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:21.394000 audit[5762]: CRED_ACQ pid=5762 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:21.453544 systemd[1]: run-containerd-runc-k8s.io-2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248-runc.yNNhD0.mount: Deactivated successfully. Jul 12 00:25:22.347437 env[1824]: time="2025-07-12T00:25:22.347343950Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:22.353455 env[1824]: time="2025-07-12T00:25:22.353375057Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:22.358318 env[1824]: time="2025-07-12T00:25:22.358237227Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:22.362890 env[1824]: time="2025-07-12T00:25:22.362802107Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:22.364520 env[1824]: time="2025-07-12T00:25:22.364440162Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 12 00:25:22.368719 env[1824]: time="2025-07-12T00:25:22.368660665Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 12 00:25:22.376138 env[1824]: time="2025-07-12T00:25:22.376077730Z" level=info msg="CreateContainer within sandbox \"3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 12 00:25:22.416401 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3489590459.mount: Deactivated successfully. Jul 12 00:25:22.427033 env[1824]: time="2025-07-12T00:25:22.426869155Z" level=info msg="CreateContainer within sandbox \"3942a612cf7e382a1c4c4928d7a8720dcbc55d104b9b34b0d386d89cdbf933a5\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa\"" Jul 12 00:25:22.428770 env[1824]: time="2025-07-12T00:25:22.428674131Z" level=info msg="StartContainer for \"4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa\"" Jul 12 00:25:22.520920 systemd[1]: run-containerd-runc-k8s.io-4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa-runc.cwyJyD.mount: Deactivated successfully. Jul 12 00:25:22.532365 systemd[1]: Started cri-containerd-4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa.scope. Jul 12 00:25:22.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.628000 audit: BPF prog-id=230 op=LOAD Jul 12 00:25:22.629000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.629000 audit[5799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4964 pid=5799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462393062633338666134653538623561313938643062616565616563 Jul 12 00:25:22.630000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.630000 audit[5799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4964 pid=5799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462393062633338666134653538623561313938643062616565616563 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.631000 audit: BPF prog-id=231 op=LOAD Jul 12 00:25:22.631000 audit[5799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4964 pid=5799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462393062633338666134653538623561313938643062616565616563 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.633000 audit: BPF prog-id=232 op=LOAD Jul 12 00:25:22.633000 audit[5799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4964 pid=5799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462393062633338666134653538623561313938643062616565616563 Jul 12 00:25:22.635000 audit: BPF prog-id=232 op=UNLOAD Jul 12 00:25:22.635000 audit: BPF prog-id=231 op=UNLOAD Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { perfmon } for pid=5799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit[5799]: AVC avc: denied { bpf } for pid=5799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:22.636000 audit: BPF prog-id=233 op=LOAD Jul 12 00:25:22.636000 audit[5799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4964 pid=5799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:22.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462393062633338666134653538623561313938643062616565616563 Jul 12 00:25:22.748592 env[1824]: time="2025-07-12T00:25:22.748508790Z" level=info msg="StartContainer for \"4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa\" returns successfully" Jul 12 00:25:22.901081 sshd[5756]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:22.904000 audit[5756]: USER_END pid=5756 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:22.904000 audit[5756]: CRED_DISP pid=5756 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:22.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.27:22-147.75.109.163:50246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:22.908777 systemd[1]: sshd@10-172.31.25.27:22-147.75.109.163:50246.service: Deactivated successfully. Jul 12 00:25:22.911083 systemd[1]: session-11.scope: Deactivated successfully. Jul 12 00:25:22.914092 systemd-logind[1813]: Session 11 logged out. Waiting for processes to exit. Jul 12 00:25:22.917117 systemd-logind[1813]: Removed session 11. Jul 12 00:25:22.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.27:22-147.75.109.163:50260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:22.932736 systemd[1]: Started sshd@11-172.31.25.27:22-147.75.109.163:50260.service. Jul 12 00:25:23.140000 audit[5826]: USER_ACCT pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.142218 sshd[5826]: Accepted publickey for core from 147.75.109.163 port 50260 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:23.143000 audit[5826]: CRED_ACQ pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.143000 audit[5826]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff023bcb0 a2=3 a3=1 items=0 ppid=1 pid=5826 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.143000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:23.145782 sshd[5826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:23.156894 systemd[1]: Started session-12.scope. Jul 12 00:25:23.159787 systemd-logind[1813]: New session 12 of user core. Jul 12 00:25:23.184000 audit[5826]: USER_START pid=5826 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.187000 audit[5847]: CRED_ACQ pid=5847 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.293180 kernel: kauditd_printk_skb: 134 callbacks suppressed Jul 12 00:25:23.293392 kernel: audit: type=1325 audit(1752279923.281:1506): table=filter:125 family=2 entries=10 op=nft_register_rule pid=5846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:23.281000 audit[5846]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=5846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:23.281000 audit[5846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffcce97070 a2=0 a3=1 items=0 ppid=2981 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.306541 kernel: audit: type=1300 audit(1752279923.281:1506): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffcce97070 a2=0 a3=1 items=0 ppid=2981 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.281000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:23.326044 kernel: audit: type=1327 audit(1752279923.281:1506): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:23.555000 audit[5846]: NETFILTER_CFG table=nat:126 family=2 entries=24 op=nft_register_rule pid=5846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:23.565834 sshd[5826]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:23.579604 kernel: audit: type=1325 audit(1752279923.555:1507): table=nat:126 family=2 entries=24 op=nft_register_rule pid=5846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:23.579770 kernel: audit: type=1300 audit(1752279923.555:1507): arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffcce97070 a2=0 a3=1 items=0 ppid=2981 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.555000 audit[5846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffcce97070 a2=0 a3=1 items=0 ppid=2981 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:23.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:23.588075 kernel: audit: type=1327 audit(1752279923.555:1507): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:23.588904 systemd[1]: sshd@11-172.31.25.27:22-147.75.109.163:50260.service: Deactivated successfully. Jul 12 00:25:23.593944 systemd[1]: session-12.scope: Deactivated successfully. Jul 12 00:25:23.598599 systemd-logind[1813]: Session 12 logged out. Waiting for processes to exit. Jul 12 00:25:23.613088 kernel: audit: type=1106 audit(1752279923.579:1508): pid=5826 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.579000 audit[5826]: USER_END pid=5826 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.614491 systemd-logind[1813]: Removed session 12. Jul 12 00:25:23.641353 kernel: audit: type=1104 audit(1752279923.580:1509): pid=5826 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.580000 audit[5826]: CRED_DISP pid=5826 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:23.661035 kernel: audit: type=1131 audit(1752279923.588:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.27:22-147.75.109.163:50260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:23.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.25.27:22-147.75.109.163:50260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:24.221809 env[1824]: time="2025-07-12T00:25:24.221737133Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:24.228327 env[1824]: time="2025-07-12T00:25:24.228256852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:24.232992 env[1824]: time="2025-07-12T00:25:24.232897201Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:24.241074 env[1824]: time="2025-07-12T00:25:24.240992303Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:25:24.242510 env[1824]: time="2025-07-12T00:25:24.241758485Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 12 00:25:24.254580 env[1824]: time="2025-07-12T00:25:24.254498508Z" level=info msg="CreateContainer within sandbox \"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 12 00:25:24.298125 env[1824]: time="2025-07-12T00:25:24.298039669Z" level=info msg="CreateContainer within sandbox \"9c93ac7832f170003beaefe3f65a2cfb68ac8eb44d107ad24481dc684bb73451\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"7ad0bba1fb9f2ba445b3b598a4f7dbaa7fab7d79a99493a787c3fe09f0b6f5a6\"" Jul 12 00:25:24.299342 env[1824]: time="2025-07-12T00:25:24.299290306Z" level=info msg="StartContainer for \"7ad0bba1fb9f2ba445b3b598a4f7dbaa7fab7d79a99493a787c3fe09f0b6f5a6\"" Jul 12 00:25:24.361359 systemd[1]: Started cri-containerd-7ad0bba1fb9f2ba445b3b598a4f7dbaa7fab7d79a99493a787c3fe09f0b6f5a6.scope. Jul 12 00:25:24.415131 systemd[1]: run-containerd-runc-k8s.io-7ad0bba1fb9f2ba445b3b598a4f7dbaa7fab7d79a99493a787c3fe09f0b6f5a6-runc.zsW4jv.mount: Deactivated successfully. Jul 12 00:25:24.567000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.567000 audit[5869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4509 pid=5869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:24.578994 kernel: audit: type=1400 audit(1752279924.567:1511): avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643062626131666239663262613434356233623539386134663764 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.568000 audit: BPF prog-id=234 op=LOAD Jul 12 00:25:24.568000 audit[5869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4509 pid=5869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:24.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643062626131666239663262613434356233623539386134663764 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit: BPF prog-id=235 op=LOAD Jul 12 00:25:24.575000 audit[5869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4509 pid=5869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:24.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643062626131666239663262613434356233623539386134663764 Jul 12 00:25:24.575000 audit: BPF prog-id=235 op=UNLOAD Jul 12 00:25:24.575000 audit: BPF prog-id=234 op=UNLOAD Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { perfmon } for pid=5869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit[5869]: AVC avc: denied { bpf } for pid=5869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:25:24.575000 audit: BPF prog-id=236 op=LOAD Jul 12 00:25:24.575000 audit[5869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4509 pid=5869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:24.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643062626131666239663262613434356233623539386134663764 Jul 12 00:25:24.631351 env[1824]: time="2025-07-12T00:25:24.631267435Z" level=info msg="StartContainer for \"7ad0bba1fb9f2ba445b3b598a4f7dbaa7fab7d79a99493a787c3fe09f0b6f5a6\" returns successfully" Jul 12 00:25:24.917700 systemd[1]: run-containerd-runc-k8s.io-4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa-runc.gixgWO.mount: Deactivated successfully. Jul 12 00:25:25.036431 kubelet[2829]: I0712 00:25:25.036315 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-n9njv" podStartSLOduration=35.191455165 podStartE2EDuration="51.036290647s" podCreationTimestamp="2025-07-12 00:24:34 +0000 UTC" firstStartedPulling="2025-07-12 00:25:06.522156204 +0000 UTC m=+59.920359555" lastFinishedPulling="2025-07-12 00:25:22.366991686 +0000 UTC m=+75.765195037" observedRunningTime="2025-07-12 00:25:23.034046227 +0000 UTC m=+76.432249602" watchObservedRunningTime="2025-07-12 00:25:25.036290647 +0000 UTC m=+78.434494022" Jul 12 00:25:25.425383 kubelet[2829]: I0712 00:25:25.425304 2829 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 12 00:25:25.425383 kubelet[2829]: I0712 00:25:25.425395 2829 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 12 00:25:28.617114 kernel: kauditd_printk_skb: 42 callbacks suppressed Jul 12 00:25:28.626180 kernel: audit: type=1130 audit(1752279928.602:1517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.27:22-147.75.109.163:54388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:28.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.27:22-147.75.109.163:54388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:28.603212 systemd[1]: Started sshd@12-172.31.25.27:22-147.75.109.163:54388.service. Jul 12 00:25:28.822454 sshd[5965]: Accepted publickey for core from 147.75.109.163 port 54388 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:28.821000 audit[5965]: USER_ACCT pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.836762 sshd[5965]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:28.849931 systemd[1]: Started session-13.scope. Jul 12 00:25:28.864048 kernel: audit: type=1101 audit(1752279928.821:1518): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.864202 kernel: audit: type=1103 audit(1752279928.834:1519): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.834000 audit[5965]: CRED_ACQ pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.853078 systemd-logind[1813]: New session 13 of user core. Jul 12 00:25:28.875883 kernel: audit: type=1006 audit(1752279928.834:1520): pid=5965 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 12 00:25:28.834000 audit[5965]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffaf0480 a2=3 a3=1 items=0 ppid=1 pid=5965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.887250 kernel: audit: type=1300 audit(1752279928.834:1520): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffaf0480 a2=3 a3=1 items=0 ppid=1 pid=5965 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:28.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:28.898442 kernel: audit: type=1327 audit(1752279928.834:1520): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:28.889000 audit[5965]: USER_START pid=5965 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.910023 kernel: audit: type=1105 audit(1752279928.889:1521): pid=5965 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.893000 audit[5967]: CRED_ACQ pid=5967 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:28.924137 kernel: audit: type=1103 audit(1752279928.893:1522): pid=5967 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.255209 sshd[5965]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:29.256000 audit[5965]: USER_END pid=5965 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.261200 systemd-logind[1813]: Session 13 logged out. Waiting for processes to exit. Jul 12 00:25:29.263753 systemd[1]: session-13.scope: Deactivated successfully. Jul 12 00:25:29.264829 systemd[1]: sshd@12-172.31.25.27:22-147.75.109.163:54388.service: Deactivated successfully. Jul 12 00:25:29.270518 systemd-logind[1813]: Removed session 13. Jul 12 00:25:29.256000 audit[5965]: CRED_DISP pid=5965 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.280635 kernel: audit: type=1106 audit(1752279929.256:1523): pid=5965 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.280814 kernel: audit: type=1104 audit(1752279929.256:1524): pid=5965 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:29.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.27:22-147.75.109.163:54388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:29.343000 audit[5637]: AVC avc: denied { watch } for pid=5637 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_24_47.2326239179/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c396,c746 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c396,c746 tclass=file permissive=0 Jul 12 00:25:29.343000 audit[5637]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40029fee40 a2=fc6 a3=0 items=0 ppid=4655 pid=5637 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c396,c746 key=(null) Jul 12 00:25:29.343000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:25:34.086805 systemd[1]: run-containerd-runc-k8s.io-0121e06142eb441d0a43a020a6db2d7842e2cc86c3f4e6126252a6bc3d13018a-runc.rpuvrD.mount: Deactivated successfully. Jul 12 00:25:34.285870 systemd[1]: Started sshd@13-172.31.25.27:22-147.75.109.163:54392.service. Jul 12 00:25:34.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.27:22-147.75.109.163:54392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:34.290606 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 12 00:25:34.290744 kernel: audit: type=1130 audit(1752279934.286:1527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.27:22-147.75.109.163:54392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:34.482806 sshd[6001]: Accepted publickey for core from 147.75.109.163 port 54392 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:34.481000 audit[6001]: USER_ACCT pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.494421 sshd[6001]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:34.492000 audit[6001]: CRED_ACQ pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.505090 kernel: audit: type=1101 audit(1752279934.481:1528): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.505261 kernel: audit: type=1103 audit(1752279934.492:1529): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.523138 kernel: audit: type=1006 audit(1752279934.492:1530): pid=6001 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 12 00:25:34.523254 kernel: audit: type=1300 audit(1752279934.492:1530): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed1e69e0 a2=3 a3=1 items=0 ppid=1 pid=6001 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:34.492000 audit[6001]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed1e69e0 a2=3 a3=1 items=0 ppid=1 pid=6001 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:34.492000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:34.524680 systemd-logind[1813]: New session 14 of user core. Jul 12 00:25:34.527882 systemd[1]: Started session-14.scope. Jul 12 00:25:34.528419 kernel: audit: type=1327 audit(1752279934.492:1530): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:34.542000 audit[6001]: USER_START pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.554000 audit[6003]: CRED_ACQ pid=6003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.565259 kernel: audit: type=1105 audit(1752279934.542:1531): pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.565613 kernel: audit: type=1103 audit(1752279934.554:1532): pid=6003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.851239 sshd[6001]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:34.851000 audit[6001]: USER_END pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.867598 systemd-logind[1813]: Session 14 logged out. Waiting for processes to exit. Jul 12 00:25:34.868885 systemd[1]: session-14.scope: Deactivated successfully. Jul 12 00:25:34.870176 systemd[1]: sshd@13-172.31.25.27:22-147.75.109.163:54392.service: Deactivated successfully. Jul 12 00:25:34.874159 systemd-logind[1813]: Removed session 14. Jul 12 00:25:34.852000 audit[6001]: CRED_DISP pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.884226 kernel: audit: type=1106 audit(1752279934.851:1533): pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.884354 kernel: audit: type=1104 audit(1752279934.852:1534): pid=6001 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:34.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.27:22-147.75.109.163:54392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:39.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.27:22-147.75.109.163:53158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:39.886291 systemd[1]: Started sshd@14-172.31.25.27:22-147.75.109.163:53158.service. Jul 12 00:25:39.888698 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:25:39.888754 kernel: audit: type=1130 audit(1752279939.885:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.27:22-147.75.109.163:53158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:40.060000 audit[6014]: USER_ACCT pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.062018 sshd[6014]: Accepted publickey for core from 147.75.109.163 port 53158 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:40.074126 kernel: audit: type=1101 audit(1752279940.060:1537): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.075763 sshd[6014]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:40.073000 audit[6014]: CRED_ACQ pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.097548 systemd[1]: Started session-15.scope. Jul 12 00:25:40.100090 systemd-logind[1813]: New session 15 of user core. Jul 12 00:25:40.121177 kernel: audit: type=1103 audit(1752279940.073:1538): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.121338 kernel: audit: type=1006 audit(1752279940.073:1539): pid=6014 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 12 00:25:40.121387 kernel: audit: type=1300 audit(1752279940.073:1539): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf3b0680 a2=3 a3=1 items=0 ppid=1 pid=6014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.073000 audit[6014]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf3b0680 a2=3 a3=1 items=0 ppid=1 pid=6014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:40.073000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:40.144131 kernel: audit: type=1327 audit(1752279940.073:1539): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:40.134000 audit[6014]: USER_START pid=6014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.156939 kernel: audit: type=1105 audit(1752279940.134:1540): pid=6014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.137000 audit[6016]: CRED_ACQ pid=6016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.171023 kernel: audit: type=1103 audit(1752279940.137:1541): pid=6016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.454407 sshd[6014]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:40.455000 audit[6014]: USER_END pid=6014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.471017 systemd-logind[1813]: Session 15 logged out. Waiting for processes to exit. Jul 12 00:25:40.472618 systemd[1]: session-15.scope: Deactivated successfully. Jul 12 00:25:40.473860 systemd[1]: sshd@14-172.31.25.27:22-147.75.109.163:53158.service: Deactivated successfully. Jul 12 00:25:40.477277 systemd-logind[1813]: Removed session 15. Jul 12 00:25:40.455000 audit[6014]: CRED_DISP pid=6014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.488939 kernel: audit: type=1106 audit(1752279940.455:1542): pid=6014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.489112 kernel: audit: type=1104 audit(1752279940.455:1543): pid=6014 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:40.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.27:22-147.75.109.163:53158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:45.487152 systemd[1]: Started sshd@15-172.31.25.27:22-147.75.109.163:53172.service. Jul 12 00:25:45.499245 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:25:45.499381 kernel: audit: type=1130 audit(1752279945.487:1545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.27:22-147.75.109.163:53172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:45.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.27:22-147.75.109.163:53172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:45.664000 audit[6034]: USER_ACCT pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.675669 sshd[6034]: Accepted publickey for core from 147.75.109.163 port 53172 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:45.678017 kernel: audit: type=1101 audit(1752279945.664:1546): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.677000 audit[6034]: CRED_ACQ pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.679020 sshd[6034]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:45.695297 kernel: audit: type=1103 audit(1752279945.677:1547): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.695454 kernel: audit: type=1006 audit(1752279945.677:1548): pid=6034 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 12 00:25:45.677000 audit[6034]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd603a2e0 a2=3 a3=1 items=0 ppid=1 pid=6034 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:45.706442 kernel: audit: type=1300 audit(1752279945.677:1548): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd603a2e0 a2=3 a3=1 items=0 ppid=1 pid=6034 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:45.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:45.711228 kernel: audit: type=1327 audit(1752279945.677:1548): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:45.713837 systemd[1]: Started session-16.scope. Jul 12 00:25:45.716831 systemd-logind[1813]: New session 16 of user core. Jul 12 00:25:45.729000 audit[6034]: USER_START pid=6034 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.730000 audit[6036]: CRED_ACQ pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.752994 kernel: audit: type=1105 audit(1752279945.729:1549): pid=6034 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:45.753198 kernel: audit: type=1103 audit(1752279945.730:1550): pid=6036 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.023805 sshd[6034]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:46.025000 audit[6034]: USER_END pid=6034 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.029015 systemd[1]: session-16.scope: Deactivated successfully. Jul 12 00:25:46.030846 systemd[1]: sshd@15-172.31.25.27:22-147.75.109.163:53172.service: Deactivated successfully. Jul 12 00:25:46.025000 audit[6034]: CRED_DISP pid=6034 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.047645 kernel: audit: type=1106 audit(1752279946.025:1551): pid=6034 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.047761 kernel: audit: type=1104 audit(1752279946.025:1552): pid=6034 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.047740 systemd-logind[1813]: Session 16 logged out. Waiting for processes to exit. Jul 12 00:25:46.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.27:22-147.75.109.163:53172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:46.055550 systemd-logind[1813]: Removed session 16. Jul 12 00:25:46.057992 systemd[1]: Started sshd@16-172.31.25.27:22-147.75.109.163:60124.service. Jul 12 00:25:46.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.27:22-147.75.109.163:60124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:46.241289 sshd[6046]: Accepted publickey for core from 147.75.109.163 port 60124 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:46.240000 audit[6046]: USER_ACCT pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.242000 audit[6046]: CRED_ACQ pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.242000 audit[6046]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0c9d370 a2=3 a3=1 items=0 ppid=1 pid=6046 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:46.242000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:46.243927 sshd[6046]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:46.253214 systemd-logind[1813]: New session 17 of user core. Jul 12 00:25:46.254553 systemd[1]: Started session-17.scope. Jul 12 00:25:46.267000 audit[6046]: USER_START pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.271000 audit[6050]: CRED_ACQ pid=6050 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.897180 sshd[6046]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:46.897000 audit[6046]: USER_END pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.898000 audit[6046]: CRED_DISP pid=6046 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:46.901571 systemd[1]: session-17.scope: Deactivated successfully. Jul 12 00:25:46.903440 systemd-logind[1813]: Session 17 logged out. Waiting for processes to exit. Jul 12 00:25:46.904051 systemd[1]: sshd@16-172.31.25.27:22-147.75.109.163:60124.service: Deactivated successfully. Jul 12 00:25:46.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.27:22-147.75.109.163:60124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:46.908248 systemd-logind[1813]: Removed session 17. Jul 12 00:25:46.924539 systemd[1]: Started sshd@17-172.31.25.27:22-147.75.109.163:60132.service. Jul 12 00:25:46.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.27:22-147.75.109.163:60132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:47.111000 audit[6058]: USER_ACCT pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:47.113026 sshd[6058]: Accepted publickey for core from 147.75.109.163 port 60132 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:47.114000 audit[6058]: CRED_ACQ pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:47.114000 audit[6058]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd38b7b40 a2=3 a3=1 items=0 ppid=1 pid=6058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:47.114000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:47.117201 sshd[6058]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:47.128935 systemd[1]: Started session-18.scope. Jul 12 00:25:47.130075 systemd-logind[1813]: New session 18 of user core. Jul 12 00:25:47.142000 audit[6058]: USER_START pid=6058 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:47.146000 audit[6060]: CRED_ACQ pid=6060 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.735417 sshd[6058]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:48.737000 audit[6058]: USER_END pid=6058 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.738000 audit[6058]: CRED_DISP pid=6058 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.27:22-147.75.109.163:60132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:48.743006 systemd[1]: sshd@17-172.31.25.27:22-147.75.109.163:60132.service: Deactivated successfully. Jul 12 00:25:48.744463 systemd[1]: session-18.scope: Deactivated successfully. Jul 12 00:25:48.745067 systemd-logind[1813]: Session 18 logged out. Waiting for processes to exit. Jul 12 00:25:48.749155 systemd-logind[1813]: Removed session 18. Jul 12 00:25:48.767746 systemd[1]: Started sshd@18-172.31.25.27:22-147.75.109.163:60136.service. Jul 12 00:25:48.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.27:22-147.75.109.163:60136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:48.789000 audit[6071]: NETFILTER_CFG table=filter:127 family=2 entries=22 op=nft_register_rule pid=6071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:48.789000 audit[6071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=fffff5f75c10 a2=0 a3=1 items=0 ppid=2981 pid=6071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:48.789000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:48.797000 audit[6071]: NETFILTER_CFG table=nat:128 family=2 entries=24 op=nft_register_rule pid=6071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:48.797000 audit[6071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=fffff5f75c10 a2=0 a3=1 items=0 ppid=2981 pid=6071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:48.797000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:48.910000 audit[6077]: NETFILTER_CFG table=filter:129 family=2 entries=34 op=nft_register_rule pid=6077 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:48.910000 audit[6077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffc4078090 a2=0 a3=1 items=0 ppid=2981 pid=6077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:48.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:48.916000 audit[6077]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=6077 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:48.916000 audit[6077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffc4078090 a2=0 a3=1 items=0 ppid=2981 pid=6077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:48.916000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:48.964453 sshd[6074]: Accepted publickey for core from 147.75.109.163 port 60136 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:48.963000 audit[6074]: USER_ACCT pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.965000 audit[6074]: CRED_ACQ pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.965000 audit[6074]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8d24640 a2=3 a3=1 items=0 ppid=1 pid=6074 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:48.965000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:48.967537 sshd[6074]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:48.976912 systemd-logind[1813]: New session 19 of user core. Jul 12 00:25:48.978403 systemd[1]: Started session-19.scope. Jul 12 00:25:48.989000 audit[6074]: USER_START pid=6074 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:48.994000 audit[6078]: CRED_ACQ pid=6078 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:49.621829 sshd[6074]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:49.622000 audit[6074]: USER_END pid=6074 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:49.622000 audit[6074]: CRED_DISP pid=6074 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:49.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.27:22-147.75.109.163:60136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:49.627021 systemd[1]: sshd@18-172.31.25.27:22-147.75.109.163:60136.service: Deactivated successfully. Jul 12 00:25:49.628523 systemd[1]: session-19.scope: Deactivated successfully. Jul 12 00:25:49.630409 systemd-logind[1813]: Session 19 logged out. Waiting for processes to exit. Jul 12 00:25:49.632377 systemd-logind[1813]: Removed session 19. Jul 12 00:25:49.652517 systemd[1]: Started sshd@19-172.31.25.27:22-147.75.109.163:60148.service. Jul 12 00:25:49.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.27:22-147.75.109.163:60148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:49.830531 sshd[6086]: Accepted publickey for core from 147.75.109.163 port 60148 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:49.829000 audit[6086]: USER_ACCT pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:49.831000 audit[6086]: CRED_ACQ pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:49.831000 audit[6086]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffded1dc0 a2=3 a3=1 items=0 ppid=1 pid=6086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:49.831000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:49.833510 sshd[6086]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:49.844299 systemd-logind[1813]: New session 20 of user core. Jul 12 00:25:49.846491 systemd[1]: Started session-20.scope. Jul 12 00:25:49.861000 audit[6086]: USER_START pid=6086 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:49.864000 audit[6088]: CRED_ACQ pid=6088 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:50.161064 sshd[6086]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:50.162000 audit[6086]: USER_END pid=6086 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:50.162000 audit[6086]: CRED_DISP pid=6086 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:50.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.25.27:22-147.75.109.163:60148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:50.166573 systemd[1]: sshd@19-172.31.25.27:22-147.75.109.163:60148.service: Deactivated successfully. Jul 12 00:25:50.168069 systemd[1]: session-20.scope: Deactivated successfully. Jul 12 00:25:50.171096 systemd-logind[1813]: Session 20 logged out. Waiting for processes to exit. Jul 12 00:25:50.173056 systemd-logind[1813]: Removed session 20. Jul 12 00:25:51.384908 systemd[1]: run-containerd-runc-k8s.io-2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248-runc.7jsZEU.mount: Deactivated successfully. Jul 12 00:25:55.141606 systemd[1]: run-containerd-runc-k8s.io-4b90bc38fa4e58b5a198d0baeeaec5b28b020c4c317a969223ab917666a2aafa-runc.zRbJCO.mount: Deactivated successfully. Jul 12 00:25:55.189838 systemd[1]: Started sshd@20-172.31.25.27:22-147.75.109.163:60160.service. Jul 12 00:25:55.201307 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 12 00:25:55.201497 kernel: audit: type=1130 audit(1752279955.188:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.27:22-147.75.109.163:60160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:55.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.27:22-147.75.109.163:60160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:55.381645 sshd[6131]: Accepted publickey for core from 147.75.109.163 port 60160 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:25:55.380000 audit[6131]: USER_ACCT pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.395696 sshd[6131]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:25:55.393000 audit[6131]: CRED_ACQ pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.411187 kernel: audit: type=1101 audit(1752279955.380:1595): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.411341 kernel: audit: type=1103 audit(1752279955.393:1596): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.418078 kernel: audit: type=1006 audit(1752279955.393:1597): pid=6131 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 12 00:25:55.419750 systemd-logind[1813]: New session 21 of user core. Jul 12 00:25:55.435268 kernel: audit: type=1300 audit(1752279955.393:1597): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5c4b2c0 a2=3 a3=1 items=0 ppid=1 pid=6131 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:55.435346 kernel: audit: type=1327 audit(1752279955.393:1597): proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:55.393000 audit[6131]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5c4b2c0 a2=3 a3=1 items=0 ppid=1 pid=6131 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:55.393000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:25:55.435196 systemd[1]: Started session-21.scope. Jul 12 00:25:55.445000 audit[6131]: USER_START pid=6131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.459000 audit[6138]: CRED_ACQ pid=6138 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.471593 kernel: audit: type=1105 audit(1752279955.445:1598): pid=6131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.471746 kernel: audit: type=1103 audit(1752279955.459:1599): pid=6138 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.595644 kubelet[2829]: I0712 00:25:55.595116 2829 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-wtrsr" podStartSLOduration=59.306476133 podStartE2EDuration="1m21.595092571s" podCreationTimestamp="2025-07-12 00:24:34 +0000 UTC" firstStartedPulling="2025-07-12 00:25:01.955721321 +0000 UTC m=+55.353924684" lastFinishedPulling="2025-07-12 00:25:24.244337771 +0000 UTC m=+77.642541122" observedRunningTime="2025-07-12 00:25:25.037693231 +0000 UTC m=+78.435896618" watchObservedRunningTime="2025-07-12 00:25:55.595092571 +0000 UTC m=+108.993295934" Jul 12 00:25:55.764186 sshd[6131]: pam_unix(sshd:session): session closed for user core Jul 12 00:25:55.766000 audit[6131]: USER_END pid=6131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.782746 systemd-logind[1813]: Session 21 logged out. Waiting for processes to exit. Jul 12 00:25:55.784290 systemd[1]: session-21.scope: Deactivated successfully. Jul 12 00:25:55.785454 systemd[1]: sshd@20-172.31.25.27:22-147.75.109.163:60160.service: Deactivated successfully. Jul 12 00:25:55.778000 audit[6131]: CRED_DISP pid=6131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.790781 systemd-logind[1813]: Removed session 21. Jul 12 00:25:55.802330 kernel: audit: type=1106 audit(1752279955.766:1600): pid=6131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.802612 kernel: audit: type=1104 audit(1752279955.778:1601): pid=6131 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:25:55.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.27:22-147.75.109.163:60160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:25:55.791000 audit[6149]: NETFILTER_CFG table=filter:131 family=2 entries=33 op=nft_register_rule pid=6149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:55.791000 audit[6149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd1f4edf0 a2=0 a3=1 items=0 ppid=2981 pid=6149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:55.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:55.804000 audit[6149]: NETFILTER_CFG table=nat:132 family=2 entries=31 op=nft_register_chain pid=6149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:55.804000 audit[6149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd1f4edf0 a2=0 a3=1 items=0 ppid=2981 pid=6149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:55.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:58.132000 audit[6171]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=6171 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:58.132000 audit[6171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffdd402da0 a2=0 a3=1 items=0 ppid=2981 pid=6171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:58.132000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:25:58.140000 audit[6171]: NETFILTER_CFG table=nat:134 family=2 entries=110 op=nft_register_chain pid=6171 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:25:58.140000 audit[6171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffdd402da0 a2=0 a3=1 items=0 ppid=2981 pid=6171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:25:58.140000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:00.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.27:22-147.75.109.163:35290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:00.795542 systemd[1]: Started sshd@21-172.31.25.27:22-147.75.109.163:35290.service. Jul 12 00:26:00.797989 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 12 00:26:00.798055 kernel: audit: type=1130 audit(1752279960.794:1607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.27:22-147.75.109.163:35290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:00.968000 audit[6174]: USER_ACCT pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:00.969336 sshd[6174]: Accepted publickey for core from 147.75.109.163 port 35290 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:00.972528 sshd[6174]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:00.968000 audit[6174]: CRED_ACQ pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:00.998141 kernel: audit: type=1101 audit(1752279960.968:1608): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:00.998248 kernel: audit: type=1103 audit(1752279960.968:1609): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:00.988347 systemd-logind[1813]: New session 22 of user core. Jul 12 00:26:01.007324 kernel: audit: type=1006 audit(1752279960.968:1610): pid=6174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 12 00:26:01.001806 systemd[1]: Started session-22.scope. Jul 12 00:26:00.968000 audit[6174]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe32864d0 a2=3 a3=1 items=0 ppid=1 pid=6174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:01.019701 kernel: audit: type=1300 audit(1752279960.968:1610): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe32864d0 a2=3 a3=1 items=0 ppid=1 pid=6174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:00.968000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:01.027779 kernel: audit: type=1327 audit(1752279960.968:1610): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:01.021000 audit[6174]: USER_START pid=6174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.041945 kernel: audit: type=1105 audit(1752279961.021:1611): pid=6174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.024000 audit[6176]: CRED_ACQ pid=6176 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.054525 kernel: audit: type=1103 audit(1752279961.024:1612): pid=6176 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.348857 sshd[6174]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:01.351000 audit[6174]: USER_END pid=6174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.355321 systemd-logind[1813]: Session 22 logged out. Waiting for processes to exit. Jul 12 00:26:01.367242 systemd[1]: sshd@21-172.31.25.27:22-147.75.109.163:35290.service: Deactivated successfully. Jul 12 00:26:01.367982 kernel: audit: type=1106 audit(1752279961.351:1613): pid=6174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.368694 systemd[1]: session-22.scope: Deactivated successfully. Jul 12 00:26:01.351000 audit[6174]: CRED_DISP pid=6174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:01.371434 systemd-logind[1813]: Removed session 22. Jul 12 00:26:01.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.27:22-147.75.109.163:35290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:01.379050 kernel: audit: type=1104 audit(1752279961.351:1614): pid=6174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:02.163000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.163000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=400f129280 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:26:02.163000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:26:02.164000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6767 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.164000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=4004e0bb60 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:26:02.164000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:26:02.175000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.175000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=400ab0fb90 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:26:02.175000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:26:02.215000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6771 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.215000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=400509e1e0 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:26:02.215000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:26:02.243000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.243000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=400509e270 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:26:02.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:26:02.244000 audit[2562]: AVC avc: denied { watch } for pid=2562 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.244000 audit[2562]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=79 a1=400a831d80 a2=fc6 a3=0 items=0 ppid=2433 pid=2562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c561,c997 key=(null) Jul 12 00:26:02.244000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3237002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 12 00:26:02.968000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.968000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d9f110 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:02.968000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:02.971000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:02.971000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f9fc00 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:02.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:04.094863 systemd[1]: run-containerd-runc-k8s.io-0121e06142eb441d0a43a020a6db2d7842e2cc86c3f4e6126252a6bc3d13018a-runc.0s9ugr.mount: Deactivated successfully. Jul 12 00:26:06.382875 systemd[1]: Started sshd@22-172.31.25.27:22-147.75.109.163:52528.service. Jul 12 00:26:06.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.27:22-147.75.109.163:52528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:06.385241 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 12 00:26:06.385386 kernel: audit: type=1130 audit(1752279966.382:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.27:22-147.75.109.163:52528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:06.561000 audit[6207]: USER_ACCT pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.564394 sshd[6207]: Accepted publickey for core from 147.75.109.163 port 52528 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:06.574142 sshd[6207]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:06.572000 audit[6207]: CRED_ACQ pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.583936 kernel: audit: type=1101 audit(1752279966.561:1625): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.584075 kernel: audit: type=1103 audit(1752279966.572:1626): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.590170 kernel: audit: type=1006 audit(1752279966.572:1627): pid=6207 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 12 00:26:06.599254 systemd[1]: Started session-23.scope. Jul 12 00:26:06.600093 systemd-logind[1813]: New session 23 of user core. Jul 12 00:26:06.572000 audit[6207]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa7b3ba0 a2=3 a3=1 items=0 ppid=1 pid=6207 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:06.613140 kernel: audit: type=1300 audit(1752279966.572:1627): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa7b3ba0 a2=3 a3=1 items=0 ppid=1 pid=6207 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:06.572000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:06.627038 kernel: audit: type=1327 audit(1752279966.572:1627): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:06.621000 audit[6207]: USER_START pid=6207 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.639085 kernel: audit: type=1105 audit(1752279966.621:1628): pid=6207 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.626000 audit[6209]: CRED_ACQ pid=6209 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.648872 kernel: audit: type=1103 audit(1752279966.626:1629): pid=6209 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.922151 sshd[6207]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:06.922000 audit[6207]: USER_END pid=6207 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.938691 systemd-logind[1813]: Session 23 logged out. Waiting for processes to exit. Jul 12 00:26:06.939929 systemd[1]: session-23.scope: Deactivated successfully. Jul 12 00:26:06.941125 systemd[1]: sshd@22-172.31.25.27:22-147.75.109.163:52528.service: Deactivated successfully. Jul 12 00:26:06.944498 systemd-logind[1813]: Removed session 23. Jul 12 00:26:06.923000 audit[6207]: CRED_DISP pid=6207 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.958221 kernel: audit: type=1106 audit(1752279966.922:1630): pid=6207 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.958340 kernel: audit: type=1104 audit(1752279966.923:1631): pid=6207 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:06.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.27:22-147.75.109.163:52528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:08.334000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:08.334000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40000292e0 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:08.334000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:08.341000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:08.341000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000029340 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:08.341000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:08.342000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:08.342000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000029360 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:08.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:08.347000 audit[2595]: AVC avc: denied { watch } for pid=2595 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:08.347000 audit[2595]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400204fbc0 a2=fc6 a3=0 items=0 ppid=2416 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:08.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:11.960199 systemd[1]: Started sshd@23-172.31.25.27:22-147.75.109.163:52534.service. Jul 12 00:26:11.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.27:22-147.75.109.163:52534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:11.962470 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 12 00:26:11.962590 kernel: audit: type=1130 audit(1752279971.959:1637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.27:22-147.75.109.163:52534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:12.137833 sshd[6222]: Accepted publickey for core from 147.75.109.163 port 52534 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:12.136000 audit[6222]: USER_ACCT pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.151126 sshd[6222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:12.149000 audit[6222]: CRED_ACQ pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.170470 kernel: audit: type=1101 audit(1752279972.136:1638): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.170637 kernel: audit: type=1103 audit(1752279972.149:1639): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.172802 systemd[1]: Started session-24.scope. Jul 12 00:26:12.173287 systemd-logind[1813]: New session 24 of user core. Jul 12 00:26:12.184844 kernel: audit: type=1006 audit(1752279972.149:1640): pid=6222 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 12 00:26:12.149000 audit[6222]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd68c5c90 a2=3 a3=1 items=0 ppid=1 pid=6222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:12.200069 kernel: audit: type=1300 audit(1752279972.149:1640): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd68c5c90 a2=3 a3=1 items=0 ppid=1 pid=6222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:12.149000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:12.208419 kernel: audit: type=1327 audit(1752279972.149:1640): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:12.200000 audit[6222]: USER_START pid=6222 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.221163 kernel: audit: type=1105 audit(1752279972.200:1641): pid=6222 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.203000 audit[6224]: CRED_ACQ pid=6224 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.234102 kernel: audit: type=1103 audit(1752279972.203:1642): pid=6224 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.514000 audit[6222]: USER_END pid=6222 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.514023 sshd[6222]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:12.528183 systemd[1]: sshd@23-172.31.25.27:22-147.75.109.163:52534.service: Deactivated successfully. Jul 12 00:26:12.529567 systemd[1]: session-24.scope: Deactivated successfully. Jul 12 00:26:12.531021 systemd-logind[1813]: Session 24 logged out. Waiting for processes to exit. Jul 12 00:26:12.532724 systemd-logind[1813]: Removed session 24. Jul 12 00:26:12.514000 audit[6222]: CRED_DISP pid=6222 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.544980 kernel: audit: type=1106 audit(1752279972.514:1643): pid=6222 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.545154 kernel: audit: type=1104 audit(1752279972.514:1644): pid=6222 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:12.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.27:22-147.75.109.163:52534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:15.128000 audit[5226]: AVC avc: denied { watch } for pid=5226 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_24_47.2669211648/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c465,c692 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c465,c692 tclass=file permissive=0 Jul 12 00:26:15.128000 audit[5226]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001d8e860 a2=fc6 a3=0 items=0 ppid=4308 pid=5226 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c465,c692 key=(null) Jul 12 00:26:15.128000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:26:17.542275 systemd[1]: Started sshd@24-172.31.25.27:22-147.75.109.163:33798.service. Jul 12 00:26:17.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.27:22-147.75.109.163:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:17.546734 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 12 00:26:17.546834 kernel: audit: type=1130 audit(1752279977.543:1647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.27:22-147.75.109.163:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:17.745402 sshd[6236]: Accepted publickey for core from 147.75.109.163 port 33798 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:17.744000 audit[6236]: USER_ACCT pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.759859 sshd[6236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:17.757000 audit[6236]: CRED_ACQ pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.770084 kernel: audit: type=1101 audit(1752279977.744:1648): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.770235 kernel: audit: type=1103 audit(1752279977.757:1649): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.770294 kernel: audit: type=1006 audit(1752279977.757:1650): pid=6236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 12 00:26:17.757000 audit[6236]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3d3d140 a2=3 a3=1 items=0 ppid=1 pid=6236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:17.786770 kernel: audit: type=1300 audit(1752279977.757:1650): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3d3d140 a2=3 a3=1 items=0 ppid=1 pid=6236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:17.786938 kernel: audit: type=1327 audit(1752279977.757:1650): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:17.757000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:17.796933 systemd-logind[1813]: New session 25 of user core. Jul 12 00:26:17.800108 systemd[1]: Started session-25.scope. Jul 12 00:26:17.811000 audit[6236]: USER_START pid=6236 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.824000 audit[6238]: CRED_ACQ pid=6238 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.836141 kernel: audit: type=1105 audit(1752279977.811:1651): pid=6236 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:17.836302 kernel: audit: type=1103 audit(1752279977.824:1652): pid=6238 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:18.116520 sshd[6236]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:18.117000 audit[6236]: USER_END pid=6236 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:18.132730 systemd[1]: sshd@24-172.31.25.27:22-147.75.109.163:33798.service: Deactivated successfully. Jul 12 00:26:18.134137 systemd[1]: session-25.scope: Deactivated successfully. Jul 12 00:26:18.118000 audit[6236]: CRED_DISP pid=6236 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:18.136021 systemd-logind[1813]: Session 25 logged out. Waiting for processes to exit. Jul 12 00:26:18.145154 kernel: audit: type=1106 audit(1752279978.117:1653): pid=6236 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:18.145324 kernel: audit: type=1104 audit(1752279978.118:1654): pid=6236 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:18.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.27:22-147.75.109.163:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:18.146901 systemd-logind[1813]: Removed session 25. Jul 12 00:26:21.039000 audit[6248]: NETFILTER_CFG table=filter:135 family=2 entries=8 op=nft_register_rule pid=6248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:21.039000 audit[6248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd4e41230 a2=0 a3=1 items=0 ppid=2981 pid=6248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:21.039000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:21.053000 audit[6248]: NETFILTER_CFG table=nat:136 family=2 entries=62 op=nft_register_chain pid=6248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:26:21.053000 audit[6248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffd4e41230 a2=0 a3=1 items=0 ppid=2981 pid=6248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:21.053000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:26:23.148997 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 12 00:26:23.149171 kernel: audit: type=1130 audit(1752279983.143:1658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.27:22-147.75.109.163:33808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:23.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.27:22-147.75.109.163:33808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:23.145626 systemd[1]: Started sshd@25-172.31.25.27:22-147.75.109.163:33808.service. Jul 12 00:26:23.322000 audit[6277]: USER_ACCT pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.325116 sshd[6277]: Accepted publickey for core from 147.75.109.163 port 33808 ssh2: RSA SHA256:hAayEOBHnTpwll2xPQSU8cSp7XCWn/pXChvPbqogNKA Jul 12 00:26:23.334715 sshd[6277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:26:23.331000 audit[6277]: CRED_ACQ pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.346506 kernel: audit: type=1101 audit(1752279983.322:1659): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.346646 kernel: audit: type=1103 audit(1752279983.331:1660): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.353594 kernel: audit: type=1006 audit(1752279983.332:1661): pid=6277 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 12 00:26:23.357220 systemd-logind[1813]: New session 26 of user core. Jul 12 00:26:23.359249 systemd[1]: Started session-26.scope. Jul 12 00:26:23.332000 audit[6277]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea2b8720 a2=3 a3=1 items=0 ppid=1 pid=6277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:23.371979 kernel: audit: type=1300 audit(1752279983.332:1661): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea2b8720 a2=3 a3=1 items=0 ppid=1 pid=6277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:23.332000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:23.376220 kernel: audit: type=1327 audit(1752279983.332:1661): proctitle=737368643A20636F7265205B707269765D Jul 12 00:26:23.381000 audit[6277]: USER_START pid=6277 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.384000 audit[6279]: CRED_ACQ pid=6279 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.408570 kernel: audit: type=1105 audit(1752279983.381:1662): pid=6277 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.408706 kernel: audit: type=1103 audit(1752279983.384:1663): pid=6279 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.711898 sshd[6277]: pam_unix(sshd:session): session closed for user core Jul 12 00:26:23.711000 audit[6277]: USER_END pid=6277 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.725736 systemd[1]: sshd@25-172.31.25.27:22-147.75.109.163:33808.service: Deactivated successfully. Jul 12 00:26:23.727482 systemd[1]: session-26.scope: Deactivated successfully. Jul 12 00:26:23.711000 audit[6277]: CRED_DISP pid=6277 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.742532 kernel: audit: type=1106 audit(1752279983.711:1664): pid=6277 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.742750 kernel: audit: type=1104 audit(1752279983.711:1665): pid=6277 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 12 00:26:23.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.27:22-147.75.109.163:33808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:26:23.743407 systemd-logind[1813]: Session 26 logged out. Waiting for processes to exit. Jul 12 00:26:23.745659 systemd-logind[1813]: Removed session 26. Jul 12 00:26:29.345000 audit[5637]: AVC avc: denied { watch } for pid=5637 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_24_47.2326239179/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c396,c746 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c396,c746 tclass=file permissive=0 Jul 12 00:26:29.349371 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:26:29.349458 kernel: audit: type=1400 audit(1752279989.345:1667): avc: denied { watch } for pid=5637 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_24_47.2326239179/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c396,c746 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c396,c746 tclass=file permissive=0 Jul 12 00:26:29.345000 audit[5637]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40029101a0 a2=fc6 a3=0 items=0 ppid=4655 pid=5637 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c396,c746 key=(null) Jul 12 00:26:29.373020 kernel: audit: type=1300 audit(1752279989.345:1667): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40029101a0 a2=fc6 a3=0 items=0 ppid=4655 pid=5637 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c396,c746 key=(null) Jul 12 00:26:29.345000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:26:29.383616 kernel: audit: type=1327 audit(1752279989.345:1667): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:26:37.622803 systemd[1]: cri-containerd-72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439.scope: Deactivated successfully. Jul 12 00:26:37.623391 systemd[1]: cri-containerd-72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439.scope: Consumed 6.447s CPU time. Jul 12 00:26:37.633000 audit: BPF prog-id=85 op=UNLOAD Jul 12 00:26:37.633000 audit: BPF prog-id=108 op=UNLOAD Jul 12 00:26:37.639877 kernel: audit: type=1334 audit(1752279997.633:1668): prog-id=85 op=UNLOAD Jul 12 00:26:37.640060 kernel: audit: type=1334 audit(1752279997.633:1669): prog-id=108 op=UNLOAD Jul 12 00:26:37.678524 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439-rootfs.mount: Deactivated successfully. Jul 12 00:26:37.680338 env[1824]: time="2025-07-12T00:26:37.680274411Z" level=info msg="shim disconnected" id=72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439 Jul 12 00:26:37.681023 env[1824]: time="2025-07-12T00:26:37.680980054Z" level=warning msg="cleaning up after shim disconnected" id=72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439 namespace=k8s.io Jul 12 00:26:37.681171 env[1824]: time="2025-07-12T00:26:37.681142422Z" level=info msg="cleaning up dead shim" Jul 12 00:26:37.695901 env[1824]: time="2025-07-12T00:26:37.695836074Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:26:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6369 runtime=io.containerd.runc.v2\n" Jul 12 00:26:38.030424 systemd[1]: cri-containerd-6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb.scope: Deactivated successfully. Jul 12 00:26:38.031135 systemd[1]: cri-containerd-6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb.scope: Consumed 27.516s CPU time. Jul 12 00:26:38.030000 audit: BPF prog-id=120 op=UNLOAD Jul 12 00:26:38.035077 kernel: audit: type=1334 audit(1752279998.030:1670): prog-id=120 op=UNLOAD Jul 12 00:26:38.035000 audit: BPF prog-id=123 op=UNLOAD Jul 12 00:26:38.042169 kernel: audit: type=1334 audit(1752279998.035:1671): prog-id=123 op=UNLOAD Jul 12 00:26:38.076003 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb-rootfs.mount: Deactivated successfully. Jul 12 00:26:38.085008 env[1824]: time="2025-07-12T00:26:38.083729152Z" level=info msg="shim disconnected" id=6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb Jul 12 00:26:38.085008 env[1824]: time="2025-07-12T00:26:38.083865743Z" level=warning msg="cleaning up after shim disconnected" id=6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb namespace=k8s.io Jul 12 00:26:38.085008 env[1824]: time="2025-07-12T00:26:38.083888952Z" level=info msg="cleaning up dead shim" Jul 12 00:26:38.103659 env[1824]: time="2025-07-12T00:26:38.103585548Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:26:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6394 runtime=io.containerd.runc.v2\n" Jul 12 00:26:38.243653 kubelet[2829]: I0712 00:26:38.243607 2829 scope.go:117] "RemoveContainer" containerID="6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb" Jul 12 00:26:38.246812 env[1824]: time="2025-07-12T00:26:38.246746183Z" level=info msg="CreateContainer within sandbox \"166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 12 00:26:38.252786 kubelet[2829]: I0712 00:26:38.252725 2829 scope.go:117] "RemoveContainer" containerID="72df105bc00ca7df78f4faaf8d763335a48ca967d4ec88d1d1f2112999d76439" Jul 12 00:26:38.259602 env[1824]: time="2025-07-12T00:26:38.259510834Z" level=info msg="CreateContainer within sandbox \"c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 12 00:26:38.295302 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2360897887.mount: Deactivated successfully. Jul 12 00:26:38.310408 env[1824]: time="2025-07-12T00:26:38.310314837Z" level=info msg="CreateContainer within sandbox \"166f9907a153e31637601bc6af14f968ed9cb6c0e7c0f1615cc77c312e403818\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf\"" Jul 12 00:26:38.311166 env[1824]: time="2025-07-12T00:26:38.311119821Z" level=info msg="StartContainer for \"129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf\"" Jul 12 00:26:38.327102 env[1824]: time="2025-07-12T00:26:38.327014706Z" level=info msg="CreateContainer within sandbox \"c396b190ca3cee2f2f9e53ffd0ffddb9f3e5e6688b6adbd209115a410a264305\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"7aef17f0de2432c38a5392dc582aee6291fb7bd04864cf5f1c73e414f14ae382\"" Jul 12 00:26:38.327816 env[1824]: time="2025-07-12T00:26:38.327754347Z" level=info msg="StartContainer for \"7aef17f0de2432c38a5392dc582aee6291fb7bd04864cf5f1c73e414f14ae382\"" Jul 12 00:26:38.366944 systemd[1]: Started cri-containerd-129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf.scope. Jul 12 00:26:38.406049 systemd[1]: Started cri-containerd-7aef17f0de2432c38a5392dc582aee6291fb7bd04864cf5f1c73e414f14ae382.scope. Jul 12 00:26:38.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466630 kernel: audit: type=1400 audit(1752279998.447:1672): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466799 kernel: audit: type=1400 audit(1752279998.455:1673): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.476795 kernel: audit: type=1400 audit(1752279998.455:1674): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.484677 kernel: audit: type=1400 audit(1752279998.455:1675): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.494604 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:26:38.494769 kernel: audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.455000 audit: BPF prog-id=237 op=LOAD Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2925 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132396465333337383838666131366339343761616161303938663030 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2925 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132396465333337383838666131366339343761616161303938663030 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.456000 audit: BPF prog-id=238 op=LOAD Jul 12 00:26:38.456000 audit[6416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2925 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132396465333337383838666131366339343761616161303938663030 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit: BPF prog-id=239 op=LOAD Jul 12 00:26:38.466000 audit[6416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2925 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132396465333337383838666131366339343761616161303938663030 Jul 12 00:26:38.466000 audit: BPF prog-id=239 op=UNLOAD Jul 12 00:26:38.466000 audit: BPF prog-id=238 op=UNLOAD Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { perfmon } for pid=6416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit[6416]: AVC avc: denied { bpf } for pid=6416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.466000 audit: BPF prog-id=240 op=LOAD Jul 12 00:26:38.466000 audit[6416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2925 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132396465333337383838666131366339343761616161303938663030 Jul 12 00:26:38.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.497000 audit: BPF prog-id=241 op=LOAD Jul 12 00:26:38.508000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.508000 audit[6434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2416 pid=6434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761656631376630646532343332633338613533393264633538326165 Jul 12 00:26:38.509000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.509000 audit[6434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2416 pid=6434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761656631376630646532343332633338613533393264633538326165 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.512000 audit: BPF prog-id=242 op=LOAD Jul 12 00:26:38.512000 audit[6434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2416 pid=6434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761656631376630646532343332633338613533393264633538326165 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.515000 audit: BPF prog-id=243 op=LOAD Jul 12 00:26:38.515000 audit[6434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2416 pid=6434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761656631376630646532343332633338613533393264633538326165 Jul 12 00:26:38.518000 audit: BPF prog-id=243 op=UNLOAD Jul 12 00:26:38.519000 audit: BPF prog-id=242 op=UNLOAD Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { perfmon } for pid=6434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit[6434]: AVC avc: denied { bpf } for pid=6434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:38.519000 audit: BPF prog-id=244 op=LOAD Jul 12 00:26:38.519000 audit[6434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2416 pid=6434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:38.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761656631376630646532343332633338613533393264633538326165 Jul 12 00:26:38.569806 env[1824]: time="2025-07-12T00:26:38.564865550Z" level=info msg="StartContainer for \"129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf\" returns successfully" Jul 12 00:26:38.588478 env[1824]: time="2025-07-12T00:26:38.588416408Z" level=info msg="StartContainer for \"7aef17f0de2432c38a5392dc582aee6291fb7bd04864cf5f1c73e414f14ae382\" returns successfully" Jul 12 00:26:40.679624 kubelet[2829]: E0712 00:26:40.679551 2829 controller.go:195] "Failed to update lease" err="Put \"https://172.31.25.27:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-27?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Jul 12 00:26:42.310000 audit[6454]: AVC avc: denied { watch } for pid=6454 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=205 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:42.310000 audit[6454]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400095e0c0 a2=fc6 a3=0 items=0 ppid=2416 pid=6454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:42.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:42.311000 audit[6454]: AVC avc: denied { watch } for pid=6454 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6765 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:26:42.311000 audit[6454]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003f0ce0 a2=fc6 a3=0 items=0 ppid=2416 pid=6454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c599 key=(null) Jul 12 00:26:42.311000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:26:43.263024 systemd[1]: cri-containerd-96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a.scope: Deactivated successfully. Jul 12 00:26:43.263586 systemd[1]: cri-containerd-96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a.scope: Consumed 4.502s CPU time. Jul 12 00:26:43.267000 audit: BPF prog-id=87 op=UNLOAD Jul 12 00:26:43.270586 kernel: kauditd_printk_skb: 116 callbacks suppressed Jul 12 00:26:43.270722 kernel: audit: type=1334 audit(1752280003.267:1709): prog-id=87 op=UNLOAD Jul 12 00:26:43.267000 audit: BPF prog-id=89 op=UNLOAD Jul 12 00:26:43.276171 kernel: audit: type=1334 audit(1752280003.267:1710): prog-id=89 op=UNLOAD Jul 12 00:26:43.309737 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a-rootfs.mount: Deactivated successfully. Jul 12 00:26:43.312282 env[1824]: time="2025-07-12T00:26:43.312220612Z" level=info msg="shim disconnected" id=96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a Jul 12 00:26:43.313164 env[1824]: time="2025-07-12T00:26:43.313122573Z" level=warning msg="cleaning up after shim disconnected" id=96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a namespace=k8s.io Jul 12 00:26:43.313336 env[1824]: time="2025-07-12T00:26:43.313303937Z" level=info msg="cleaning up dead shim" Jul 12 00:26:43.328163 env[1824]: time="2025-07-12T00:26:43.328105378Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:26:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6505 runtime=io.containerd.runc.v2\n" Jul 12 00:26:44.284116 kubelet[2829]: I0712 00:26:44.284067 2829 scope.go:117] "RemoveContainer" containerID="96a8ec0d65343c3bdeb24bc262803e5fac9f00e4047b0ebd408fcaeb37c1882a" Jul 12 00:26:44.287730 env[1824]: time="2025-07-12T00:26:44.287675441Z" level=info msg="CreateContainer within sandbox \"5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 12 00:26:44.318698 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3468911257.mount: Deactivated successfully. Jul 12 00:26:44.331163 env[1824]: time="2025-07-12T00:26:44.331098805Z" level=info msg="CreateContainer within sandbox \"5b1b0e4193145583b6e8fecc11b7260e8e1a43da654b0130f9854282698e68a5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"c0b53fd09e130eec792c6c78bc0c93d5dec452e1b58803364e99b8af5fc30603\"" Jul 12 00:26:44.332453 env[1824]: time="2025-07-12T00:26:44.332398669Z" level=info msg="StartContainer for \"c0b53fd09e130eec792c6c78bc0c93d5dec452e1b58803364e99b8af5fc30603\"" Jul 12 00:26:44.388784 systemd[1]: run-containerd-runc-k8s.io-c0b53fd09e130eec792c6c78bc0c93d5dec452e1b58803364e99b8af5fc30603-runc.7ufz62.mount: Deactivated successfully. Jul 12 00:26:44.396365 systemd[1]: Started cri-containerd-c0b53fd09e130eec792c6c78bc0c93d5dec452e1b58803364e99b8af5fc30603.scope. Jul 12 00:26:44.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448503 kernel: audit: type=1400 audit(1752280004.430:1711): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448618 kernel: audit: type=1400 audit(1752280004.438:1712): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448674 kernel: audit: type=1400 audit(1752280004.438:1713): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.463695 kernel: audit: type=1400 audit(1752280004.438:1714): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.464368 kernel: audit: type=1400 audit(1752280004.438:1715): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.479252 kernel: audit: type=1400 audit(1752280004.438:1716): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.479685 kernel: audit: type=1400 audit(1752280004.438:1717): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.494975 kernel: audit: type=1400 audit(1752280004.438:1718): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.438000 audit: BPF prog-id=245 op=LOAD Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2470 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:44.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330623533666430396531333065656337393263366337386263306339 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2470 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:44.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330623533666430396531333065656337393263366337386263306339 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.439000 audit: BPF prog-id=246 op=LOAD Jul 12 00:26:44.439000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2470 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:44.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330623533666430396531333065656337393263366337386263306339 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.440000 audit: BPF prog-id=247 op=LOAD Jul 12 00:26:44.440000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2470 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:44.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330623533666430396531333065656337393263366337386263306339 Jul 12 00:26:44.447000 audit: BPF prog-id=247 op=UNLOAD Jul 12 00:26:44.448000 audit: BPF prog-id=246 op=UNLOAD Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { perfmon } for pid=6528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit[6528]: AVC avc: denied { bpf } for pid=6528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:26:44.448000 audit: BPF prog-id=248 op=LOAD Jul 12 00:26:44.448000 audit[6528]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2470 pid=6528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:26:44.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330623533666430396531333065656337393263366337386263306339 Jul 12 00:26:44.528280 env[1824]: time="2025-07-12T00:26:44.528205285Z" level=info msg="StartContainer for \"c0b53fd09e130eec792c6c78bc0c93d5dec452e1b58803364e99b8af5fc30603\" returns successfully" Jul 12 00:26:50.085538 systemd[1]: cri-containerd-129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf.scope: Deactivated successfully. Jul 12 00:26:50.085000 audit: BPF prog-id=237 op=UNLOAD Jul 12 00:26:50.088684 kernel: kauditd_printk_skb: 49 callbacks suppressed Jul 12 00:26:50.088815 kernel: audit: type=1334 audit(1752280010.085:1729): prog-id=237 op=UNLOAD Jul 12 00:26:50.091000 audit: BPF prog-id=240 op=UNLOAD Jul 12 00:26:50.097012 kernel: audit: type=1334 audit(1752280010.091:1730): prog-id=240 op=UNLOAD Jul 12 00:26:50.128284 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf-rootfs.mount: Deactivated successfully. Jul 12 00:26:50.153751 env[1824]: time="2025-07-12T00:26:50.153688493Z" level=info msg="shim disconnected" id=129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf Jul 12 00:26:50.154599 env[1824]: time="2025-07-12T00:26:50.154548525Z" level=warning msg="cleaning up after shim disconnected" id=129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf namespace=k8s.io Jul 12 00:26:50.154736 env[1824]: time="2025-07-12T00:26:50.154707496Z" level=info msg="cleaning up dead shim" Jul 12 00:26:50.169562 env[1824]: time="2025-07-12T00:26:50.169505190Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:26:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6574 runtime=io.containerd.runc.v2\n" Jul 12 00:26:50.306564 kubelet[2829]: I0712 00:26:50.306099 2829 scope.go:117] "RemoveContainer" containerID="6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb" Jul 12 00:26:50.307736 kubelet[2829]: I0712 00:26:50.307420 2829 scope.go:117] "RemoveContainer" containerID="129de337888fa16c947aaaa098f008eef7776df8c92f392b2a84b4bd950c42cf" Jul 12 00:26:50.307736 kubelet[2829]: E0712 00:26:50.307682 2829 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-747864d56d-vgb7j_tigera-operator(256bd4ee-f8a2-4e48-8281-1b14023b19b7)\"" pod="tigera-operator/tigera-operator-747864d56d-vgb7j" podUID="256bd4ee-f8a2-4e48-8281-1b14023b19b7" Jul 12 00:26:50.309922 env[1824]: time="2025-07-12T00:26:50.309835195Z" level=info msg="RemoveContainer for \"6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb\"" Jul 12 00:26:50.320413 env[1824]: time="2025-07-12T00:26:50.320330090Z" level=info msg="RemoveContainer for \"6914cb5c6e4a4f7843f409ad8c2bcf1ad0881e9a6935ce4619847b0a1fea82cb\" returns successfully" Jul 12 00:26:50.680564 kubelet[2829]: E0712 00:26:50.680482 2829 controller.go:195] "Failed to update lease" err="Put \"https://172.31.25.27:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-25-27?timeout=10s\": context deadline exceeded" Jul 12 00:26:51.392551 systemd[1]: run-containerd-runc-k8s.io-2916ffc6dd58c4194261d6b39a1fa337caba567aacd013a031b6d314f8854248-runc.eYZrE2.mount: Deactivated successfully.