Jul 12 00:36:04.739203 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 12 00:36:04.739223 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Jul 11 23:15:18 -00 2025 Jul 12 00:36:04.739231 kernel: efi: EFI v2.70 by EDK II Jul 12 00:36:04.739236 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 12 00:36:04.739241 kernel: random: crng init done Jul 12 00:36:04.739247 kernel: ACPI: Early table checksum verification disabled Jul 12 00:36:04.739253 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 12 00:36:04.739260 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 12 00:36:04.739266 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739271 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739276 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739284 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739290 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739296 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739304 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739310 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739316 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:36:04.739322 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 12 00:36:04.739328 kernel: NUMA: Failed to initialise from firmware Jul 12 00:36:04.739334 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 12 00:36:04.739340 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 12 00:36:04.739346 kernel: Zone ranges: Jul 12 00:36:04.739352 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 12 00:36:04.739359 kernel: DMA32 empty Jul 12 00:36:04.739365 kernel: Normal empty Jul 12 00:36:04.739370 kernel: Movable zone start for each node Jul 12 00:36:04.739376 kernel: Early memory node ranges Jul 12 00:36:04.739382 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 12 00:36:04.739387 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 12 00:36:04.739393 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 12 00:36:04.739399 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 12 00:36:04.739405 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 12 00:36:04.739411 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 12 00:36:04.739417 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 12 00:36:04.739422 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 12 00:36:04.739430 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 12 00:36:04.739443 kernel: psci: probing for conduit method from ACPI. Jul 12 00:36:04.739449 kernel: psci: PSCIv1.1 detected in firmware. Jul 12 00:36:04.739455 kernel: psci: Using standard PSCI v0.2 function IDs Jul 12 00:36:04.739461 kernel: psci: Trusted OS migration not required Jul 12 00:36:04.739470 kernel: psci: SMC Calling Convention v1.1 Jul 12 00:36:04.739476 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 12 00:36:04.739483 kernel: ACPI: SRAT not present Jul 12 00:36:04.739490 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 12 00:36:04.739496 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 12 00:36:04.739502 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 12 00:36:04.739508 kernel: Detected PIPT I-cache on CPU0 Jul 12 00:36:04.739514 kernel: CPU features: detected: GIC system register CPU interface Jul 12 00:36:04.739520 kernel: CPU features: detected: Hardware dirty bit management Jul 12 00:36:04.739526 kernel: CPU features: detected: Spectre-v4 Jul 12 00:36:04.739532 kernel: CPU features: detected: Spectre-BHB Jul 12 00:36:04.739539 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 12 00:36:04.739545 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 12 00:36:04.739551 kernel: CPU features: detected: ARM erratum 1418040 Jul 12 00:36:04.739557 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 12 00:36:04.739563 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 12 00:36:04.739569 kernel: Policy zone: DMA Jul 12 00:36:04.739590 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:36:04.739597 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 12 00:36:04.739603 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 12 00:36:04.739609 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 12 00:36:04.739615 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 12 00:36:04.739624 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 12 00:36:04.739630 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 12 00:36:04.739636 kernel: trace event string verifier disabled Jul 12 00:36:04.739642 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 12 00:36:04.739648 kernel: rcu: RCU event tracing is enabled. Jul 12 00:36:04.739655 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 12 00:36:04.739661 kernel: Trampoline variant of Tasks RCU enabled. Jul 12 00:36:04.739667 kernel: Tracing variant of Tasks RCU enabled. Jul 12 00:36:04.739673 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 12 00:36:04.739679 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 12 00:36:04.739685 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 12 00:36:04.739693 kernel: GICv3: 256 SPIs implemented Jul 12 00:36:04.739699 kernel: GICv3: 0 Extended SPIs implemented Jul 12 00:36:04.739705 kernel: GICv3: Distributor has no Range Selector support Jul 12 00:36:04.739711 kernel: Root IRQ handler: gic_handle_irq Jul 12 00:36:04.739717 kernel: GICv3: 16 PPIs implemented Jul 12 00:36:04.739723 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 12 00:36:04.739729 kernel: ACPI: SRAT not present Jul 12 00:36:04.739735 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 12 00:36:04.739741 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 12 00:36:04.739748 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 12 00:36:04.739754 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 12 00:36:04.739760 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 12 00:36:04.739767 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:36:04.739773 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 12 00:36:04.739780 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 12 00:36:04.739786 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 12 00:36:04.739792 kernel: arm-pv: using stolen time PV Jul 12 00:36:04.739799 kernel: Console: colour dummy device 80x25 Jul 12 00:36:04.739805 kernel: ACPI: Core revision 20210730 Jul 12 00:36:04.739812 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 12 00:36:04.739818 kernel: pid_max: default: 32768 minimum: 301 Jul 12 00:36:04.739824 kernel: LSM: Security Framework initializing Jul 12 00:36:04.739832 kernel: SELinux: Initializing. Jul 12 00:36:04.739838 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:36:04.739844 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:36:04.739851 kernel: rcu: Hierarchical SRCU implementation. Jul 12 00:36:04.739857 kernel: Platform MSI: ITS@0x8080000 domain created Jul 12 00:36:04.739863 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 12 00:36:04.739870 kernel: Remapping and enabling EFI services. Jul 12 00:36:04.739876 kernel: smp: Bringing up secondary CPUs ... Jul 12 00:36:04.739882 kernel: Detected PIPT I-cache on CPU1 Jul 12 00:36:04.739890 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 12 00:36:04.739896 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 12 00:36:04.739903 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:36:04.739909 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 12 00:36:04.739915 kernel: Detected PIPT I-cache on CPU2 Jul 12 00:36:04.739922 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 12 00:36:04.739928 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 12 00:36:04.739935 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:36:04.739941 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 12 00:36:04.739947 kernel: Detected PIPT I-cache on CPU3 Jul 12 00:36:04.739955 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 12 00:36:04.739961 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 12 00:36:04.739967 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:36:04.739974 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 12 00:36:04.739985 kernel: smp: Brought up 1 node, 4 CPUs Jul 12 00:36:04.739993 kernel: SMP: Total of 4 processors activated. Jul 12 00:36:04.740000 kernel: CPU features: detected: 32-bit EL0 Support Jul 12 00:36:04.740006 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 12 00:36:04.740013 kernel: CPU features: detected: Common not Private translations Jul 12 00:36:04.740020 kernel: CPU features: detected: CRC32 instructions Jul 12 00:36:04.740026 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 12 00:36:04.740033 kernel: CPU features: detected: LSE atomic instructions Jul 12 00:36:04.740041 kernel: CPU features: detected: Privileged Access Never Jul 12 00:36:04.740048 kernel: CPU features: detected: RAS Extension Support Jul 12 00:36:04.740054 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 12 00:36:04.740061 kernel: CPU: All CPU(s) started at EL1 Jul 12 00:36:04.740067 kernel: alternatives: patching kernel code Jul 12 00:36:04.740075 kernel: devtmpfs: initialized Jul 12 00:36:04.740082 kernel: KASLR enabled Jul 12 00:36:04.740088 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 12 00:36:04.740095 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 12 00:36:04.740102 kernel: pinctrl core: initialized pinctrl subsystem Jul 12 00:36:04.740108 kernel: SMBIOS 3.0.0 present. Jul 12 00:36:04.740115 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 12 00:36:04.740122 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 12 00:36:04.740128 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 12 00:36:04.740136 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 12 00:36:04.740143 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 12 00:36:04.740150 kernel: audit: initializing netlink subsys (disabled) Jul 12 00:36:04.740157 kernel: audit: type=2000 audit(0.031:1): state=initialized audit_enabled=0 res=1 Jul 12 00:36:04.740163 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 12 00:36:04.740170 kernel: cpuidle: using governor menu Jul 12 00:36:04.740177 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 12 00:36:04.740184 kernel: ASID allocator initialised with 32768 entries Jul 12 00:36:04.740194 kernel: ACPI: bus type PCI registered Jul 12 00:36:04.740203 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 12 00:36:04.740210 kernel: Serial: AMBA PL011 UART driver Jul 12 00:36:04.740217 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 12 00:36:04.740223 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 12 00:36:04.740230 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 12 00:36:04.740237 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 12 00:36:04.740244 kernel: cryptd: max_cpu_qlen set to 1000 Jul 12 00:36:04.740253 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 12 00:36:04.740260 kernel: ACPI: Added _OSI(Module Device) Jul 12 00:36:04.740268 kernel: ACPI: Added _OSI(Processor Device) Jul 12 00:36:04.740275 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 12 00:36:04.740282 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 12 00:36:04.740288 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 12 00:36:04.740295 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 12 00:36:04.740302 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 12 00:36:04.740309 kernel: ACPI: Interpreter enabled Jul 12 00:36:04.740316 kernel: ACPI: Using GIC for interrupt routing Jul 12 00:36:04.740322 kernel: ACPI: MCFG table detected, 1 entries Jul 12 00:36:04.740330 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 12 00:36:04.740337 kernel: printk: console [ttyAMA0] enabled Jul 12 00:36:04.740343 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 12 00:36:04.740493 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 12 00:36:04.740558 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 12 00:36:04.740658 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 12 00:36:04.740730 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 12 00:36:04.740803 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 12 00:36:04.740814 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 12 00:36:04.740821 kernel: PCI host bridge to bus 0000:00 Jul 12 00:36:04.740895 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 12 00:36:04.740950 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 12 00:36:04.741008 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 12 00:36:04.741066 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 12 00:36:04.741146 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 12 00:36:04.741221 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 12 00:36:04.741289 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 12 00:36:04.741359 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 12 00:36:04.741424 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 12 00:36:04.741501 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 12 00:36:04.741568 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 12 00:36:04.741694 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 12 00:36:04.741765 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 12 00:36:04.741824 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 12 00:36:04.741884 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 12 00:36:04.741893 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 12 00:36:04.741900 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 12 00:36:04.741907 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 12 00:36:04.741914 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 12 00:36:04.741923 kernel: iommu: Default domain type: Translated Jul 12 00:36:04.741930 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 12 00:36:04.741936 kernel: vgaarb: loaded Jul 12 00:36:04.741943 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 12 00:36:04.741950 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 12 00:36:04.741957 kernel: PTP clock support registered Jul 12 00:36:04.741964 kernel: Registered efivars operations Jul 12 00:36:04.741970 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 12 00:36:04.741977 kernel: VFS: Disk quotas dquot_6.6.0 Jul 12 00:36:04.741985 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 12 00:36:04.741992 kernel: pnp: PnP ACPI init Jul 12 00:36:04.742057 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 12 00:36:04.742067 kernel: pnp: PnP ACPI: found 1 devices Jul 12 00:36:04.742074 kernel: NET: Registered PF_INET protocol family Jul 12 00:36:04.742081 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 12 00:36:04.742088 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 12 00:36:04.742094 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 12 00:36:04.742104 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 12 00:36:04.742110 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 12 00:36:04.742117 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 12 00:36:04.742124 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:36:04.742131 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:36:04.742137 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 12 00:36:04.742144 kernel: PCI: CLS 0 bytes, default 64 Jul 12 00:36:04.742151 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 12 00:36:04.742157 kernel: kvm [1]: HYP mode not available Jul 12 00:36:04.742165 kernel: Initialise system trusted keyrings Jul 12 00:36:04.742172 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 12 00:36:04.742179 kernel: Key type asymmetric registered Jul 12 00:36:04.742185 kernel: Asymmetric key parser 'x509' registered Jul 12 00:36:04.742192 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 12 00:36:04.742199 kernel: io scheduler mq-deadline registered Jul 12 00:36:04.742205 kernel: io scheduler kyber registered Jul 12 00:36:04.742212 kernel: io scheduler bfq registered Jul 12 00:36:04.742218 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 12 00:36:04.742226 kernel: ACPI: button: Power Button [PWRB] Jul 12 00:36:04.742233 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 12 00:36:04.742292 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 12 00:36:04.742302 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 12 00:36:04.742308 kernel: thunder_xcv, ver 1.0 Jul 12 00:36:04.742315 kernel: thunder_bgx, ver 1.0 Jul 12 00:36:04.742322 kernel: nicpf, ver 1.0 Jul 12 00:36:04.742328 kernel: nicvf, ver 1.0 Jul 12 00:36:04.742400 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 12 00:36:04.742467 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-12T00:36:04 UTC (1752280564) Jul 12 00:36:04.742477 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 12 00:36:04.742484 kernel: NET: Registered PF_INET6 protocol family Jul 12 00:36:04.742491 kernel: Segment Routing with IPv6 Jul 12 00:36:04.742497 kernel: In-situ OAM (IOAM) with IPv6 Jul 12 00:36:04.742504 kernel: NET: Registered PF_PACKET protocol family Jul 12 00:36:04.742511 kernel: Key type dns_resolver registered Jul 12 00:36:04.742517 kernel: registered taskstats version 1 Jul 12 00:36:04.742526 kernel: Loading compiled-in X.509 certificates Jul 12 00:36:04.742533 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: de2ee1d04443f96c763927c453375bbe23b5752a' Jul 12 00:36:04.742539 kernel: Key type .fscrypt registered Jul 12 00:36:04.742546 kernel: Key type fscrypt-provisioning registered Jul 12 00:36:04.742553 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 12 00:36:04.742559 kernel: ima: Allocated hash algorithm: sha1 Jul 12 00:36:04.742566 kernel: ima: No architecture policies found Jul 12 00:36:04.742584 kernel: clk: Disabling unused clocks Jul 12 00:36:04.742592 kernel: Freeing unused kernel memory: 36416K Jul 12 00:36:04.742600 kernel: Run /init as init process Jul 12 00:36:04.742607 kernel: with arguments: Jul 12 00:36:04.742613 kernel: /init Jul 12 00:36:04.742620 kernel: with environment: Jul 12 00:36:04.742626 kernel: HOME=/ Jul 12 00:36:04.742633 kernel: TERM=linux Jul 12 00:36:04.742640 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 12 00:36:04.742649 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:36:04.742659 systemd[1]: Detected virtualization kvm. Jul 12 00:36:04.742666 systemd[1]: Detected architecture arm64. Jul 12 00:36:04.742673 systemd[1]: Running in initrd. Jul 12 00:36:04.742680 systemd[1]: No hostname configured, using default hostname. Jul 12 00:36:04.742687 systemd[1]: Hostname set to . Jul 12 00:36:04.742695 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:36:04.742702 systemd[1]: Queued start job for default target initrd.target. Jul 12 00:36:04.742713 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:36:04.742721 systemd[1]: Reached target cryptsetup.target. Jul 12 00:36:04.742729 systemd[1]: Reached target paths.target. Jul 12 00:36:04.742736 systemd[1]: Reached target slices.target. Jul 12 00:36:04.742743 systemd[1]: Reached target swap.target. Jul 12 00:36:04.742750 systemd[1]: Reached target timers.target. Jul 12 00:36:04.742757 systemd[1]: Listening on iscsid.socket. Jul 12 00:36:04.742764 systemd[1]: Listening on iscsiuio.socket. Jul 12 00:36:04.742773 systemd[1]: Listening on systemd-journald-audit.socket. Jul 12 00:36:04.742780 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 12 00:36:04.742787 systemd[1]: Listening on systemd-journald.socket. Jul 12 00:36:04.742795 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:36:04.742802 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:36:04.742809 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:36:04.742816 systemd[1]: Reached target sockets.target. Jul 12 00:36:04.742824 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:36:04.742831 systemd[1]: Finished network-cleanup.service. Jul 12 00:36:04.742840 systemd[1]: Starting systemd-fsck-usr.service... Jul 12 00:36:04.742847 systemd[1]: Starting systemd-journald.service... Jul 12 00:36:04.742854 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:36:04.742861 systemd[1]: Starting systemd-resolved.service... Jul 12 00:36:04.742869 systemd[1]: Starting systemd-vconsole-setup.service... Jul 12 00:36:04.742876 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:36:04.742883 systemd[1]: Finished systemd-fsck-usr.service. Jul 12 00:36:04.742890 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 12 00:36:04.742897 systemd[1]: Finished systemd-vconsole-setup.service. Jul 12 00:36:04.742906 systemd[1]: Starting dracut-cmdline-ask.service... Jul 12 00:36:04.742913 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 12 00:36:04.742924 systemd-journald[290]: Journal started Jul 12 00:36:04.742964 systemd-journald[290]: Runtime Journal (/run/log/journal/d31faa5186b040f191939e4939e29ad8) is 6.0M, max 48.7M, 42.6M free. Jul 12 00:36:04.723308 systemd-modules-load[291]: Inserted module 'overlay' Jul 12 00:36:04.744924 systemd[1]: Started systemd-journald.service. Jul 12 00:36:04.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.747768 kernel: audit: type=1130 audit(1752280564.744:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.752875 systemd[1]: Finished dracut-cmdline-ask.service. Jul 12 00:36:04.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.754337 systemd[1]: Starting dracut-cmdline.service... Jul 12 00:36:04.757718 kernel: audit: type=1130 audit(1752280564.752:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.760587 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 12 00:36:04.761214 systemd-resolved[292]: Positive Trust Anchors: Jul 12 00:36:04.761230 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:36:04.761258 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:36:04.765790 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 12 00:36:04.767700 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 12 00:36:04.771825 kernel: Bridge firewalling registered Jul 12 00:36:04.771844 kernel: audit: type=1130 audit(1752280564.768:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.767818 systemd[1]: Started systemd-resolved.service. Jul 12 00:36:04.769125 systemd[1]: Reached target nss-lookup.target. Jul 12 00:36:04.776692 dracut-cmdline[310]: dracut-dracut-053 Jul 12 00:36:04.779191 dracut-cmdline[310]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:36:04.782364 kernel: SCSI subsystem initialized Jul 12 00:36:04.787036 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 12 00:36:04.787069 kernel: device-mapper: uevent: version 1.0.3 Jul 12 00:36:04.787079 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 12 00:36:04.789144 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 12 00:36:04.789944 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:36:04.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.792342 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:36:04.795267 kernel: audit: type=1130 audit(1752280564.791:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.800153 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:36:04.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.803601 kernel: audit: type=1130 audit(1752280564.800:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.844598 kernel: Loading iSCSI transport class v2.0-870. Jul 12 00:36:04.856599 kernel: iscsi: registered transport (tcp) Jul 12 00:36:04.871598 kernel: iscsi: registered transport (qla4xxx) Jul 12 00:36:04.871613 kernel: QLogic iSCSI HBA Driver Jul 12 00:36:04.905655 systemd[1]: Finished dracut-cmdline.service. Jul 12 00:36:04.908609 kernel: audit: type=1130 audit(1752280564.905:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:04.907048 systemd[1]: Starting dracut-pre-udev.service... Jul 12 00:36:04.952595 kernel: raid6: neonx8 gen() 13693 MB/s Jul 12 00:36:04.969600 kernel: raid6: neonx8 xor() 10746 MB/s Jul 12 00:36:04.986598 kernel: raid6: neonx4 gen() 13472 MB/s Jul 12 00:36:05.003599 kernel: raid6: neonx4 xor() 11200 MB/s Jul 12 00:36:05.020600 kernel: raid6: neonx2 gen() 12925 MB/s Jul 12 00:36:05.037595 kernel: raid6: neonx2 xor() 10207 MB/s Jul 12 00:36:05.054596 kernel: raid6: neonx1 gen() 10580 MB/s Jul 12 00:36:05.071598 kernel: raid6: neonx1 xor() 8759 MB/s Jul 12 00:36:05.088597 kernel: raid6: int64x8 gen() 5553 MB/s Jul 12 00:36:05.105607 kernel: raid6: int64x8 xor() 3530 MB/s Jul 12 00:36:05.122605 kernel: raid6: int64x4 gen() 7227 MB/s Jul 12 00:36:05.139604 kernel: raid6: int64x4 xor() 3845 MB/s Jul 12 00:36:05.156605 kernel: raid6: int64x2 gen() 6125 MB/s Jul 12 00:36:05.173602 kernel: raid6: int64x2 xor() 3312 MB/s Jul 12 00:36:05.190599 kernel: raid6: int64x1 gen() 5036 MB/s Jul 12 00:36:05.207775 kernel: raid6: int64x1 xor() 2641 MB/s Jul 12 00:36:05.207804 kernel: raid6: using algorithm neonx8 gen() 13693 MB/s Jul 12 00:36:05.207821 kernel: raid6: .... xor() 10746 MB/s, rmw enabled Jul 12 00:36:05.207837 kernel: raid6: using neon recovery algorithm Jul 12 00:36:05.218934 kernel: xor: measuring software checksum speed Jul 12 00:36:05.218964 kernel: 8regs : 17181 MB/sec Jul 12 00:36:05.218981 kernel: 32regs : 20093 MB/sec Jul 12 00:36:05.219839 kernel: arm64_neon : 27841 MB/sec Jul 12 00:36:05.219851 kernel: xor: using function: arm64_neon (27841 MB/sec) Jul 12 00:36:05.273596 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 12 00:36:05.282984 systemd[1]: Finished dracut-pre-udev.service. Jul 12 00:36:05.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:05.285000 audit: BPF prog-id=7 op=LOAD Jul 12 00:36:05.285000 audit: BPF prog-id=8 op=LOAD Jul 12 00:36:05.286854 systemd[1]: Starting systemd-udevd.service... Jul 12 00:36:05.287710 kernel: audit: type=1130 audit(1752280565.282:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:05.287728 kernel: audit: type=1334 audit(1752280565.285:9): prog-id=7 op=LOAD Jul 12 00:36:05.287737 kernel: audit: type=1334 audit(1752280565.285:10): prog-id=8 op=LOAD Jul 12 00:36:05.298661 systemd-udevd[493]: Using default interface naming scheme 'v252'. Jul 12 00:36:05.301913 systemd[1]: Started systemd-udevd.service. Jul 12 00:36:05.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:05.303566 systemd[1]: Starting dracut-pre-trigger.service... Jul 12 00:36:05.313980 dracut-pre-trigger[500]: rd.md=0: removing MD RAID activation Jul 12 00:36:05.339613 systemd[1]: Finished dracut-pre-trigger.service. Jul 12 00:36:05.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:05.340888 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:36:05.373643 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:36:05.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:05.404498 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 12 00:36:05.408136 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 12 00:36:05.408149 kernel: GPT:9289727 != 19775487 Jul 12 00:36:05.408158 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 12 00:36:05.408166 kernel: GPT:9289727 != 19775487 Jul 12 00:36:05.408174 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 12 00:36:05.408182 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 12 00:36:05.419590 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (547) Jul 12 00:36:05.420225 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 12 00:36:05.421249 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 12 00:36:05.427619 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 12 00:36:05.434138 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:36:05.439247 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 12 00:36:05.440949 systemd[1]: Starting disk-uuid.service... Jul 12 00:36:05.446584 disk-uuid[567]: Primary Header is updated. Jul 12 00:36:05.446584 disk-uuid[567]: Secondary Entries is updated. Jul 12 00:36:05.446584 disk-uuid[567]: Secondary Header is updated. Jul 12 00:36:05.450592 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 12 00:36:06.462038 disk-uuid[568]: The operation has completed successfully. Jul 12 00:36:06.463186 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 12 00:36:06.482115 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 12 00:36:06.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.482206 systemd[1]: Finished disk-uuid.service. Jul 12 00:36:06.485698 systemd[1]: Starting verity-setup.service... Jul 12 00:36:06.500601 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 12 00:36:06.521668 systemd[1]: Found device dev-mapper-usr.device. Jul 12 00:36:06.523017 systemd[1]: Mounting sysusr-usr.mount... Jul 12 00:36:06.523686 systemd[1]: Finished verity-setup.service. Jul 12 00:36:06.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.573224 systemd[1]: Mounted sysusr-usr.mount. Jul 12 00:36:06.574237 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 12 00:36:06.573898 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 12 00:36:06.574659 systemd[1]: Starting ignition-setup.service... Jul 12 00:36:06.576328 systemd[1]: Starting parse-ip-for-networkd.service... Jul 12 00:36:06.582813 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:36:06.582847 kernel: BTRFS info (device vda6): using free space tree Jul 12 00:36:06.582857 kernel: BTRFS info (device vda6): has skinny extents Jul 12 00:36:06.590672 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 12 00:36:06.596126 systemd[1]: Finished ignition-setup.service. Jul 12 00:36:06.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.597720 systemd[1]: Starting ignition-fetch-offline.service... Jul 12 00:36:06.661136 systemd[1]: Finished parse-ip-for-networkd.service. Jul 12 00:36:06.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.661000 audit: BPF prog-id=9 op=LOAD Jul 12 00:36:06.662986 systemd[1]: Starting systemd-networkd.service... Jul 12 00:36:06.666630 ignition[650]: Ignition 2.14.0 Jul 12 00:36:06.667310 ignition[650]: Stage: fetch-offline Jul 12 00:36:06.667956 ignition[650]: no configs at "/usr/lib/ignition/base.d" Jul 12 00:36:06.667971 ignition[650]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:36:06.668105 ignition[650]: parsed url from cmdline: "" Jul 12 00:36:06.668108 ignition[650]: no config URL provided Jul 12 00:36:06.668113 ignition[650]: reading system config file "/usr/lib/ignition/user.ign" Jul 12 00:36:06.668120 ignition[650]: no config at "/usr/lib/ignition/user.ign" Jul 12 00:36:06.668138 ignition[650]: op(1): [started] loading QEMU firmware config module Jul 12 00:36:06.668142 ignition[650]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 12 00:36:06.681540 ignition[650]: op(1): [finished] loading QEMU firmware config module Jul 12 00:36:06.694185 systemd-networkd[740]: lo: Link UP Jul 12 00:36:06.694201 systemd-networkd[740]: lo: Gained carrier Jul 12 00:36:06.694613 systemd-networkd[740]: Enumeration completed Jul 12 00:36:06.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.694798 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:36:06.694899 systemd[1]: Started systemd-networkd.service. Jul 12 00:36:06.695749 systemd-networkd[740]: eth0: Link UP Jul 12 00:36:06.695752 systemd-networkd[740]: eth0: Gained carrier Jul 12 00:36:06.696295 systemd[1]: Reached target network.target. Jul 12 00:36:06.699372 systemd[1]: Starting iscsiuio.service... Jul 12 00:36:06.708198 systemd[1]: Started iscsiuio.service. Jul 12 00:36:06.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.709975 systemd[1]: Starting iscsid.service... Jul 12 00:36:06.713248 iscsid[747]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:36:06.713248 iscsid[747]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 12 00:36:06.713248 iscsid[747]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 12 00:36:06.713248 iscsid[747]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 12 00:36:06.713248 iscsid[747]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:36:06.713248 iscsid[747]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 12 00:36:06.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.715936 systemd[1]: Started iscsid.service. Jul 12 00:36:06.720233 systemd[1]: Starting dracut-initqueue.service... Jul 12 00:36:06.722812 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.113/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 12 00:36:06.729901 systemd[1]: Finished dracut-initqueue.service. Jul 12 00:36:06.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.730755 systemd[1]: Reached target remote-fs-pre.target. Jul 12 00:36:06.732033 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:36:06.733295 systemd[1]: Reached target remote-fs.target. Jul 12 00:36:06.735302 systemd[1]: Starting dracut-pre-mount.service... Jul 12 00:36:06.743873 ignition[650]: parsing config with SHA512: 8cbca4a4b825f57313d15f6f173f278993e9ed0cdff081ebd22a06e87d574dd793cb4fac717bb194bcbdbea6250960145c75e16ff4bd84e86d0f2e45961d01c8 Jul 12 00:36:06.745132 systemd[1]: Finished dracut-pre-mount.service. Jul 12 00:36:06.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.759522 unknown[650]: fetched base config from "system" Jul 12 00:36:06.759536 unknown[650]: fetched user config from "qemu" Jul 12 00:36:06.760260 ignition[650]: fetch-offline: fetch-offline passed Jul 12 00:36:06.760317 ignition[650]: Ignition finished successfully Jul 12 00:36:06.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.761101 systemd[1]: Finished ignition-fetch-offline.service. Jul 12 00:36:06.762057 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 12 00:36:06.762800 systemd[1]: Starting ignition-kargs.service... Jul 12 00:36:06.771760 ignition[762]: Ignition 2.14.0 Jul 12 00:36:06.771770 ignition[762]: Stage: kargs Jul 12 00:36:06.771856 ignition[762]: no configs at "/usr/lib/ignition/base.d" Jul 12 00:36:06.771866 ignition[762]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:36:06.772718 ignition[762]: kargs: kargs passed Jul 12 00:36:06.772756 ignition[762]: Ignition finished successfully Jul 12 00:36:06.775789 systemd[1]: Finished ignition-kargs.service. Jul 12 00:36:06.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.777266 systemd[1]: Starting ignition-disks.service... Jul 12 00:36:06.783714 ignition[768]: Ignition 2.14.0 Jul 12 00:36:06.783724 ignition[768]: Stage: disks Jul 12 00:36:06.783805 ignition[768]: no configs at "/usr/lib/ignition/base.d" Jul 12 00:36:06.783815 ignition[768]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:36:06.784616 ignition[768]: disks: disks passed Jul 12 00:36:06.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.786061 systemd[1]: Finished ignition-disks.service. Jul 12 00:36:06.784659 ignition[768]: Ignition finished successfully Jul 12 00:36:06.787382 systemd[1]: Reached target initrd-root-device.target. Jul 12 00:36:06.788248 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:36:06.789189 systemd[1]: Reached target local-fs.target. Jul 12 00:36:06.790135 systemd[1]: Reached target sysinit.target. Jul 12 00:36:06.791113 systemd[1]: Reached target basic.target. Jul 12 00:36:06.793332 systemd[1]: Starting systemd-fsck-root.service... Jul 12 00:36:06.803727 systemd-fsck[776]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 12 00:36:06.807106 systemd[1]: Finished systemd-fsck-root.service. Jul 12 00:36:06.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.808514 systemd[1]: Mounting sysroot.mount... Jul 12 00:36:06.813466 systemd[1]: Mounted sysroot.mount. Jul 12 00:36:06.814676 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 12 00:36:06.814104 systemd[1]: Reached target initrd-root-fs.target. Jul 12 00:36:06.816108 systemd[1]: Mounting sysroot-usr.mount... Jul 12 00:36:06.816830 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 12 00:36:06.816864 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 12 00:36:06.816885 systemd[1]: Reached target ignition-diskful.target. Jul 12 00:36:06.818704 systemd[1]: Mounted sysroot-usr.mount. Jul 12 00:36:06.820029 systemd[1]: Starting initrd-setup-root.service... Jul 12 00:36:06.824224 initrd-setup-root[786]: cut: /sysroot/etc/passwd: No such file or directory Jul 12 00:36:06.828717 initrd-setup-root[794]: cut: /sysroot/etc/group: No such file or directory Jul 12 00:36:06.832349 initrd-setup-root[802]: cut: /sysroot/etc/shadow: No such file or directory Jul 12 00:36:06.835873 initrd-setup-root[810]: cut: /sysroot/etc/gshadow: No such file or directory Jul 12 00:36:06.861503 systemd[1]: Finished initrd-setup-root.service. Jul 12 00:36:06.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.862841 systemd[1]: Starting ignition-mount.service... Jul 12 00:36:06.863958 systemd[1]: Starting sysroot-boot.service... Jul 12 00:36:06.868412 bash[827]: umount: /sysroot/usr/share/oem: not mounted. Jul 12 00:36:06.876768 ignition[829]: INFO : Ignition 2.14.0 Jul 12 00:36:06.876768 ignition[829]: INFO : Stage: mount Jul 12 00:36:06.878009 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 12 00:36:06.878009 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:36:06.878009 ignition[829]: INFO : mount: mount passed Jul 12 00:36:06.878009 ignition[829]: INFO : Ignition finished successfully Jul 12 00:36:06.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.878813 systemd[1]: Finished ignition-mount.service. Jul 12 00:36:06.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:06.881362 systemd[1]: Finished sysroot-boot.service. Jul 12 00:36:07.530877 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 12 00:36:07.536598 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (837) Jul 12 00:36:07.537931 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:36:07.537947 kernel: BTRFS info (device vda6): using free space tree Jul 12 00:36:07.537956 kernel: BTRFS info (device vda6): has skinny extents Jul 12 00:36:07.541144 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 12 00:36:07.542647 systemd[1]: Starting ignition-files.service... Jul 12 00:36:07.556544 ignition[857]: INFO : Ignition 2.14.0 Jul 12 00:36:07.556544 ignition[857]: INFO : Stage: files Jul 12 00:36:07.558119 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 12 00:36:07.558119 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:36:07.558119 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Jul 12 00:36:07.561945 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 12 00:36:07.561945 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 12 00:36:07.565774 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 12 00:36:07.567048 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 12 00:36:07.567048 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 12 00:36:07.567048 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 12 00:36:07.567048 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 12 00:36:07.566492 unknown[857]: wrote ssh authorized keys file for user: core Jul 12 00:36:07.756887 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 12 00:36:07.979605 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 12 00:36:07.979605 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 12 00:36:07.983145 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Jul 12 00:36:08.264762 systemd-networkd[740]: eth0: Gained IPv6LL Jul 12 00:36:08.506465 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 12 00:36:09.560405 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 12 00:36:09.560405 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 12 00:36:09.564335 ignition[857]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 12 00:36:09.595453 ignition[857]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 12 00:36:09.597108 ignition[857]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 12 00:36:09.597108 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:36:09.597108 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:36:09.597108 ignition[857]: INFO : files: files passed Jul 12 00:36:09.597108 ignition[857]: INFO : Ignition finished successfully Jul 12 00:36:09.606928 kernel: kauditd_printk_skb: 21 callbacks suppressed Jul 12 00:36:09.606948 kernel: audit: type=1130 audit(1752280569.598:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.596890 systemd[1]: Finished ignition-files.service. Jul 12 00:36:09.611335 kernel: audit: type=1130 audit(1752280569.606:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.611357 kernel: audit: type=1131 audit(1752280569.606:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.600083 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 12 00:36:09.614591 kernel: audit: type=1130 audit(1752280569.611:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.603531 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 12 00:36:09.616855 initrd-setup-root-after-ignition[880]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 12 00:36:09.604165 systemd[1]: Starting ignition-quench.service... Jul 12 00:36:09.619361 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 12 00:36:09.606783 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 12 00:36:09.606857 systemd[1]: Finished ignition-quench.service. Jul 12 00:36:09.607612 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 12 00:36:09.612049 systemd[1]: Reached target ignition-complete.target. Jul 12 00:36:09.615834 systemd[1]: Starting initrd-parse-etc.service... Jul 12 00:36:09.627383 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 12 00:36:09.627471 systemd[1]: Finished initrd-parse-etc.service. Jul 12 00:36:09.632923 kernel: audit: type=1130 audit(1752280569.628:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.632940 kernel: audit: type=1131 audit(1752280569.628:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.628914 systemd[1]: Reached target initrd-fs.target. Jul 12 00:36:09.633455 systemd[1]: Reached target initrd.target. Jul 12 00:36:09.634564 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 12 00:36:09.635240 systemd[1]: Starting dracut-pre-pivot.service... Jul 12 00:36:09.644912 systemd[1]: Finished dracut-pre-pivot.service. Jul 12 00:36:09.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.646190 systemd[1]: Starting initrd-cleanup.service... Jul 12 00:36:09.648980 kernel: audit: type=1130 audit(1752280569.644:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.653426 systemd[1]: Stopped target nss-lookup.target. Jul 12 00:36:09.654116 systemd[1]: Stopped target remote-cryptsetup.target. Jul 12 00:36:09.655282 systemd[1]: Stopped target timers.target. Jul 12 00:36:09.656422 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 12 00:36:09.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.656517 systemd[1]: Stopped dracut-pre-pivot.service. Jul 12 00:36:09.661015 kernel: audit: type=1131 audit(1752280569.656:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.657601 systemd[1]: Stopped target initrd.target. Jul 12 00:36:09.660452 systemd[1]: Stopped target basic.target. Jul 12 00:36:09.661525 systemd[1]: Stopped target ignition-complete.target. Jul 12 00:36:09.662648 systemd[1]: Stopped target ignition-diskful.target. Jul 12 00:36:09.663756 systemd[1]: Stopped target initrd-root-device.target. Jul 12 00:36:09.664974 systemd[1]: Stopped target remote-fs.target. Jul 12 00:36:09.666156 systemd[1]: Stopped target remote-fs-pre.target. Jul 12 00:36:09.667374 systemd[1]: Stopped target sysinit.target. Jul 12 00:36:09.668455 systemd[1]: Stopped target local-fs.target. Jul 12 00:36:09.669587 systemd[1]: Stopped target local-fs-pre.target. Jul 12 00:36:09.670677 systemd[1]: Stopped target swap.target. Jul 12 00:36:09.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.671681 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 12 00:36:09.676674 kernel: audit: type=1131 audit(1752280569.672:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.671779 systemd[1]: Stopped dracut-pre-mount.service. Jul 12 00:36:09.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.673009 systemd[1]: Stopped target cryptsetup.target. Jul 12 00:36:09.680737 kernel: audit: type=1131 audit(1752280569.676:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.675961 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 12 00:36:09.676053 systemd[1]: Stopped dracut-initqueue.service. Jul 12 00:36:09.677261 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 12 00:36:09.677351 systemd[1]: Stopped ignition-fetch-offline.service. Jul 12 00:36:09.680251 systemd[1]: Stopped target paths.target. Jul 12 00:36:09.681394 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 12 00:36:09.685605 systemd[1]: Stopped systemd-ask-password-console.path. Jul 12 00:36:09.686900 systemd[1]: Stopped target slices.target. Jul 12 00:36:09.688057 systemd[1]: Stopped target sockets.target. Jul 12 00:36:09.689179 systemd[1]: iscsid.socket: Deactivated successfully. Jul 12 00:36:09.689244 systemd[1]: Closed iscsid.socket. Jul 12 00:36:09.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.690332 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 12 00:36:09.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.690438 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 12 00:36:09.691610 systemd[1]: ignition-files.service: Deactivated successfully. Jul 12 00:36:09.691697 systemd[1]: Stopped ignition-files.service. Jul 12 00:36:09.693297 systemd[1]: Stopping ignition-mount.service... Jul 12 00:36:09.694657 systemd[1]: Stopping iscsiuio.service... Jul 12 00:36:09.698827 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 12 00:36:09.699637 systemd[1]: Stopped kmod-static-nodes.service. Jul 12 00:36:09.700183 ignition[897]: INFO : Ignition 2.14.0 Jul 12 00:36:09.700183 ignition[897]: INFO : Stage: umount Jul 12 00:36:09.700183 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 12 00:36:09.700183 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:36:09.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.702180 systemd[1]: Stopping sysroot-boot.service... Jul 12 00:36:09.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.704630 ignition[897]: INFO : umount: umount passed Jul 12 00:36:09.704630 ignition[897]: INFO : Ignition finished successfully Jul 12 00:36:09.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.702920 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 12 00:36:09.703025 systemd[1]: Stopped systemd-udev-trigger.service. Jul 12 00:36:09.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.704245 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 12 00:36:09.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.704347 systemd[1]: Stopped dracut-pre-trigger.service. Jul 12 00:36:09.706679 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 12 00:36:09.706764 systemd[1]: Stopped iscsiuio.service. Jul 12 00:36:09.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.707950 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 12 00:36:09.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.708019 systemd[1]: Stopped ignition-mount.service. Jul 12 00:36:09.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.709308 systemd[1]: Stopped target network.target. Jul 12 00:36:09.710194 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 12 00:36:09.710222 systemd[1]: Closed iscsiuio.socket. Jul 12 00:36:09.712168 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 12 00:36:09.712207 systemd[1]: Stopped ignition-disks.service. Jul 12 00:36:09.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.713377 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 12 00:36:09.713424 systemd[1]: Stopped ignition-kargs.service. Jul 12 00:36:09.714457 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 12 00:36:09.714501 systemd[1]: Stopped ignition-setup.service. Jul 12 00:36:09.715923 systemd[1]: Stopping systemd-networkd.service... Jul 12 00:36:09.716838 systemd[1]: Stopping systemd-resolved.service... Jul 12 00:36:09.718558 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 12 00:36:09.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.719019 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 12 00:36:09.719102 systemd[1]: Finished initrd-cleanup.service. Jul 12 00:36:09.722663 systemd-networkd[740]: eth0: DHCPv6 lease lost Jul 12 00:36:09.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.725309 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 12 00:36:09.734000 audit: BPF prog-id=9 op=UNLOAD Jul 12 00:36:09.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.725400 systemd[1]: Stopped systemd-networkd.service. Jul 12 00:36:09.728858 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 12 00:36:09.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.728888 systemd[1]: Closed systemd-networkd.socket. Jul 12 00:36:09.730453 systemd[1]: Stopping network-cleanup.service... Jul 12 00:36:09.732188 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 12 00:36:09.732251 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 12 00:36:09.733251 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 12 00:36:09.733289 systemd[1]: Stopped systemd-sysctl.service. Jul 12 00:36:09.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.735885 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 12 00:36:09.735930 systemd[1]: Stopped systemd-modules-load.service. Jul 12 00:36:09.737638 systemd[1]: Stopping systemd-udevd.service... Jul 12 00:36:09.742307 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 12 00:36:09.742775 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 12 00:36:09.747000 audit: BPF prog-id=6 op=UNLOAD Jul 12 00:36:09.742864 systemd[1]: Stopped systemd-resolved.service. Jul 12 00:36:09.748202 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 12 00:36:09.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.748744 systemd[1]: Stopped network-cleanup.service. Jul 12 00:36:09.750193 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 12 00:36:09.751326 systemd[1]: Stopped systemd-udevd.service. Jul 12 00:36:09.752164 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 12 00:36:09.752198 systemd[1]: Closed systemd-udevd-control.socket. Jul 12 00:36:09.752941 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 12 00:36:09.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.752971 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 12 00:36:09.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.754154 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 12 00:36:09.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.754196 systemd[1]: Stopped dracut-pre-udev.service. Jul 12 00:36:09.755145 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 12 00:36:09.755179 systemd[1]: Stopped dracut-cmdline.service. Jul 12 00:36:09.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.756242 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 12 00:36:09.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.756275 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 12 00:36:09.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.757863 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 12 00:36:09.758833 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 12 00:36:09.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.758880 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 12 00:36:09.760286 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 12 00:36:09.760370 systemd[1]: Stopped sysroot-boot.service. Jul 12 00:36:09.761148 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 12 00:36:09.761184 systemd[1]: Stopped initrd-setup-root.service. Jul 12 00:36:09.762659 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 12 00:36:09.762731 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 12 00:36:09.763936 systemd[1]: Reached target initrd-switch-root.target. Jul 12 00:36:09.765632 systemd[1]: Starting initrd-switch-root.service... Jul 12 00:36:09.771415 systemd[1]: Switching root. Jul 12 00:36:09.787877 iscsid[747]: iscsid shutting down. Jul 12 00:36:09.788363 systemd-journald[290]: Journal stopped Jul 12 00:36:11.760751 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Jul 12 00:36:11.760810 kernel: SELinux: Class mctp_socket not defined in policy. Jul 12 00:36:11.760825 kernel: SELinux: Class anon_inode not defined in policy. Jul 12 00:36:11.760835 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 12 00:36:11.760845 kernel: SELinux: policy capability network_peer_controls=1 Jul 12 00:36:11.760859 kernel: SELinux: policy capability open_perms=1 Jul 12 00:36:11.760870 kernel: SELinux: policy capability extended_socket_class=1 Jul 12 00:36:11.760879 kernel: SELinux: policy capability always_check_network=0 Jul 12 00:36:11.760889 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 12 00:36:11.760903 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 12 00:36:11.760913 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 12 00:36:11.760924 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 12 00:36:11.760935 systemd[1]: Successfully loaded SELinux policy in 31.071ms. Jul 12 00:36:11.760953 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 8.704ms. Jul 12 00:36:11.760965 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:36:11.760976 systemd[1]: Detected virtualization kvm. Jul 12 00:36:11.760987 systemd[1]: Detected architecture arm64. Jul 12 00:36:11.760998 systemd[1]: Detected first boot. Jul 12 00:36:11.761010 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:36:11.761021 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 12 00:36:11.761031 systemd[1]: Populated /etc with preset unit settings. Jul 12 00:36:11.761042 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:36:11.761054 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:36:11.761066 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:36:11.761077 systemd[1]: iscsid.service: Deactivated successfully. Jul 12 00:36:11.761088 systemd[1]: Stopped iscsid.service. Jul 12 00:36:11.761099 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 12 00:36:11.761110 systemd[1]: Stopped initrd-switch-root.service. Jul 12 00:36:11.761122 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 12 00:36:11.761136 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 12 00:36:11.761149 systemd[1]: Created slice system-addon\x2drun.slice. Jul 12 00:36:11.761160 systemd[1]: Created slice system-getty.slice. Jul 12 00:36:11.761170 systemd[1]: Created slice system-modprobe.slice. Jul 12 00:36:11.761185 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 12 00:36:11.761196 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 12 00:36:11.761206 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 12 00:36:11.761216 systemd[1]: Created slice user.slice. Jul 12 00:36:11.761227 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:36:11.761238 systemd[1]: Started systemd-ask-password-wall.path. Jul 12 00:36:11.761249 systemd[1]: Set up automount boot.automount. Jul 12 00:36:11.761260 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 12 00:36:11.761270 systemd[1]: Stopped target initrd-switch-root.target. Jul 12 00:36:11.761281 systemd[1]: Stopped target initrd-fs.target. Jul 12 00:36:11.761291 systemd[1]: Stopped target initrd-root-fs.target. Jul 12 00:36:11.761301 systemd[1]: Reached target integritysetup.target. Jul 12 00:36:11.761312 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:36:11.761322 systemd[1]: Reached target remote-fs.target. Jul 12 00:36:11.761334 systemd[1]: Reached target slices.target. Jul 12 00:36:11.761344 systemd[1]: Reached target swap.target. Jul 12 00:36:11.761355 systemd[1]: Reached target torcx.target. Jul 12 00:36:11.761366 systemd[1]: Reached target veritysetup.target. Jul 12 00:36:11.761376 systemd[1]: Listening on systemd-coredump.socket. Jul 12 00:36:11.761387 systemd[1]: Listening on systemd-initctl.socket. Jul 12 00:36:11.761398 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:36:11.761416 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:36:11.761427 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:36:11.761438 systemd[1]: Listening on systemd-userdbd.socket. Jul 12 00:36:11.761450 systemd[1]: Mounting dev-hugepages.mount... Jul 12 00:36:11.761460 systemd[1]: Mounting dev-mqueue.mount... Jul 12 00:36:11.761471 systemd[1]: Mounting media.mount... Jul 12 00:36:11.761481 systemd[1]: Mounting sys-kernel-debug.mount... Jul 12 00:36:11.761491 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 12 00:36:11.761501 systemd[1]: Mounting tmp.mount... Jul 12 00:36:11.761512 systemd[1]: Starting flatcar-tmpfiles.service... Jul 12 00:36:11.761523 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:36:11.761533 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:36:11.761545 systemd[1]: Starting modprobe@configfs.service... Jul 12 00:36:11.761556 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:36:11.761566 systemd[1]: Starting modprobe@drm.service... Jul 12 00:36:11.761583 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:36:11.761595 systemd[1]: Starting modprobe@fuse.service... Jul 12 00:36:11.761606 systemd[1]: Starting modprobe@loop.service... Jul 12 00:36:11.761617 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 12 00:36:11.761628 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 12 00:36:11.761638 systemd[1]: Stopped systemd-fsck-root.service. Jul 12 00:36:11.761650 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 12 00:36:11.761660 systemd[1]: Stopped systemd-fsck-usr.service. Jul 12 00:36:11.761674 systemd[1]: Stopped systemd-journald.service. Jul 12 00:36:11.761684 systemd[1]: Starting systemd-journald.service... Jul 12 00:36:11.761695 kernel: fuse: init (API version 7.34) Jul 12 00:36:11.761706 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:36:11.761718 systemd[1]: Starting systemd-network-generator.service... Jul 12 00:36:11.761728 systemd[1]: Starting systemd-remount-fs.service... Jul 12 00:36:11.761739 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:36:11.761749 systemd[1]: verity-setup.service: Deactivated successfully. Jul 12 00:36:11.761759 systemd[1]: Stopped verity-setup.service. Jul 12 00:36:11.761771 kernel: loop: module loaded Jul 12 00:36:11.761780 systemd[1]: Mounted dev-hugepages.mount. Jul 12 00:36:11.761790 systemd[1]: Mounted dev-mqueue.mount. Jul 12 00:36:11.761801 systemd[1]: Mounted media.mount. Jul 12 00:36:11.761811 systemd[1]: Mounted sys-kernel-debug.mount. Jul 12 00:36:11.761822 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 12 00:36:11.761833 systemd[1]: Mounted tmp.mount. Jul 12 00:36:11.761843 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:36:11.761854 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 12 00:36:11.761866 systemd[1]: Finished modprobe@configfs.service. Jul 12 00:36:11.761876 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:36:11.761887 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:36:11.761897 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:36:11.761910 systemd-journald[994]: Journal started Jul 12 00:36:11.761952 systemd-journald[994]: Runtime Journal (/run/log/journal/d31faa5186b040f191939e4939e29ad8) is 6.0M, max 48.7M, 42.6M free. Jul 12 00:36:09.854000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 12 00:36:09.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:36:09.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:36:09.932000 audit: BPF prog-id=10 op=LOAD Jul 12 00:36:09.932000 audit: BPF prog-id=10 op=UNLOAD Jul 12 00:36:09.932000 audit: BPF prog-id=11 op=LOAD Jul 12 00:36:09.932000 audit: BPF prog-id=11 op=UNLOAD Jul 12 00:36:09.972000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 12 00:36:09.972000 audit[933]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:09.972000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:36:09.973000 audit[933]: AVC avc: denied { associate } for pid=933 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 12 00:36:09.973000 audit[933]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=916 pid=933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:09.973000 audit: CWD cwd="/" Jul 12 00:36:09.973000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:36:09.973000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:36:09.973000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:36:11.636000 audit: BPF prog-id=12 op=LOAD Jul 12 00:36:11.636000 audit: BPF prog-id=3 op=UNLOAD Jul 12 00:36:11.636000 audit: BPF prog-id=13 op=LOAD Jul 12 00:36:11.636000 audit: BPF prog-id=14 op=LOAD Jul 12 00:36:11.636000 audit: BPF prog-id=4 op=UNLOAD Jul 12 00:36:11.636000 audit: BPF prog-id=5 op=UNLOAD Jul 12 00:36:11.637000 audit: BPF prog-id=15 op=LOAD Jul 12 00:36:11.637000 audit: BPF prog-id=12 op=UNLOAD Jul 12 00:36:11.637000 audit: BPF prog-id=16 op=LOAD Jul 12 00:36:11.637000 audit: BPF prog-id=17 op=LOAD Jul 12 00:36:11.637000 audit: BPF prog-id=13 op=UNLOAD Jul 12 00:36:11.637000 audit: BPF prog-id=14 op=UNLOAD Jul 12 00:36:11.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.651000 audit: BPF prog-id=15 op=UNLOAD Jul 12 00:36:11.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.727000 audit: BPF prog-id=18 op=LOAD Jul 12 00:36:11.727000 audit: BPF prog-id=19 op=LOAD Jul 12 00:36:11.727000 audit: BPF prog-id=20 op=LOAD Jul 12 00:36:11.727000 audit: BPF prog-id=16 op=UNLOAD Jul 12 00:36:11.727000 audit: BPF prog-id=17 op=UNLOAD Jul 12 00:36:11.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.757000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 12 00:36:11.757000 audit[994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffd8018b40 a2=4000 a3=1 items=0 ppid=1 pid=994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:11.762943 systemd[1]: Finished modprobe@drm.service. Jul 12 00:36:11.757000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 12 00:36:11.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.635421 systemd[1]: Queued start job for default target multi-user.target. Jul 12 00:36:09.970752 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:36:11.635434 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 12 00:36:09.971017 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:36:11.638687 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 12 00:36:11.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:09.971036 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:36:09.971064 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 12 00:36:09.971073 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 12 00:36:09.971102 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 12 00:36:09.971114 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 12 00:36:09.971298 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 12 00:36:09.971330 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:36:11.764052 systemd[1]: Started systemd-journald.service. Jul 12 00:36:09.971342 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:36:09.972277 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 12 00:36:09.972313 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 12 00:36:09.972334 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 12 00:36:09.972348 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 12 00:36:09.972365 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 12 00:36:09.972377 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:09Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 12 00:36:11.388949 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:11Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:36:11.389217 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:11Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:36:11.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.389316 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:11Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:36:11.389490 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:11Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:36:11.389537 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:11Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 12 00:36:11.389615 /usr/lib/systemd/system-generators/torcx-generator[933]: time="2025-07-12T00:36:11Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 12 00:36:11.765229 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:36:11.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.765391 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:36:11.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.766382 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 12 00:36:11.766530 systemd[1]: Finished modprobe@fuse.service. Jul 12 00:36:11.767444 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:36:11.767613 systemd[1]: Finished modprobe@loop.service. Jul 12 00:36:11.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.770713 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:36:11.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.771671 systemd[1]: Finished systemd-network-generator.service. Jul 12 00:36:11.771000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.772603 systemd[1]: Finished systemd-remount-fs.service. Jul 12 00:36:11.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.773597 systemd[1]: Reached target network-pre.target. Jul 12 00:36:11.775220 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 12 00:36:11.777232 systemd[1]: Mounting sys-kernel-config.mount... Jul 12 00:36:11.777820 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 12 00:36:11.780632 systemd[1]: Starting systemd-hwdb-update.service... Jul 12 00:36:11.782185 systemd[1]: Starting systemd-journal-flush.service... Jul 12 00:36:11.782908 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:36:11.783880 systemd[1]: Starting systemd-random-seed.service... Jul 12 00:36:11.786302 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:36:11.787296 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:36:11.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.790166 systemd[1]: Finished flatcar-tmpfiles.service. Jul 12 00:36:11.790957 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 12 00:36:11.791743 systemd[1]: Mounted sys-kernel-config.mount. Jul 12 00:36:11.793511 systemd[1]: Starting systemd-sysusers.service... Jul 12 00:36:11.796725 systemd-journald[994]: Time spent on flushing to /var/log/journal/d31faa5186b040f191939e4939e29ad8 is 11.990ms for 991 entries. Jul 12 00:36:11.796725 systemd-journald[994]: System Journal (/var/log/journal/d31faa5186b040f191939e4939e29ad8) is 8.0M, max 195.6M, 187.6M free. Jul 12 00:36:11.818252 systemd-journald[994]: Received client request to flush runtime journal. Jul 12 00:36:11.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.798660 systemd[1]: Finished systemd-random-seed.service. Jul 12 00:36:11.799820 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:36:11.819348 udevadm[1040]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 12 00:36:11.800616 systemd[1]: Reached target first-boot-complete.target. Jul 12 00:36:11.801748 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:36:11.803768 systemd[1]: Starting systemd-udev-settle.service... Jul 12 00:36:11.817223 systemd[1]: Finished systemd-sysusers.service. Jul 12 00:36:11.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:11.819102 systemd[1]: Finished systemd-journal-flush.service. Jul 12 00:36:12.134594 systemd[1]: Finished systemd-hwdb-update.service. Jul 12 00:36:12.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.135000 audit: BPF prog-id=21 op=LOAD Jul 12 00:36:12.135000 audit: BPF prog-id=22 op=LOAD Jul 12 00:36:12.135000 audit: BPF prog-id=7 op=UNLOAD Jul 12 00:36:12.135000 audit: BPF prog-id=8 op=UNLOAD Jul 12 00:36:12.136557 systemd[1]: Starting systemd-udevd.service... Jul 12 00:36:12.153120 systemd-udevd[1042]: Using default interface naming scheme 'v252'. Jul 12 00:36:12.164521 systemd[1]: Started systemd-udevd.service. Jul 12 00:36:12.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.168000 audit: BPF prog-id=23 op=LOAD Jul 12 00:36:12.172000 audit: BPF prog-id=24 op=LOAD Jul 12 00:36:12.172000 audit: BPF prog-id=25 op=LOAD Jul 12 00:36:12.172000 audit: BPF prog-id=26 op=LOAD Jul 12 00:36:12.171069 systemd[1]: Starting systemd-networkd.service... Jul 12 00:36:12.174721 systemd[1]: Starting systemd-userdbd.service... Jul 12 00:36:12.192095 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 12 00:36:12.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.205209 systemd[1]: Started systemd-userdbd.service. Jul 12 00:36:12.241667 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:36:12.261952 systemd[1]: Finished systemd-udev-settle.service. Jul 12 00:36:12.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.263464 systemd-networkd[1058]: lo: Link UP Jul 12 00:36:12.263474 systemd-networkd[1058]: lo: Gained carrier Jul 12 00:36:12.263859 systemd[1]: Starting lvm2-activation-early.service... Jul 12 00:36:12.263863 systemd-networkd[1058]: Enumeration completed Jul 12 00:36:12.263961 systemd-networkd[1058]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:36:12.264685 systemd[1]: Started systemd-networkd.service. Jul 12 00:36:12.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.267354 systemd-networkd[1058]: eth0: Link UP Jul 12 00:36:12.267364 systemd-networkd[1058]: eth0: Gained carrier Jul 12 00:36:12.273793 lvm[1075]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:36:12.293697 systemd-networkd[1058]: eth0: DHCPv4 address 10.0.0.113/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 12 00:36:12.308337 systemd[1]: Finished lvm2-activation-early.service. Jul 12 00:36:12.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.309121 systemd[1]: Reached target cryptsetup.target. Jul 12 00:36:12.310734 systemd[1]: Starting lvm2-activation.service... Jul 12 00:36:12.314357 lvm[1076]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:36:12.345351 systemd[1]: Finished lvm2-activation.service. Jul 12 00:36:12.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.346084 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:36:12.346713 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 12 00:36:12.346736 systemd[1]: Reached target local-fs.target. Jul 12 00:36:12.347275 systemd[1]: Reached target machines.target. Jul 12 00:36:12.348920 systemd[1]: Starting ldconfig.service... Jul 12 00:36:12.349796 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.349861 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:12.351207 systemd[1]: Starting systemd-boot-update.service... Jul 12 00:36:12.352927 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 12 00:36:12.354570 systemd[1]: Starting systemd-machine-id-commit.service... Jul 12 00:36:12.356356 systemd[1]: Starting systemd-sysext.service... Jul 12 00:36:12.359261 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1078 (bootctl) Jul 12 00:36:12.360235 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 12 00:36:12.374604 systemd[1]: Unmounting usr-share-oem.mount... Jul 12 00:36:12.386893 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 12 00:36:12.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.392707 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 12 00:36:12.392901 systemd[1]: Unmounted usr-share-oem.mount. Jul 12 00:36:12.444604 kernel: loop0: detected capacity change from 0 to 203944 Jul 12 00:36:12.450658 systemd[1]: Finished systemd-machine-id-commit.service. Jul 12 00:36:12.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.456588 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 12 00:36:12.463207 systemd-fsck[1087]: fsck.fat 4.2 (2021-01-31) Jul 12 00:36:12.463207 systemd-fsck[1087]: /dev/vda1: 236 files, 117310/258078 clusters Jul 12 00:36:12.464788 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 12 00:36:12.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.471616 kernel: loop1: detected capacity change from 0 to 203944 Jul 12 00:36:12.480422 (sd-sysext)[1093]: Using extensions 'kubernetes'. Jul 12 00:36:12.481200 (sd-sysext)[1093]: Merged extensions into '/usr'. Jul 12 00:36:12.497420 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.498666 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:36:12.500362 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:36:12.502044 systemd[1]: Starting modprobe@loop.service... Jul 12 00:36:12.502921 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.503037 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:12.503778 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:36:12.503909 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:36:12.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.505145 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:36:12.505252 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:36:12.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.506441 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:36:12.506548 systemd[1]: Finished modprobe@loop.service. Jul 12 00:36:12.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.507792 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:36:12.507878 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.570754 ldconfig[1077]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 12 00:36:12.574528 systemd[1]: Finished ldconfig.service. Jul 12 00:36:12.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.748364 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 12 00:36:12.750045 systemd[1]: Mounting boot.mount... Jul 12 00:36:12.751696 systemd[1]: Mounting usr-share-oem.mount... Jul 12 00:36:12.757880 systemd[1]: Mounted boot.mount. Jul 12 00:36:12.760775 systemd[1]: Mounted usr-share-oem.mount. Jul 12 00:36:12.762481 systemd[1]: Finished systemd-sysext.service. Jul 12 00:36:12.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.764383 systemd[1]: Starting ensure-sysext.service... Jul 12 00:36:12.766245 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 12 00:36:12.769295 systemd[1]: Finished systemd-boot-update.service. Jul 12 00:36:12.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.771426 systemd[1]: Reloading. Jul 12 00:36:12.784042 systemd-tmpfiles[1101]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 12 00:36:12.787170 systemd-tmpfiles[1101]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 12 00:36:12.791459 systemd-tmpfiles[1101]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 12 00:36:12.809805 /usr/lib/systemd/system-generators/torcx-generator[1121]: time="2025-07-12T00:36:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:36:12.809833 /usr/lib/systemd/system-generators/torcx-generator[1121]: time="2025-07-12T00:36:12Z" level=info msg="torcx already run" Jul 12 00:36:12.868963 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:36:12.868985 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:36:12.884395 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:36:12.926000 audit: BPF prog-id=27 op=LOAD Jul 12 00:36:12.926000 audit: BPF prog-id=28 op=LOAD Jul 12 00:36:12.926000 audit: BPF prog-id=21 op=UNLOAD Jul 12 00:36:12.926000 audit: BPF prog-id=22 op=UNLOAD Jul 12 00:36:12.927000 audit: BPF prog-id=29 op=LOAD Jul 12 00:36:12.927000 audit: BPF prog-id=18 op=UNLOAD Jul 12 00:36:12.927000 audit: BPF prog-id=30 op=LOAD Jul 12 00:36:12.927000 audit: BPF prog-id=31 op=LOAD Jul 12 00:36:12.927000 audit: BPF prog-id=19 op=UNLOAD Jul 12 00:36:12.927000 audit: BPF prog-id=20 op=UNLOAD Jul 12 00:36:12.928000 audit: BPF prog-id=32 op=LOAD Jul 12 00:36:12.928000 audit: BPF prog-id=24 op=UNLOAD Jul 12 00:36:12.928000 audit: BPF prog-id=33 op=LOAD Jul 12 00:36:12.928000 audit: BPF prog-id=34 op=LOAD Jul 12 00:36:12.928000 audit: BPF prog-id=25 op=UNLOAD Jul 12 00:36:12.928000 audit: BPF prog-id=26 op=UNLOAD Jul 12 00:36:12.930000 audit: BPF prog-id=35 op=LOAD Jul 12 00:36:12.930000 audit: BPF prog-id=23 op=UNLOAD Jul 12 00:36:12.932197 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 12 00:36:12.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.936534 systemd[1]: Starting audit-rules.service... Jul 12 00:36:12.938362 systemd[1]: Starting clean-ca-certificates.service... Jul 12 00:36:12.940856 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 12 00:36:12.943000 audit: BPF prog-id=36 op=LOAD Jul 12 00:36:12.947210 systemd[1]: Starting systemd-resolved.service... Jul 12 00:36:12.949000 audit: BPF prog-id=37 op=LOAD Jul 12 00:36:12.950668 systemd[1]: Starting systemd-timesyncd.service... Jul 12 00:36:12.952592 systemd[1]: Starting systemd-update-utmp.service... Jul 12 00:36:12.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.955177 systemd[1]: Finished clean-ca-certificates.service. Jul 12 00:36:12.959874 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.961000 audit[1170]: SYSTEM_BOOT pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.961263 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:36:12.963218 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:36:12.965196 systemd[1]: Starting modprobe@loop.service... Jul 12 00:36:12.966039 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.966182 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:12.966276 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:36:12.967125 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:36:12.967249 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:36:12.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.968499 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:36:12.968644 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:36:12.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.969828 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:36:12.969940 systemd[1]: Finished modprobe@loop.service. Jul 12 00:36:12.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.973693 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.975058 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:36:12.976973 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:36:12.979553 systemd[1]: Starting modprobe@loop.service... Jul 12 00:36:12.980298 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.980495 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:12.980656 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:36:12.981861 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 12 00:36:12.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.983196 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:36:12.983333 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:36:12.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.985071 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:36:12.985191 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:36:12.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.986596 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:36:12.986713 systemd[1]: Finished modprobe@loop.service. Jul 12 00:36:12.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.988046 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:36:12.988171 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.989598 systemd[1]: Starting systemd-update-done.service... Jul 12 00:36:12.991059 systemd[1]: Finished systemd-update-utmp.service. Jul 12 00:36:12.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:12.995224 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:36:12.996527 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:36:13.000959 systemd[1]: Starting modprobe@drm.service... Jul 12 00:36:13.002909 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:36:13.004939 systemd[1]: Starting modprobe@loop.service... Jul 12 00:36:13.005790 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:36:13.005938 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:13.007239 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 12 00:36:13.008180 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:36:13.009394 systemd[1]: Finished systemd-update-done.service. Jul 12 00:36:13.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.010838 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:36:13.010953 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:36:13.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.012183 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:36:13.012297 systemd[1]: Finished modprobe@drm.service. Jul 12 00:36:13.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.013494 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:36:13.013625 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:36:13.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.014887 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:36:13.015004 systemd[1]: Finished modprobe@loop.service. Jul 12 00:36:13.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.016331 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:36:13.016436 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:36:13.017503 systemd[1]: Finished ensure-sysext.service. Jul 12 00:36:13.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:13.018000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 12 00:36:13.018000 audit[1191]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc42ebbc0 a2=420 a3=0 items=0 ppid=1159 pid=1191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:13.018000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 12 00:36:13.019021 augenrules[1191]: No rules Jul 12 00:36:13.019834 systemd[1]: Finished audit-rules.service. Jul 12 00:36:13.020904 systemd[1]: Started systemd-timesyncd.service. Jul 12 00:36:13.506076 systemd-timesyncd[1164]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 12 00:36:13.506142 systemd-timesyncd[1164]: Initial clock synchronization to Sat 2025-07-12 00:36:13.505980 UTC. Jul 12 00:36:13.506706 systemd[1]: Reached target time-set.target. Jul 12 00:36:13.509027 systemd-resolved[1163]: Positive Trust Anchors: Jul 12 00:36:13.509042 systemd-resolved[1163]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:36:13.509069 systemd-resolved[1163]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:36:13.519629 systemd-resolved[1163]: Defaulting to hostname 'linux'. Jul 12 00:36:13.521055 systemd[1]: Started systemd-resolved.service. Jul 12 00:36:13.521844 systemd[1]: Reached target network.target. Jul 12 00:36:13.522566 systemd[1]: Reached target nss-lookup.target. Jul 12 00:36:13.523304 systemd[1]: Reached target sysinit.target. Jul 12 00:36:13.524133 systemd[1]: Started motdgen.path. Jul 12 00:36:13.524903 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 12 00:36:13.526092 systemd[1]: Started logrotate.timer. Jul 12 00:36:13.526893 systemd[1]: Started mdadm.timer. Jul 12 00:36:13.527520 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 12 00:36:13.528255 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 12 00:36:13.528282 systemd[1]: Reached target paths.target. Jul 12 00:36:13.529020 systemd[1]: Reached target timers.target. Jul 12 00:36:13.530042 systemd[1]: Listening on dbus.socket. Jul 12 00:36:13.531769 systemd[1]: Starting docker.socket... Jul 12 00:36:13.534815 systemd[1]: Listening on sshd.socket. Jul 12 00:36:13.535588 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:13.536001 systemd[1]: Listening on docker.socket. Jul 12 00:36:13.536799 systemd[1]: Reached target sockets.target. Jul 12 00:36:13.537469 systemd[1]: Reached target basic.target. Jul 12 00:36:13.538186 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:36:13.538229 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:36:13.539192 systemd[1]: Starting containerd.service... Jul 12 00:36:13.540937 systemd[1]: Starting dbus.service... Jul 12 00:36:13.542541 systemd[1]: Starting enable-oem-cloudinit.service... Jul 12 00:36:13.544337 systemd[1]: Starting extend-filesystems.service... Jul 12 00:36:13.545264 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 12 00:36:13.546642 systemd[1]: Starting motdgen.service... Jul 12 00:36:13.551829 systemd[1]: Starting prepare-helm.service... Jul 12 00:36:13.553499 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 12 00:36:13.555175 systemd[1]: Starting sshd-keygen.service... Jul 12 00:36:13.557252 jq[1201]: false Jul 12 00:36:13.558083 systemd[1]: Starting systemd-logind.service... Jul 12 00:36:13.558676 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:36:13.558744 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 12 00:36:13.559709 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 12 00:36:13.560376 systemd[1]: Starting update-engine.service... Jul 12 00:36:13.561009 extend-filesystems[1202]: Found loop1 Jul 12 00:36:13.561975 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 12 00:36:13.562084 extend-filesystems[1202]: Found vda Jul 12 00:36:13.563307 extend-filesystems[1202]: Found vda1 Jul 12 00:36:13.563307 extend-filesystems[1202]: Found vda2 Jul 12 00:36:13.563307 extend-filesystems[1202]: Found vda3 Jul 12 00:36:13.563307 extend-filesystems[1202]: Found usr Jul 12 00:36:13.563307 extend-filesystems[1202]: Found vda4 Jul 12 00:36:13.565192 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 12 00:36:13.570568 jq[1214]: true Jul 12 00:36:13.565398 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 12 00:36:13.566354 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 12 00:36:13.566562 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 12 00:36:13.572345 extend-filesystems[1202]: Found vda6 Jul 12 00:36:13.572345 extend-filesystems[1202]: Found vda7 Jul 12 00:36:13.572345 extend-filesystems[1202]: Found vda9 Jul 12 00:36:13.572345 extend-filesystems[1202]: Checking size of /dev/vda9 Jul 12 00:36:13.585109 jq[1220]: true Jul 12 00:36:13.596896 tar[1218]: linux-arm64/helm Jul 12 00:36:13.601051 systemd[1]: motdgen.service: Deactivated successfully. Jul 12 00:36:13.601236 systemd[1]: Finished motdgen.service. Jul 12 00:36:13.610081 dbus-daemon[1200]: [system] SELinux support is enabled Jul 12 00:36:13.611419 systemd[1]: Started dbus.service. Jul 12 00:36:13.613733 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 12 00:36:13.613754 systemd[1]: Reached target system-config.target. Jul 12 00:36:13.614667 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 12 00:36:13.614681 systemd[1]: Reached target user-config.target. Jul 12 00:36:13.616407 extend-filesystems[1202]: Resized partition /dev/vda9 Jul 12 00:36:13.618113 extend-filesystems[1251]: resize2fs 1.46.5 (30-Dec-2021) Jul 12 00:36:13.628134 systemd-logind[1210]: Watching system buttons on /dev/input/event0 (Power Button) Jul 12 00:36:13.628552 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 12 00:36:13.629672 systemd-logind[1210]: New seat seat0. Jul 12 00:36:13.634226 systemd[1]: Started systemd-logind.service. Jul 12 00:36:13.652423 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 12 00:36:13.674115 update_engine[1213]: I0712 00:36:13.662055 1213 main.cc:92] Flatcar Update Engine starting Jul 12 00:36:13.674115 update_engine[1213]: I0712 00:36:13.665961 1213 update_check_scheduler.cc:74] Next update check in 4m28s Jul 12 00:36:13.665916 systemd[1]: Started update-engine.service. Jul 12 00:36:13.668519 systemd[1]: Started locksmithd.service. Jul 12 00:36:13.674867 extend-filesystems[1251]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 12 00:36:13.674867 extend-filesystems[1251]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 12 00:36:13.674867 extend-filesystems[1251]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 12 00:36:13.678761 bash[1248]: Updated "/home/core/.ssh/authorized_keys" Jul 12 00:36:13.676091 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 12 00:36:13.679005 extend-filesystems[1202]: Resized filesystem in /dev/vda9 Jul 12 00:36:13.680226 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 12 00:36:13.680414 systemd[1]: Finished extend-filesystems.service. Jul 12 00:36:13.700028 env[1225]: time="2025-07-12T00:36:13.699964500Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 12 00:36:13.722450 env[1225]: time="2025-07-12T00:36:13.721429860Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 12 00:36:13.722450 env[1225]: time="2025-07-12T00:36:13.721591940Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:36:13.722964 env[1225]: time="2025-07-12T00:36:13.722927700Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:36:13.722964 env[1225]: time="2025-07-12T00:36:13.722962860Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723217 env[1225]: time="2025-07-12T00:36:13.723185580Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723217 env[1225]: time="2025-07-12T00:36:13.723217620Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723284 env[1225]: time="2025-07-12T00:36:13.723232700Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 12 00:36:13.723284 env[1225]: time="2025-07-12T00:36:13.723243380Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723339 env[1225]: time="2025-07-12T00:36:13.723321540Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723702 env[1225]: time="2025-07-12T00:36:13.723638460Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723821 env[1225]: time="2025-07-12T00:36:13.723785180Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:36:13.723821 env[1225]: time="2025-07-12T00:36:13.723805940Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 12 00:36:13.723887 env[1225]: time="2025-07-12T00:36:13.723864500Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 12 00:36:13.723887 env[1225]: time="2025-07-12T00:36:13.723876180Z" level=info msg="metadata content store policy set" policy=shared Jul 12 00:36:13.728754 env[1225]: time="2025-07-12T00:36:13.728668340Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 12 00:36:13.728754 env[1225]: time="2025-07-12T00:36:13.728705620Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 12 00:36:13.728754 env[1225]: time="2025-07-12T00:36:13.728719340Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 12 00:36:13.728754 env[1225]: time="2025-07-12T00:36:13.728749980Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.728902 env[1225]: time="2025-07-12T00:36:13.728764020Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.728902 env[1225]: time="2025-07-12T00:36:13.728778140Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.728902 env[1225]: time="2025-07-12T00:36:13.728790740Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.729146 env[1225]: time="2025-07-12T00:36:13.729119500Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.729146 env[1225]: time="2025-07-12T00:36:13.729142220Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.729220 env[1225]: time="2025-07-12T00:36:13.729157460Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.729220 env[1225]: time="2025-07-12T00:36:13.729170700Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.729220 env[1225]: time="2025-07-12T00:36:13.729183460Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 12 00:36:13.729355 env[1225]: time="2025-07-12T00:36:13.729331900Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 12 00:36:13.729478 env[1225]: time="2025-07-12T00:36:13.729438780Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 12 00:36:13.729672 env[1225]: time="2025-07-12T00:36:13.729649700Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 12 00:36:13.729737 env[1225]: time="2025-07-12T00:36:13.729678500Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729737 env[1225]: time="2025-07-12T00:36:13.729691220Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 12 00:36:13.729806 env[1225]: time="2025-07-12T00:36:13.729790740Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729837 env[1225]: time="2025-07-12T00:36:13.729808380Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729837 env[1225]: time="2025-07-12T00:36:13.729827140Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729875 env[1225]: time="2025-07-12T00:36:13.729840020Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729875 env[1225]: time="2025-07-12T00:36:13.729852340Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729875 env[1225]: time="2025-07-12T00:36:13.729864020Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729942 env[1225]: time="2025-07-12T00:36:13.729874780Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729942 env[1225]: time="2025-07-12T00:36:13.729887060Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.729942 env[1225]: time="2025-07-12T00:36:13.729899900Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 12 00:36:13.730083 env[1225]: time="2025-07-12T00:36:13.730019020Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.730083 env[1225]: time="2025-07-12T00:36:13.730038860Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.730083 env[1225]: time="2025-07-12T00:36:13.730051980Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.730083 env[1225]: time="2025-07-12T00:36:13.730063420Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 12 00:36:13.730083 env[1225]: time="2025-07-12T00:36:13.730079340Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 12 00:36:13.730186 env[1225]: time="2025-07-12T00:36:13.730090620Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 12 00:36:13.730186 env[1225]: time="2025-07-12T00:36:13.730107580Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 12 00:36:13.730186 env[1225]: time="2025-07-12T00:36:13.730141020Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 12 00:36:13.730409 env[1225]: time="2025-07-12T00:36:13.730333860Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.730412220Z" level=info msg="Connect containerd service" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.730445660Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731078620Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731624020Z" level=info msg="Start subscribing containerd event" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731662340Z" level=info msg="Start recovering state" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731718380Z" level=info msg="Start event monitor" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731735300Z" level=info msg="Start snapshots syncer" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731743940Z" level=info msg="Start cni network conf syncer for default" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731751860Z" level=info msg="Start streaming server" Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.731983700Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.732025660Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 12 00:36:13.734045 env[1225]: time="2025-07-12T00:36:13.732093380Z" level=info msg="containerd successfully booted in 0.033403s" Jul 12 00:36:13.732995 systemd[1]: Started containerd.service. Jul 12 00:36:13.752563 locksmithd[1253]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 12 00:36:13.933509 systemd-networkd[1058]: eth0: Gained IPv6LL Jul 12 00:36:13.935253 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 12 00:36:13.936272 systemd[1]: Reached target network-online.target. Jul 12 00:36:13.938508 systemd[1]: Starting kubelet.service... Jul 12 00:36:13.994719 tar[1218]: linux-arm64/LICENSE Jul 12 00:36:13.994830 tar[1218]: linux-arm64/README.md Jul 12 00:36:13.999058 systemd[1]: Finished prepare-helm.service. Jul 12 00:36:14.529326 systemd[1]: Started kubelet.service. Jul 12 00:36:14.734249 sshd_keygen[1221]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 12 00:36:14.752109 systemd[1]: Finished sshd-keygen.service. Jul 12 00:36:14.754194 systemd[1]: Starting issuegen.service... Jul 12 00:36:14.758926 systemd[1]: issuegen.service: Deactivated successfully. Jul 12 00:36:14.759072 systemd[1]: Finished issuegen.service. Jul 12 00:36:14.761000 systemd[1]: Starting systemd-user-sessions.service... Jul 12 00:36:14.767237 systemd[1]: Finished systemd-user-sessions.service. Jul 12 00:36:14.769315 systemd[1]: Started getty@tty1.service. Jul 12 00:36:14.771080 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 12 00:36:14.772234 systemd[1]: Reached target getty.target. Jul 12 00:36:14.773124 systemd[1]: Reached target multi-user.target. Jul 12 00:36:14.775077 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 12 00:36:14.781493 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 12 00:36:14.781636 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 12 00:36:14.782459 systemd[1]: Startup finished in 563ms (kernel) + 5.249s (initrd) + 4.476s (userspace) = 10.289s. Jul 12 00:36:14.974254 kubelet[1268]: E0712 00:36:14.974194 1268 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:36:14.976134 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:36:14.976265 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:36:17.492179 systemd[1]: Created slice system-sshd.slice. Jul 12 00:36:17.493286 systemd[1]: Started sshd@0-10.0.0.113:22-10.0.0.1:36592.service. Jul 12 00:36:17.544252 sshd[1290]: Accepted publickey for core from 10.0.0.1 port 36592 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:17.546089 sshd[1290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:17.556365 systemd-logind[1210]: New session 1 of user core. Jul 12 00:36:17.557205 systemd[1]: Created slice user-500.slice. Jul 12 00:36:17.558208 systemd[1]: Starting user-runtime-dir@500.service... Jul 12 00:36:17.565994 systemd[1]: Finished user-runtime-dir@500.service. Jul 12 00:36:17.567187 systemd[1]: Starting user@500.service... Jul 12 00:36:17.569989 (systemd)[1293]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:17.627247 systemd[1293]: Queued start job for default target default.target. Jul 12 00:36:17.627688 systemd[1293]: Reached target paths.target. Jul 12 00:36:17.627718 systemd[1293]: Reached target sockets.target. Jul 12 00:36:17.627730 systemd[1293]: Reached target timers.target. Jul 12 00:36:17.627739 systemd[1293]: Reached target basic.target. Jul 12 00:36:17.627775 systemd[1293]: Reached target default.target. Jul 12 00:36:17.627802 systemd[1293]: Startup finished in 52ms. Jul 12 00:36:17.627947 systemd[1]: Started user@500.service. Jul 12 00:36:17.629575 systemd[1]: Started session-1.scope. Jul 12 00:36:17.681610 systemd[1]: Started sshd@1-10.0.0.113:22-10.0.0.1:36598.service. Jul 12 00:36:17.723569 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 36598 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:17.724648 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:17.728574 systemd-logind[1210]: New session 2 of user core. Jul 12 00:36:17.729104 systemd[1]: Started session-2.scope. Jul 12 00:36:17.781630 sshd[1302]: pam_unix(sshd:session): session closed for user core Jul 12 00:36:17.785165 systemd[1]: Started sshd@2-10.0.0.113:22-10.0.0.1:36600.service. Jul 12 00:36:17.785666 systemd[1]: sshd@1-10.0.0.113:22-10.0.0.1:36598.service: Deactivated successfully. Jul 12 00:36:17.786259 systemd[1]: session-2.scope: Deactivated successfully. Jul 12 00:36:17.786722 systemd-logind[1210]: Session 2 logged out. Waiting for processes to exit. Jul 12 00:36:17.787525 systemd-logind[1210]: Removed session 2. Jul 12 00:36:17.827237 sshd[1307]: Accepted publickey for core from 10.0.0.1 port 36600 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:17.828582 sshd[1307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:17.831562 systemd-logind[1210]: New session 3 of user core. Jul 12 00:36:17.832285 systemd[1]: Started session-3.scope. Jul 12 00:36:17.880571 sshd[1307]: pam_unix(sshd:session): session closed for user core Jul 12 00:36:17.884005 systemd[1]: sshd@2-10.0.0.113:22-10.0.0.1:36600.service: Deactivated successfully. Jul 12 00:36:17.884550 systemd[1]: session-3.scope: Deactivated successfully. Jul 12 00:36:17.885055 systemd-logind[1210]: Session 3 logged out. Waiting for processes to exit. Jul 12 00:36:17.886023 systemd[1]: Started sshd@3-10.0.0.113:22-10.0.0.1:36614.service. Jul 12 00:36:17.886706 systemd-logind[1210]: Removed session 3. Jul 12 00:36:17.928353 sshd[1314]: Accepted publickey for core from 10.0.0.1 port 36614 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:17.929436 sshd[1314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:17.932832 systemd-logind[1210]: New session 4 of user core. Jul 12 00:36:17.933167 systemd[1]: Started session-4.scope. Jul 12 00:36:17.986413 sshd[1314]: pam_unix(sshd:session): session closed for user core Jul 12 00:36:17.989642 systemd[1]: Started sshd@4-10.0.0.113:22-10.0.0.1:36628.service. Jul 12 00:36:17.990112 systemd[1]: sshd@3-10.0.0.113:22-10.0.0.1:36614.service: Deactivated successfully. Jul 12 00:36:17.990713 systemd[1]: session-4.scope: Deactivated successfully. Jul 12 00:36:17.991153 systemd-logind[1210]: Session 4 logged out. Waiting for processes to exit. Jul 12 00:36:17.991862 systemd-logind[1210]: Removed session 4. Jul 12 00:36:18.033621 sshd[1319]: Accepted publickey for core from 10.0.0.1 port 36628 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:18.033918 sshd[1319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:18.036775 systemd-logind[1210]: New session 5 of user core. Jul 12 00:36:18.037534 systemd[1]: Started session-5.scope. Jul 12 00:36:18.097506 sudo[1323]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 12 00:36:18.097713 sudo[1323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:36:18.109608 dbus-daemon[1200]: avc: received setenforce notice (enforcing=1) Jul 12 00:36:18.111377 sudo[1323]: pam_unix(sudo:session): session closed for user root Jul 12 00:36:18.113284 sshd[1319]: pam_unix(sshd:session): session closed for user core Jul 12 00:36:18.115942 systemd[1]: sshd@4-10.0.0.113:22-10.0.0.1:36628.service: Deactivated successfully. Jul 12 00:36:18.116593 systemd[1]: session-5.scope: Deactivated successfully. Jul 12 00:36:18.117119 systemd-logind[1210]: Session 5 logged out. Waiting for processes to exit. Jul 12 00:36:18.118122 systemd[1]: Started sshd@5-10.0.0.113:22-10.0.0.1:36638.service. Jul 12 00:36:18.118794 systemd-logind[1210]: Removed session 5. Jul 12 00:36:18.160313 sshd[1327]: Accepted publickey for core from 10.0.0.1 port 36638 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:18.161426 sshd[1327]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:18.165157 systemd[1]: Started session-6.scope. Jul 12 00:36:18.165676 systemd-logind[1210]: New session 6 of user core. Jul 12 00:36:18.217438 sudo[1331]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 12 00:36:18.217928 sudo[1331]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:36:18.220768 sudo[1331]: pam_unix(sudo:session): session closed for user root Jul 12 00:36:18.225044 sudo[1330]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 12 00:36:18.225266 sudo[1330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:36:18.233114 systemd[1]: Stopping audit-rules.service... Jul 12 00:36:18.232000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:36:18.234442 auditctl[1334]: No rules Jul 12 00:36:18.234864 kernel: kauditd_printk_skb: 176 callbacks suppressed Jul 12 00:36:18.234901 kernel: audit: type=1305 audit(1752280578.232:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:36:18.234835 systemd[1]: audit-rules.service: Deactivated successfully. Jul 12 00:36:18.234985 systemd[1]: Stopped audit-rules.service. Jul 12 00:36:18.232000 audit[1334]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffccd448e0 a2=420 a3=0 items=0 ppid=1 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.236332 systemd[1]: Starting audit-rules.service... Jul 12 00:36:18.238648 kernel: audit: type=1300 audit(1752280578.232:207): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffccd448e0 a2=420 a3=0 items=0 ppid=1 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.238687 kernel: audit: type=1327 audit(1752280578.232:207): proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:36:18.232000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:36:18.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.241351 kernel: audit: type=1131 audit(1752280578.233:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.251788 augenrules[1351]: No rules Jul 12 00:36:18.252605 systemd[1]: Finished audit-rules.service. Jul 12 00:36:18.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.254822 sudo[1330]: pam_unix(sudo:session): session closed for user root Jul 12 00:36:18.253000 audit[1330]: USER_END pid=1330 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.258145 kernel: audit: type=1130 audit(1752280578.251:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.258208 kernel: audit: type=1106 audit(1752280578.253:210): pid=1330 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.258057 sshd[1327]: pam_unix(sshd:session): session closed for user core Jul 12 00:36:18.253000 audit[1330]: CRED_DISP pid=1330 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.259632 systemd[1]: Started sshd@6-10.0.0.113:22-10.0.0.1:36646.service. Jul 12 00:36:18.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.113:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.262771 kernel: audit: type=1104 audit(1752280578.253:211): pid=1330 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.262828 kernel: audit: type=1130 audit(1752280578.258:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.113:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.261000 audit[1327]: USER_END pid=1327 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.265970 kernel: audit: type=1106 audit(1752280578.261:213): pid=1327 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.266235 systemd[1]: sshd@5-10.0.0.113:22-10.0.0.1:36638.service: Deactivated successfully. Jul 12 00:36:18.261000 audit[1327]: CRED_DISP pid=1327 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.268997 kernel: audit: type=1104 audit(1752280578.261:214): pid=1327 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.266845 systemd[1]: session-6.scope: Deactivated successfully. Jul 12 00:36:18.269163 systemd-logind[1210]: Session 6 logged out. Waiting for processes to exit. Jul 12 00:36:18.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.113:22-10.0.0.1:36638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.270097 systemd-logind[1210]: Removed session 6. Jul 12 00:36:18.300000 audit[1356]: USER_ACCT pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.304107 sshd[1356]: Accepted publickey for core from 10.0.0.1 port 36646 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:36:18.301000 audit[1356]: CRED_ACQ pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.301000 audit[1356]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd19d7c10 a2=3 a3=1 items=0 ppid=1 pid=1356 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.301000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:36:18.303864 sshd[1356]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:36:18.307077 systemd-logind[1210]: New session 7 of user core. Jul 12 00:36:18.307882 systemd[1]: Started session-7.scope. Jul 12 00:36:18.309000 audit[1356]: USER_START pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.310000 audit[1359]: CRED_ACQ pid=1359 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:18.358000 audit[1360]: USER_ACCT pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.359869 sudo[1360]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 12 00:36:18.360091 sudo[1360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:36:18.358000 audit[1360]: CRED_REFR pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.360000 audit[1360]: USER_START pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:18.458119 systemd[1]: Starting docker.service... Jul 12 00:36:18.554599 env[1372]: time="2025-07-12T00:36:18.554484860Z" level=info msg="Starting up" Jul 12 00:36:18.556775 env[1372]: time="2025-07-12T00:36:18.556736900Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:36:18.556775 env[1372]: time="2025-07-12T00:36:18.556763220Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:36:18.556904 env[1372]: time="2025-07-12T00:36:18.556783500Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:36:18.556904 env[1372]: time="2025-07-12T00:36:18.556793740Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:36:18.558784 env[1372]: time="2025-07-12T00:36:18.558762260Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:36:18.558784 env[1372]: time="2025-07-12T00:36:18.558782060Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:36:18.558857 env[1372]: time="2025-07-12T00:36:18.558794820Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:36:18.558857 env[1372]: time="2025-07-12T00:36:18.558803300Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:36:18.562884 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3468680865-merged.mount: Deactivated successfully. Jul 12 00:36:18.770100 env[1372]: time="2025-07-12T00:36:18.770063700Z" level=info msg="Loading containers: start." Jul 12 00:36:18.822000 audit[1406]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.822000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffddbde6f0 a2=0 a3=1 items=0 ppid=1372 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.822000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 12 00:36:18.823000 audit[1408]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.823000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffccca2fe0 a2=0 a3=1 items=0 ppid=1372 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.823000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 12 00:36:18.825000 audit[1410]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.825000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd21dbc90 a2=0 a3=1 items=0 ppid=1372 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.825000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:36:18.827000 audit[1412]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.827000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffbfd7640 a2=0 a3=1 items=0 ppid=1372 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.827000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:36:18.829000 audit[1414]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.829000 audit[1414]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc5f38880 a2=0 a3=1 items=0 ppid=1372 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.829000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 12 00:36:18.848000 audit[1419]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.848000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd94207a0 a2=0 a3=1 items=0 ppid=1372 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.848000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 12 00:36:18.854000 audit[1421]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.854000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc4bbf1d0 a2=0 a3=1 items=0 ppid=1372 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.854000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 12 00:36:18.856000 audit[1423]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.856000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffdeb55740 a2=0 a3=1 items=0 ppid=1372 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.856000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 12 00:36:18.858000 audit[1425]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.858000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd4ac4df0 a2=0 a3=1 items=0 ppid=1372 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.858000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:36:18.864000 audit[1429]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.864000 audit[1429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc57a9d10 a2=0 a3=1 items=0 ppid=1372 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.864000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:36:18.875000 audit[1430]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.875000 audit[1430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd96c5f50 a2=0 a3=1 items=0 ppid=1372 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.875000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:36:18.886420 kernel: Initializing XFRM netlink socket Jul 12 00:36:18.908836 env[1372]: time="2025-07-12T00:36:18.908790340Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 12 00:36:18.924000 audit[1438]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.924000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffecfe4fc0 a2=0 a3=1 items=0 ppid=1372 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.924000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 12 00:36:18.938000 audit[1441]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.938000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe4aed220 a2=0 a3=1 items=0 ppid=1372 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.938000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 12 00:36:18.941000 audit[1444]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.941000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd4f0ec00 a2=0 a3=1 items=0 ppid=1372 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.941000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 12 00:36:18.942000 audit[1446]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.942000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff0c010b0 a2=0 a3=1 items=0 ppid=1372 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 12 00:36:18.944000 audit[1448]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.944000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe16a45a0 a2=0 a3=1 items=0 ppid=1372 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 12 00:36:18.946000 audit[1450]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.946000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcbc9fc40 a2=0 a3=1 items=0 ppid=1372 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 12 00:36:18.948000 audit[1452]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.948000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd8e41710 a2=0 a3=1 items=0 ppid=1372 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.948000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 12 00:36:18.954000 audit[1455]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.954000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffeda62530 a2=0 a3=1 items=0 ppid=1372 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.954000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 12 00:36:18.956000 audit[1457]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.956000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd9cfed40 a2=0 a3=1 items=0 ppid=1372 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:36:18.958000 audit[1459]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.958000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe7e45860 a2=0 a3=1 items=0 ppid=1372 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.958000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:36:18.960000 audit[1461]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.960000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe864baf0 a2=0 a3=1 items=0 ppid=1372 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.960000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 12 00:36:18.962286 systemd-networkd[1058]: docker0: Link UP Jul 12 00:36:18.968000 audit[1465]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.968000 audit[1465]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd0c28170 a2=0 a3=1 items=0 ppid=1372 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:36:18.976000 audit[1466]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1466 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:18.976000 audit[1466]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd04324c0 a2=0 a3=1 items=0 ppid=1372 pid=1466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:18.976000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:36:18.978652 env[1372]: time="2025-07-12T00:36:18.978612340Z" level=info msg="Loading containers: done." Jul 12 00:36:18.999362 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck4204478826-merged.mount: Deactivated successfully. Jul 12 00:36:19.003236 env[1372]: time="2025-07-12T00:36:19.003194580Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 12 00:36:19.003393 env[1372]: time="2025-07-12T00:36:19.003362460Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 12 00:36:19.003505 env[1372]: time="2025-07-12T00:36:19.003482060Z" level=info msg="Daemon has completed initialization" Jul 12 00:36:19.018345 systemd[1]: Started docker.service. Jul 12 00:36:19.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:19.026450 env[1372]: time="2025-07-12T00:36:19.026326220Z" level=info msg="API listen on /run/docker.sock" Jul 12 00:36:19.628241 env[1225]: time="2025-07-12T00:36:19.628199420Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 12 00:36:20.345757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3540930543.mount: Deactivated successfully. Jul 12 00:36:21.501461 env[1225]: time="2025-07-12T00:36:21.501412900Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:21.502912 env[1225]: time="2025-07-12T00:36:21.502859140Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:21.505397 env[1225]: time="2025-07-12T00:36:21.505338740Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:21.506952 env[1225]: time="2025-07-12T00:36:21.506925380Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:21.507870 env[1225]: time="2025-07-12T00:36:21.507840820Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c\"" Jul 12 00:36:21.511002 env[1225]: time="2025-07-12T00:36:21.510967940Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 12 00:36:22.782875 env[1225]: time="2025-07-12T00:36:22.782823500Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:22.784242 env[1225]: time="2025-07-12T00:36:22.784214540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:22.786333 env[1225]: time="2025-07-12T00:36:22.786298380Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:22.788339 env[1225]: time="2025-07-12T00:36:22.788311420Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:22.788757 env[1225]: time="2025-07-12T00:36:22.788731100Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f\"" Jul 12 00:36:22.789842 env[1225]: time="2025-07-12T00:36:22.789818980Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 12 00:36:24.017000 env[1225]: time="2025-07-12T00:36:24.016943900Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:24.018828 env[1225]: time="2025-07-12T00:36:24.018788380Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:24.020387 env[1225]: time="2025-07-12T00:36:24.020360420Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:24.022887 env[1225]: time="2025-07-12T00:36:24.022858620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:24.023646 env[1225]: time="2025-07-12T00:36:24.023608380Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c\"" Jul 12 00:36:24.024262 env[1225]: time="2025-07-12T00:36:24.024239380Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 12 00:36:25.008997 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3278619628.mount: Deactivated successfully. Jul 12 00:36:25.009893 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 12 00:36:25.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:25.010019 systemd[1]: Stopped kubelet.service. Jul 12 00:36:25.010582 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 12 00:36:25.010632 kernel: audit: type=1130 audit(1752280585.008:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:25.011331 systemd[1]: Starting kubelet.service... Jul 12 00:36:25.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:25.014231 kernel: audit: type=1131 audit(1752280585.008:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:25.113662 systemd[1]: Started kubelet.service. Jul 12 00:36:25.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:25.116400 kernel: audit: type=1130 audit(1752280585.112:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:25.148084 kubelet[1507]: E0712 00:36:25.148035 1507 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:36:25.150984 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:36:25.151118 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:36:25.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:36:25.153416 kernel: audit: type=1131 audit(1752280585.149:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:36:25.563707 env[1225]: time="2025-07-12T00:36:25.563658260Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:25.565304 env[1225]: time="2025-07-12T00:36:25.565252500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:25.566797 env[1225]: time="2025-07-12T00:36:25.566768340Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:25.567838 env[1225]: time="2025-07-12T00:36:25.567808700Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:25.568325 env[1225]: time="2025-07-12T00:36:25.568281300Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89\"" Jul 12 00:36:25.569303 env[1225]: time="2025-07-12T00:36:25.569279620Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 12 00:36:26.084902 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1093638519.mount: Deactivated successfully. Jul 12 00:36:26.972143 env[1225]: time="2025-07-12T00:36:26.972075420Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:26.973909 env[1225]: time="2025-07-12T00:36:26.973880700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:26.975649 env[1225]: time="2025-07-12T00:36:26.975622500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:26.977640 env[1225]: time="2025-07-12T00:36:26.977613620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:26.978550 env[1225]: time="2025-07-12T00:36:26.978520980Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 12 00:36:26.979038 env[1225]: time="2025-07-12T00:36:26.979013860Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 12 00:36:27.409720 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount531652074.mount: Deactivated successfully. Jul 12 00:36:27.413646 env[1225]: time="2025-07-12T00:36:27.413603580Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:27.415413 env[1225]: time="2025-07-12T00:36:27.415371780Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:27.417015 env[1225]: time="2025-07-12T00:36:27.416980660Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:27.418206 env[1225]: time="2025-07-12T00:36:27.418177580Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:27.418771 env[1225]: time="2025-07-12T00:36:27.418741260Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 12 00:36:27.419346 env[1225]: time="2025-07-12T00:36:27.419315420Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 12 00:36:27.899136 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1994279399.mount: Deactivated successfully. Jul 12 00:36:29.667936 env[1225]: time="2025-07-12T00:36:29.667892660Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:29.673253 env[1225]: time="2025-07-12T00:36:29.673216380Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:29.675139 env[1225]: time="2025-07-12T00:36:29.675108140Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:29.677560 env[1225]: time="2025-07-12T00:36:29.677538180Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:29.678310 env[1225]: time="2025-07-12T00:36:29.678272940Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Jul 12 00:36:33.042300 systemd[1]: Stopped kubelet.service. Jul 12 00:36:33.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.044222 systemd[1]: Starting kubelet.service... Jul 12 00:36:33.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.046559 kernel: audit: type=1130 audit(1752280593.040:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.046642 kernel: audit: type=1131 audit(1752280593.040:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.066755 systemd[1]: Reloading. Jul 12 00:36:33.119245 /usr/lib/systemd/system-generators/torcx-generator[1562]: time="2025-07-12T00:36:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:36:33.119274 /usr/lib/systemd/system-generators/torcx-generator[1562]: time="2025-07-12T00:36:33Z" level=info msg="torcx already run" Jul 12 00:36:33.195617 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:36:33.195636 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:36:33.212374 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:36:33.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.266779 kernel: audit: type=1400 audit(1752280593.261:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.266823 kernel: audit: type=1400 audit(1752280593.262:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.266852 kernel: audit: type=1400 audit(1752280593.262:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270232 kernel: audit: type=1400 audit(1752280593.262:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270290 kernel: audit: type=1400 audit(1752280593.262:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.271927 kernel: audit: type=1400 audit(1752280593.262:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.273738 kernel: audit: type=1400 audit(1752280593.262:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275422 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit: BPF prog-id=43 op=LOAD Jul 12 00:36:33.264000 audit: BPF prog-id=38 op=UNLOAD Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit: BPF prog-id=44 op=LOAD Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit: BPF prog-id=45 op=LOAD Jul 12 00:36:33.267000 audit: BPF prog-id=39 op=UNLOAD Jul 12 00:36:33.267000 audit: BPF prog-id=40 op=UNLOAD Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit: BPF prog-id=46 op=LOAD Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit: BPF prog-id=47 op=LOAD Jul 12 00:36:33.270000 audit: BPF prog-id=27 op=UNLOAD Jul 12 00:36:33.270000 audit: BPF prog-id=28 op=UNLOAD Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.272000 audit: BPF prog-id=48 op=LOAD Jul 12 00:36:33.272000 audit: BPF prog-id=41 op=UNLOAD Jul 12 00:36:33.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit: BPF prog-id=49 op=LOAD Jul 12 00:36:33.275000 audit: BPF prog-id=29 op=UNLOAD Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit: BPF prog-id=50 op=LOAD Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.275000 audit: BPF prog-id=51 op=LOAD Jul 12 00:36:33.275000 audit: BPF prog-id=30 op=UNLOAD Jul 12 00:36:33.275000 audit: BPF prog-id=31 op=UNLOAD Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit: BPF prog-id=52 op=LOAD Jul 12 00:36:33.276000 audit: BPF prog-id=32 op=UNLOAD Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit: BPF prog-id=53 op=LOAD Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.276000 audit: BPF prog-id=54 op=LOAD Jul 12 00:36:33.276000 audit: BPF prog-id=33 op=UNLOAD Jul 12 00:36:33.276000 audit: BPF prog-id=34 op=UNLOAD Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit: BPF prog-id=55 op=LOAD Jul 12 00:36:33.278000 audit: BPF prog-id=37 op=UNLOAD Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.278000 audit: BPF prog-id=56 op=LOAD Jul 12 00:36:33.278000 audit: BPF prog-id=36 op=UNLOAD Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:33.279000 audit: BPF prog-id=57 op=LOAD Jul 12 00:36:33.279000 audit: BPF prog-id=35 op=UNLOAD Jul 12 00:36:33.298319 systemd[1]: Started kubelet.service. Jul 12 00:36:33.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.301218 systemd[1]: Stopping kubelet.service... Jul 12 00:36:33.301658 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:36:33.301820 systemd[1]: Stopped kubelet.service. Jul 12 00:36:33.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.303282 systemd[1]: Starting kubelet.service... Jul 12 00:36:33.396519 systemd[1]: Started kubelet.service. Jul 12 00:36:33.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:33.435363 kubelet[1607]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:36:33.435363 kubelet[1607]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 12 00:36:33.435363 kubelet[1607]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:36:33.435728 kubelet[1607]: I0712 00:36:33.435416 1607 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:36:34.051301 kubelet[1607]: I0712 00:36:34.051241 1607 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 12 00:36:34.051301 kubelet[1607]: I0712 00:36:34.051275 1607 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:36:34.051578 kubelet[1607]: I0712 00:36:34.051554 1607 server.go:934] "Client rotation is on, will bootstrap in background" Jul 12 00:36:34.101825 kubelet[1607]: E0712 00:36:34.101779 1607 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.113:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:34.103911 kubelet[1607]: I0712 00:36:34.103618 1607 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:36:34.109882 kubelet[1607]: E0712 00:36:34.109850 1607 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:36:34.109882 kubelet[1607]: I0712 00:36:34.109881 1607 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:36:34.115672 kubelet[1607]: I0712 00:36:34.115644 1607 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:36:34.116676 kubelet[1607]: I0712 00:36:34.116636 1607 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 12 00:36:34.118655 kubelet[1607]: I0712 00:36:34.118614 1607 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:36:34.118812 kubelet[1607]: I0712 00:36:34.118645 1607 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:36:34.118899 kubelet[1607]: I0712 00:36:34.118868 1607 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:36:34.118899 kubelet[1607]: I0712 00:36:34.118878 1607 container_manager_linux.go:300] "Creating device plugin manager" Jul 12 00:36:34.119133 kubelet[1607]: I0712 00:36:34.119103 1607 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:36:34.128310 kubelet[1607]: I0712 00:36:34.128277 1607 kubelet.go:408] "Attempting to sync node with API server" Jul 12 00:36:34.128310 kubelet[1607]: I0712 00:36:34.128317 1607 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:36:34.128437 kubelet[1607]: I0712 00:36:34.128345 1607 kubelet.go:314] "Adding apiserver pod source" Jul 12 00:36:34.128468 kubelet[1607]: I0712 00:36:34.128442 1607 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:36:34.148815 kubelet[1607]: I0712 00:36:34.148727 1607 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:36:34.149310 kubelet[1607]: W0712 00:36:34.149253 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.113:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:34.149400 kubelet[1607]: E0712 00:36:34.149319 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.113:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:34.149535 kubelet[1607]: W0712 00:36:34.149497 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.113:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:34.149640 kubelet[1607]: E0712 00:36:34.149620 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.113:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:34.149705 kubelet[1607]: I0712 00:36:34.149573 1607 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 12 00:36:34.151741 kubelet[1607]: W0712 00:36:34.151724 1607 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 12 00:36:34.152821 kubelet[1607]: I0712 00:36:34.152800 1607 server.go:1274] "Started kubelet" Jul 12 00:36:34.153298 kubelet[1607]: I0712 00:36:34.153266 1607 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:36:34.154110 kubelet[1607]: I0712 00:36:34.154048 1607 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:36:34.156810 kubelet[1607]: I0712 00:36:34.156686 1607 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:36:34.157324 kubelet[1607]: I0712 00:36:34.157300 1607 server.go:449] "Adding debug handlers to kubelet server" Jul 12 00:36:34.159000 audit[1607]: AVC avc: denied { mac_admin } for pid=1607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:34.159000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:36:34.159000 audit[1607]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400071f4d0 a1=4000b36d20 a2=400071f4a0 a3=25 items=0 ppid=1 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.159000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:36:34.159000 audit[1607]: AVC avc: denied { mac_admin } for pid=1607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:34.159000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:36:34.159000 audit[1607]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b34980 a1=4000b36d38 a2=400071f560 a3=25 items=0 ppid=1 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.159000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:36:34.161017 kubelet[1607]: I0712 00:36:34.160671 1607 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:36:34.161017 kubelet[1607]: I0712 00:36:34.160713 1607 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 12 00:36:34.161017 kubelet[1607]: I0712 00:36:34.160770 1607 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:36:34.161521 kubelet[1607]: I0712 00:36:34.161208 1607 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:36:34.162071 kubelet[1607]: I0712 00:36:34.162050 1607 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 12 00:36:34.162541 kubelet[1607]: I0712 00:36:34.162515 1607 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 12 00:36:34.162606 kubelet[1607]: I0712 00:36:34.162584 1607 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:36:34.162744 kubelet[1607]: E0712 00:36:34.162718 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:34.163144 kubelet[1607]: E0712 00:36:34.158446 1607 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.113:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.113:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185159ea99494fd4 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-12 00:36:34.15277154 +0000 UTC m=+0.752493601,LastTimestamp:2025-07-12 00:36:34.15277154 +0000 UTC m=+0.752493601,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 12 00:36:34.164136 kubelet[1607]: W0712 00:36:34.164086 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.113:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:34.164195 kubelet[1607]: E0712 00:36:34.164154 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.113:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:34.164238 kubelet[1607]: E0712 00:36:34.164217 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.113:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.113:6443: connect: connection refused" interval="200ms" Jul 12 00:36:34.162000 audit[1620]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.162000 audit[1620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe44bf950 a2=0 a3=1 items=0 ppid=1607 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:36:34.164549 kubelet[1607]: I0712 00:36:34.164416 1607 factory.go:221] Registration of the systemd container factory successfully Jul 12 00:36:34.164549 kubelet[1607]: I0712 00:36:34.164506 1607 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:36:34.164000 audit[1621]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.165714 kubelet[1607]: E0712 00:36:34.165655 1607 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:36:34.164000 audit[1621]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd96bf120 a2=0 a3=1 items=0 ppid=1607 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:36:34.166546 kubelet[1607]: I0712 00:36:34.166530 1607 factory.go:221] Registration of the containerd container factory successfully Jul 12 00:36:34.166000 audit[1624]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.166000 audit[1624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff6ad3f20 a2=0 a3=1 items=0 ppid=1607 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.166000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:36:34.171000 audit[1626]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.171000 audit[1626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd0555060 a2=0 a3=1 items=0 ppid=1607 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.171000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:36:34.176922 kubelet[1607]: I0712 00:36:34.176901 1607 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 12 00:36:34.176922 kubelet[1607]: I0712 00:36:34.176918 1607 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 12 00:36:34.177014 kubelet[1607]: I0712 00:36:34.176935 1607 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:36:34.178000 audit[1632]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.178000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff1b024f0 a2=0 a3=1 items=0 ppid=1607 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.178000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 12 00:36:34.180648 kubelet[1607]: I0712 00:36:34.180616 1607 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 12 00:36:34.180000 audit[1634]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:34.180000 audit[1634]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffce115d0 a2=0 a3=1 items=0 ppid=1607 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:36:34.181672 kubelet[1607]: I0712 00:36:34.181643 1607 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 12 00:36:34.181709 kubelet[1607]: I0712 00:36:34.181674 1607 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 12 00:36:34.181709 kubelet[1607]: I0712 00:36:34.181697 1607 kubelet.go:2321] "Starting kubelet main sync loop" Jul 12 00:36:34.181761 kubelet[1607]: E0712 00:36:34.181739 1607 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 12 00:36:34.180000 audit[1635]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.180000 audit[1635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffec071630 a2=0 a3=1 items=0 ppid=1607 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.180000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:36:34.181000 audit[1636]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:34.181000 audit[1636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdcbde410 a2=0 a3=1 items=0 ppid=1607 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.181000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:36:34.182000 audit[1637]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:34.182000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc4eb3990 a2=0 a3=1 items=0 ppid=1607 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.182000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:36:34.182000 audit[1638]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.182000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0a2f9d0 a2=0 a3=1 items=0 ppid=1607 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.182000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:36:34.183000 audit[1639]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:34.183000 audit[1639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff3f062b0 a2=0 a3=1 items=0 ppid=1607 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:36:34.183000 audit[1640]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:34.183000 audit[1640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff3dd3020 a2=0 a3=1 items=0 ppid=1607 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.183000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:36:34.262906 kubelet[1607]: E0712 00:36:34.262870 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:34.268521 kubelet[1607]: W0712 00:36:34.268403 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.113:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:34.268521 kubelet[1607]: E0712 00:36:34.268468 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.113:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:34.268627 kubelet[1607]: I0712 00:36:34.268582 1607 policy_none.go:49] "None policy: Start" Jul 12 00:36:34.269561 kubelet[1607]: I0712 00:36:34.269541 1607 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 12 00:36:34.269628 kubelet[1607]: I0712 00:36:34.269568 1607 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:36:34.275132 systemd[1]: Created slice kubepods.slice. Jul 12 00:36:34.280733 systemd[1]: Created slice kubepods-burstable.slice. Jul 12 00:36:34.281808 kubelet[1607]: E0712 00:36:34.281787 1607 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 12 00:36:34.282994 systemd[1]: Created slice kubepods-besteffort.slice. Jul 12 00:36:34.292076 kubelet[1607]: I0712 00:36:34.292051 1607 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 12 00:36:34.290000 audit[1607]: AVC avc: denied { mac_admin } for pid=1607 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:34.290000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:36:34.290000 audit[1607]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000055f20 a1=4000902db0 a2=4000055ec0 a3=25 items=0 ppid=1 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:34.290000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:36:34.293013 kubelet[1607]: I0712 00:36:34.292107 1607 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 12 00:36:34.293013 kubelet[1607]: I0712 00:36:34.292418 1607 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:36:34.293013 kubelet[1607]: I0712 00:36:34.292432 1607 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:36:34.293013 kubelet[1607]: I0712 00:36:34.292894 1607 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:36:34.294151 kubelet[1607]: E0712 00:36:34.294119 1607 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 12 00:36:34.365718 kubelet[1607]: E0712 00:36:34.365628 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.113:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.113:6443: connect: connection refused" interval="400ms" Jul 12 00:36:34.393604 kubelet[1607]: I0712 00:36:34.393582 1607 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 12 00:36:34.394210 kubelet[1607]: E0712 00:36:34.394179 1607 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.113:6443/api/v1/nodes\": dial tcp 10.0.0.113:6443: connect: connection refused" node="localhost" Jul 12 00:36:34.490526 systemd[1]: Created slice kubepods-burstable-pod8f5a2afcbdfd910fa891ede9aa7a1c18.slice. Jul 12 00:36:34.506267 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 12 00:36:34.509544 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 12 00:36:34.565225 kubelet[1607]: I0712 00:36:34.565163 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8f5a2afcbdfd910fa891ede9aa7a1c18-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f5a2afcbdfd910fa891ede9aa7a1c18\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:36:34.565556 kubelet[1607]: I0712 00:36:34.565246 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8f5a2afcbdfd910fa891ede9aa7a1c18-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f5a2afcbdfd910fa891ede9aa7a1c18\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:36:34.565556 kubelet[1607]: I0712 00:36:34.565265 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:34.565556 kubelet[1607]: I0712 00:36:34.565320 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:34.565556 kubelet[1607]: I0712 00:36:34.565342 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:34.565556 kubelet[1607]: I0712 00:36:34.565415 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:34.565681 kubelet[1607]: I0712 00:36:34.565433 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8f5a2afcbdfd910fa891ede9aa7a1c18-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8f5a2afcbdfd910fa891ede9aa7a1c18\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:36:34.565681 kubelet[1607]: I0712 00:36:34.565471 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:34.565681 kubelet[1607]: I0712 00:36:34.565485 1607 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 12 00:36:34.596390 kubelet[1607]: I0712 00:36:34.596349 1607 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 12 00:36:34.596730 kubelet[1607]: E0712 00:36:34.596695 1607 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.113:6443/api/v1/nodes\": dial tcp 10.0.0.113:6443: connect: connection refused" node="localhost" Jul 12 00:36:34.766146 kubelet[1607]: E0712 00:36:34.766076 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.113:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.113:6443: connect: connection refused" interval="800ms" Jul 12 00:36:34.804590 kubelet[1607]: E0712 00:36:34.804528 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:34.805273 env[1225]: time="2025-07-12T00:36:34.805216340Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8f5a2afcbdfd910fa891ede9aa7a1c18,Namespace:kube-system,Attempt:0,}" Jul 12 00:36:34.808362 kubelet[1607]: E0712 00:36:34.808331 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:34.808688 env[1225]: time="2025-07-12T00:36:34.808659660Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 12 00:36:34.811076 kubelet[1607]: E0712 00:36:34.811055 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:34.811501 env[1225]: time="2025-07-12T00:36:34.811468700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 12 00:36:34.998565 kubelet[1607]: I0712 00:36:34.998538 1607 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 12 00:36:34.999059 kubelet[1607]: E0712 00:36:34.999020 1607 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.113:6443/api/v1/nodes\": dial tcp 10.0.0.113:6443: connect: connection refused" node="localhost" Jul 12 00:36:35.243626 kubelet[1607]: W0712 00:36:35.243581 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.113:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:35.243765 kubelet[1607]: E0712 00:36:35.243628 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.113:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:35.288795 kubelet[1607]: W0712 00:36:35.288715 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.113:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:35.288795 kubelet[1607]: E0712 00:36:35.288780 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.113:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:35.388903 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount12986891.mount: Deactivated successfully. Jul 12 00:36:35.394074 env[1225]: time="2025-07-12T00:36:35.394037940Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.395365 env[1225]: time="2025-07-12T00:36:35.395325540Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.396156 env[1225]: time="2025-07-12T00:36:35.396126860Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.397145 env[1225]: time="2025-07-12T00:36:35.397107340Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.398577 env[1225]: time="2025-07-12T00:36:35.398553380Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.400115 env[1225]: time="2025-07-12T00:36:35.400071580Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.402477 env[1225]: time="2025-07-12T00:36:35.402446020Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.405520 env[1225]: time="2025-07-12T00:36:35.405488140Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.407775 env[1225]: time="2025-07-12T00:36:35.407746180Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.408448 env[1225]: time="2025-07-12T00:36:35.408425140Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.409173 env[1225]: time="2025-07-12T00:36:35.409132500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.410029 env[1225]: time="2025-07-12T00:36:35.409998660Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:35.436035 env[1225]: time="2025-07-12T00:36:35.435959220Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:35.436287 env[1225]: time="2025-07-12T00:36:35.436250820Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:35.436398 env[1225]: time="2025-07-12T00:36:35.436326780Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:35.436398 env[1225]: time="2025-07-12T00:36:35.436357940Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:35.436398 env[1225]: time="2025-07-12T00:36:35.436368500Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:35.436606 env[1225]: time="2025-07-12T00:36:35.436319180Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:35.436606 env[1225]: time="2025-07-12T00:36:35.436360180Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:35.436606 env[1225]: time="2025-07-12T00:36:35.436371900Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:35.436755 env[1225]: time="2025-07-12T00:36:35.436586380Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a8b09e65813b76dd607b2e2360e3c5e6bb37db9f596dc233d8b34376be012f0b pid=1670 runtime=io.containerd.runc.v2 Jul 12 00:36:35.436755 env[1225]: time="2025-07-12T00:36:35.436578180Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b4549a267f2ab5b27302ccba1684d1dd52f0c9ef7d35d95f5cd9575a65565a61 pid=1664 runtime=io.containerd.runc.v2 Jul 12 00:36:35.436932 env[1225]: time="2025-07-12T00:36:35.436897180Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:35.437620 env[1225]: time="2025-07-12T00:36:35.437188740Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b7e850adb7f015c0c20773ec53ae61feaab4bb7f89526a504403771d6adde37 pid=1665 runtime=io.containerd.runc.v2 Jul 12 00:36:35.451163 systemd[1]: Started cri-containerd-2b7e850adb7f015c0c20773ec53ae61feaab4bb7f89526a504403771d6adde37.scope. Jul 12 00:36:35.452177 systemd[1]: Started cri-containerd-a8b09e65813b76dd607b2e2360e3c5e6bb37db9f596dc233d8b34376be012f0b.scope. Jul 12 00:36:35.453095 systemd[1]: Started cri-containerd-b4549a267f2ab5b27302ccba1684d1dd52f0c9ef7d35d95f5cd9575a65565a61.scope. Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.496000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.497000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.497000 audit: BPF prog-id=58 op=LOAD Jul 12 00:36:35.497000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit: BPF prog-id=59 op=LOAD Jul 12 00:36:35.497000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623039653635383133623736646436303762326532333630653363 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623039653635383133623736646436303762326532333630653363 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit: BPF prog-id=60 op=LOAD Jul 12 00:36:35.498000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623039653635383133623736646436303762326532333630653363 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit: BPF prog-id=61 op=LOAD Jul 12 00:36:35.498000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623039653635383133623736646436303762326532333630653363 Jul 12 00:36:35.498000 audit: BPF prog-id=61 op=UNLOAD Jul 12 00:36:35.498000 audit: BPF prog-id=60 op=UNLOAD Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.498000 audit: BPF prog-id=62 op=LOAD Jul 12 00:36:35.498000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1670 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138623039653635383133623736646436303762326532333630653363 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1665 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262376538353061646237663031356330633230373733656335336165 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1665 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262376538353061646237663031356330633230373733656335336165 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit: BPF prog-id=63 op=LOAD Jul 12 00:36:35.499000 audit[1697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1665 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262376538353061646237663031356330633230373733656335336165 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit: BPF prog-id=64 op=LOAD Jul 12 00:36:35.499000 audit[1697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1665 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262376538353061646237663031356330633230373733656335336165 Jul 12 00:36:35.499000 audit: BPF prog-id=64 op=UNLOAD Jul 12 00:36:35.499000 audit: BPF prog-id=63 op=UNLOAD Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { perfmon } for pid=1697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit[1697]: AVC avc: denied { bpf } for pid=1697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.499000 audit: BPF prog-id=65 op=LOAD Jul 12 00:36:35.499000 audit[1697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1665 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262376538353061646237663031356330633230373733656335336165 Jul 12 00:36:35.511514 kubelet[1607]: W0712 00:36:35.511104 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.113:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:35.511514 kubelet[1607]: E0712 00:36:35.511191 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.113:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.513000 audit: BPF prog-id=66 op=LOAD Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1664 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353439613236376632616235623237333032636362613136383464 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1664 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353439613236376632616235623237333032636362613136383464 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit: BPF prog-id=67 op=LOAD Jul 12 00:36:35.514000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1664 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353439613236376632616235623237333032636362613136383464 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit: BPF prog-id=68 op=LOAD Jul 12 00:36:35.514000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1664 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353439613236376632616235623237333032636362613136383464 Jul 12 00:36:35.514000 audit: BPF prog-id=68 op=UNLOAD Jul 12 00:36:35.514000 audit: BPF prog-id=67 op=UNLOAD Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { perfmon } for pid=1694 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit[1694]: AVC avc: denied { bpf } for pid=1694 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.514000 audit: BPF prog-id=69 op=LOAD Jul 12 00:36:35.514000 audit[1694]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1664 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234353439613236376632616235623237333032636362613136383464 Jul 12 00:36:35.525806 env[1225]: time="2025-07-12T00:36:35.525755780Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"a8b09e65813b76dd607b2e2360e3c5e6bb37db9f596dc233d8b34376be012f0b\"" Jul 12 00:36:35.526805 kubelet[1607]: E0712 00:36:35.526769 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:35.531315 env[1225]: time="2025-07-12T00:36:35.531283060Z" level=info msg="CreateContainer within sandbox \"a8b09e65813b76dd607b2e2360e3c5e6bb37db9f596dc233d8b34376be012f0b\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 12 00:36:35.535495 env[1225]: time="2025-07-12T00:36:35.535451700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8f5a2afcbdfd910fa891ede9aa7a1c18,Namespace:kube-system,Attempt:0,} returns sandbox id \"2b7e850adb7f015c0c20773ec53ae61feaab4bb7f89526a504403771d6adde37\"" Jul 12 00:36:35.536059 kubelet[1607]: E0712 00:36:35.536032 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:35.540186 env[1225]: time="2025-07-12T00:36:35.539814420Z" level=info msg="CreateContainer within sandbox \"2b7e850adb7f015c0c20773ec53ae61feaab4bb7f89526a504403771d6adde37\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 12 00:36:35.548466 env[1225]: time="2025-07-12T00:36:35.548424420Z" level=info msg="CreateContainer within sandbox \"a8b09e65813b76dd607b2e2360e3c5e6bb37db9f596dc233d8b34376be012f0b\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"6eb22ba5ed4268c721a73048879e1c3d0b1ad30e82cefe79eb43bec69508fe40\"" Jul 12 00:36:35.549023 env[1225]: time="2025-07-12T00:36:35.548999460Z" level=info msg="StartContainer for \"6eb22ba5ed4268c721a73048879e1c3d0b1ad30e82cefe79eb43bec69508fe40\"" Jul 12 00:36:35.550944 env[1225]: time="2025-07-12T00:36:35.550903380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"b4549a267f2ab5b27302ccba1684d1dd52f0c9ef7d35d95f5cd9575a65565a61\"" Jul 12 00:36:35.551780 kubelet[1607]: E0712 00:36:35.551626 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:35.553253 env[1225]: time="2025-07-12T00:36:35.553217620Z" level=info msg="CreateContainer within sandbox \"b4549a267f2ab5b27302ccba1684d1dd52f0c9ef7d35d95f5cd9575a65565a61\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 12 00:36:35.554728 env[1225]: time="2025-07-12T00:36:35.554695940Z" level=info msg="CreateContainer within sandbox \"2b7e850adb7f015c0c20773ec53ae61feaab4bb7f89526a504403771d6adde37\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"10a2a5436c868ad3ebdc0d3735ac6fc219358ec552d4221a47398c181fb61347\"" Jul 12 00:36:35.555126 env[1225]: time="2025-07-12T00:36:35.555084660Z" level=info msg="StartContainer for \"10a2a5436c868ad3ebdc0d3735ac6fc219358ec552d4221a47398c181fb61347\"" Jul 12 00:36:35.563413 env[1225]: time="2025-07-12T00:36:35.563330460Z" level=info msg="CreateContainer within sandbox \"b4549a267f2ab5b27302ccba1684d1dd52f0c9ef7d35d95f5cd9575a65565a61\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"4ece6e865b130a07687dcee2d7180013da93f28d6be615ef71f85ad4e7bb560e\"" Jul 12 00:36:35.563741 kubelet[1607]: W0712 00:36:35.563335 1607 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.113:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.113:6443: connect: connection refused Jul 12 00:36:35.563741 kubelet[1607]: E0712 00:36:35.563534 1607 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.113:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.113:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:36:35.564141 env[1225]: time="2025-07-12T00:36:35.564025300Z" level=info msg="StartContainer for \"4ece6e865b130a07687dcee2d7180013da93f28d6be615ef71f85ad4e7bb560e\"" Jul 12 00:36:35.566722 kubelet[1607]: E0712 00:36:35.566672 1607 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.113:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.113:6443: connect: connection refused" interval="1.6s" Jul 12 00:36:35.568268 systemd[1]: Started cri-containerd-6eb22ba5ed4268c721a73048879e1c3d0b1ad30e82cefe79eb43bec69508fe40.scope. Jul 12 00:36:35.578777 systemd[1]: Started cri-containerd-10a2a5436c868ad3ebdc0d3735ac6fc219358ec552d4221a47398c181fb61347.scope. Jul 12 00:36:35.609112 systemd[1]: Started cri-containerd-4ece6e865b130a07687dcee2d7180013da93f28d6be615ef71f85ad4e7bb560e.scope. Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.619000 audit: BPF prog-id=70 op=LOAD Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1670 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623232626135656434323638633732316137333034383837396531 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1670 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623232626135656434323638633732316137333034383837396531 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit: BPF prog-id=71 op=LOAD Jul 12 00:36:35.620000 audit[1778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1670 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623232626135656434323638633732316137333034383837396531 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit: BPF prog-id=72 op=LOAD Jul 12 00:36:35.620000 audit[1778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1670 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623232626135656434323638633732316137333034383837396531 Jul 12 00:36:35.620000 audit: BPF prog-id=72 op=UNLOAD Jul 12 00:36:35.620000 audit: BPF prog-id=71 op=UNLOAD Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.620000 audit: BPF prog-id=73 op=LOAD Jul 12 00:36:35.620000 audit[1778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1670 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665623232626135656434323638633732316137333034383837396531 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.626000 audit: BPF prog-id=74 op=LOAD Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1665 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613261353433366338363861643365626463306433373335616336 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1665 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613261353433366338363861643365626463306433373335616336 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit: BPF prog-id=75 op=LOAD Jul 12 00:36:35.627000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1665 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613261353433366338363861643365626463306433373335616336 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit: BPF prog-id=76 op=LOAD Jul 12 00:36:35.627000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1665 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613261353433366338363861643365626463306433373335616336 Jul 12 00:36:35.627000 audit: BPF prog-id=76 op=UNLOAD Jul 12 00:36:35.627000 audit: BPF prog-id=75 op=UNLOAD Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { perfmon } for pid=1793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit[1793]: AVC avc: denied { bpf } for pid=1793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.627000 audit: BPF prog-id=77 op=LOAD Jul 12 00:36:35.627000 audit[1793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1665 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613261353433366338363861643365626463306433373335616336 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit: BPF prog-id=78 op=LOAD Jul 12 00:36:35.633000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1664 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636536653836356231333061303736383764636565326437313830 Jul 12 00:36:35.633000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.633000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1664 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636536653836356231333061303736383764636565326437313830 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit: BPF prog-id=79 op=LOAD Jul 12 00:36:35.634000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1664 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636536653836356231333061303736383764636565326437313830 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit: BPF prog-id=80 op=LOAD Jul 12 00:36:35.634000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1664 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636536653836356231333061303736383764636565326437313830 Jul 12 00:36:35.634000 audit: BPF prog-id=80 op=UNLOAD Jul 12 00:36:35.634000 audit: BPF prog-id=79 op=UNLOAD Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:35.634000 audit: BPF prog-id=81 op=LOAD Jul 12 00:36:35.634000 audit[1818]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1664 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:35.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465636536653836356231333061303736383764636565326437313830 Jul 12 00:36:35.645159 env[1225]: time="2025-07-12T00:36:35.645113500Z" level=info msg="StartContainer for \"6eb22ba5ed4268c721a73048879e1c3d0b1ad30e82cefe79eb43bec69508fe40\" returns successfully" Jul 12 00:36:35.665370 env[1225]: time="2025-07-12T00:36:35.665325660Z" level=info msg="StartContainer for \"10a2a5436c868ad3ebdc0d3735ac6fc219358ec552d4221a47398c181fb61347\" returns successfully" Jul 12 00:36:35.682446 env[1225]: time="2025-07-12T00:36:35.682057380Z" level=info msg="StartContainer for \"4ece6e865b130a07687dcee2d7180013da93f28d6be615ef71f85ad4e7bb560e\" returns successfully" Jul 12 00:36:35.801179 kubelet[1607]: I0712 00:36:35.801069 1607 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 12 00:36:35.805535 kubelet[1607]: E0712 00:36:35.805491 1607 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.113:6443/api/v1/nodes\": dial tcp 10.0.0.113:6443: connect: connection refused" node="localhost" Jul 12 00:36:36.192333 kubelet[1607]: E0712 00:36:36.192090 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:36.192954 kubelet[1607]: E0712 00:36:36.192889 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:36.193785 kubelet[1607]: E0712 00:36:36.193762 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:37.040000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:37.040000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004d36c60 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:36:37.040000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:37.040000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:36:37.040000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4005b3a580 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:36:37.040000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:36:37.043000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:37.043000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4004d36cc0 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:36:37.043000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:36:37.046000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7312 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:37.046000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=5e a1=4004f7ee40 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:36:37.046000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:36:37.058000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:37.058000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=4004f7f590 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:36:37.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:36:37.058000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:37.058000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=4003e7e1c0 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:36:37.058000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:36:37.171323 kubelet[1607]: E0712 00:36:37.171268 1607 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 12 00:36:37.194690 kubelet[1607]: E0712 00:36:37.194661 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:37.237421 kubelet[1607]: E0712 00:36:37.237366 1607 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:37.407524 kubelet[1607]: I0712 00:36:37.407435 1607 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 12 00:36:37.414316 kubelet[1607]: I0712 00:36:37.414283 1607 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 12 00:36:37.414468 kubelet[1607]: E0712 00:36:37.414450 1607 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 12 00:36:37.421568 kubelet[1607]: E0712 00:36:37.421535 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:37.521959 kubelet[1607]: E0712 00:36:37.521932 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:37.622819 kubelet[1607]: E0712 00:36:37.622790 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:37.723759 kubelet[1607]: E0712 00:36:37.723731 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:37.824497 kubelet[1607]: E0712 00:36:37.824463 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:37.925241 kubelet[1607]: E0712 00:36:37.925210 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:38.026099 kubelet[1607]: E0712 00:36:38.025999 1607 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:38.131297 kubelet[1607]: I0712 00:36:38.131267 1607 apiserver.go:52] "Watching apiserver" Jul 12 00:36:38.163275 kubelet[1607]: I0712 00:36:38.163240 1607 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 12 00:36:38.444000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:38.446879 kernel: kauditd_printk_skb: 577 callbacks suppressed Jul 12 00:36:38.446953 kernel: audit: type=1400 audit(1752280598.444:558): avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:38.444000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000377c80 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:38.453120 kernel: audit: type=1300 audit(1752280598.444:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000377c80 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:38.453206 kernel: audit: type=1327 audit(1752280598.444:558): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:38.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:38.444000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:38.458945 kernel: audit: type=1400 audit(1752280598.444:559): avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:38.459007 kernel: audit: type=1300 audit(1752280598.444:559): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003f4060 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:38.444000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40003f4060 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:38.444000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:38.465942 kernel: audit: type=1327 audit(1752280598.444:559): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:39.369172 systemd[1]: Reloading. Jul 12 00:36:39.414427 /usr/lib/systemd/system-generators/torcx-generator[1908]: time="2025-07-12T00:36:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:36:39.414457 /usr/lib/systemd/system-generators/torcx-generator[1908]: time="2025-07-12T00:36:39Z" level=info msg="torcx already run" Jul 12 00:36:39.471079 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:36:39.471108 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:36:39.490077 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.557229 kernel: audit: type=1400 audit(1752280599.552:560): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.557282 kernel: audit: type=1400 audit(1752280599.552:561): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.557309 kernel: audit: type=1400 audit(1752280599.552:562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560677 kernel: audit: type=1400 audit(1752280599.552:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit: BPF prog-id=82 op=LOAD Jul 12 00:36:39.554000 audit: BPF prog-id=43 op=UNLOAD Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit: BPF prog-id=83 op=LOAD Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.557000 audit: BPF prog-id=84 op=LOAD Jul 12 00:36:39.557000 audit: BPF prog-id=44 op=UNLOAD Jul 12 00:36:39.557000 audit: BPF prog-id=45 op=UNLOAD Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit: BPF prog-id=85 op=LOAD Jul 12 00:36:39.559000 audit: BPF prog-id=59 op=UNLOAD Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit: BPF prog-id=86 op=LOAD Jul 12 00:36:39.559000 audit: BPF prog-id=78 op=UNLOAD Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit: BPF prog-id=87 op=LOAD Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit: BPF prog-id=88 op=LOAD Jul 12 00:36:39.560000 audit: BPF prog-id=46 op=UNLOAD Jul 12 00:36:39.560000 audit: BPF prog-id=47 op=UNLOAD Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit: BPF prog-id=89 op=LOAD Jul 12 00:36:39.561000 audit: BPF prog-id=58 op=UNLOAD Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.561000 audit: BPF prog-id=90 op=LOAD Jul 12 00:36:39.561000 audit: BPF prog-id=70 op=UNLOAD Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.562000 audit: BPF prog-id=91 op=LOAD Jul 12 00:36:39.562000 audit: BPF prog-id=48 op=UNLOAD Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit: BPF prog-id=92 op=LOAD Jul 12 00:36:39.563000 audit: BPF prog-id=49 op=UNLOAD Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit: BPF prog-id=93 op=LOAD Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.563000 audit: BPF prog-id=94 op=LOAD Jul 12 00:36:39.563000 audit: BPF prog-id=50 op=UNLOAD Jul 12 00:36:39.563000 audit: BPF prog-id=51 op=UNLOAD Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit: BPF prog-id=95 op=LOAD Jul 12 00:36:39.564000 audit: BPF prog-id=66 op=UNLOAD Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit: BPF prog-id=96 op=LOAD Jul 12 00:36:39.565000 audit: BPF prog-id=52 op=UNLOAD Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit: BPF prog-id=97 op=LOAD Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.565000 audit: BPF prog-id=98 op=LOAD Jul 12 00:36:39.565000 audit: BPF prog-id=53 op=UNLOAD Jul 12 00:36:39.565000 audit: BPF prog-id=54 op=UNLOAD Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit: BPF prog-id=99 op=LOAD Jul 12 00:36:39.567000 audit: BPF prog-id=55 op=UNLOAD Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.567000 audit: BPF prog-id=100 op=LOAD Jul 12 00:36:39.567000 audit: BPF prog-id=56 op=UNLOAD Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.568000 audit: BPF prog-id=101 op=LOAD Jul 12 00:36:39.568000 audit: BPF prog-id=74 op=UNLOAD Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.569000 audit: BPF prog-id=102 op=LOAD Jul 12 00:36:39.569000 audit: BPF prog-id=57 op=UNLOAD Jul 12 00:36:39.587441 systemd[1]: Stopping kubelet.service... Jul 12 00:36:39.611694 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:36:39.611897 systemd[1]: Stopped kubelet.service. Jul 12 00:36:39.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:39.611955 systemd[1]: kubelet.service: Consumed 1.093s CPU time. Jul 12 00:36:39.613778 systemd[1]: Starting kubelet.service... Jul 12 00:36:39.716359 systemd[1]: Started kubelet.service. Jul 12 00:36:39.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:39.758420 kubelet[1948]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:36:39.758798 kubelet[1948]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 12 00:36:39.758846 kubelet[1948]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:36:39.759008 kubelet[1948]: I0712 00:36:39.758981 1948 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:36:39.768662 kubelet[1948]: I0712 00:36:39.767446 1948 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 12 00:36:39.768662 kubelet[1948]: I0712 00:36:39.767798 1948 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:36:39.768662 kubelet[1948]: I0712 00:36:39.768219 1948 server.go:934] "Client rotation is on, will bootstrap in background" Jul 12 00:36:39.769884 kubelet[1948]: I0712 00:36:39.769863 1948 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 12 00:36:39.773449 kubelet[1948]: I0712 00:36:39.773412 1948 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:36:39.778627 kubelet[1948]: E0712 00:36:39.778593 1948 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:36:39.778627 kubelet[1948]: I0712 00:36:39.778624 1948 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:36:39.780957 kubelet[1948]: I0712 00:36:39.780940 1948 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:36:39.781057 kubelet[1948]: I0712 00:36:39.781047 1948 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 12 00:36:39.781180 kubelet[1948]: I0712 00:36:39.781157 1948 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:36:39.781338 kubelet[1948]: I0712 00:36:39.781183 1948 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:36:39.781429 kubelet[1948]: I0712 00:36:39.781346 1948 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:36:39.781429 kubelet[1948]: I0712 00:36:39.781355 1948 container_manager_linux.go:300] "Creating device plugin manager" Jul 12 00:36:39.781429 kubelet[1948]: I0712 00:36:39.781403 1948 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:36:39.781512 kubelet[1948]: I0712 00:36:39.781501 1948 kubelet.go:408] "Attempting to sync node with API server" Jul 12 00:36:39.781537 kubelet[1948]: I0712 00:36:39.781516 1948 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:36:39.781537 kubelet[1948]: I0712 00:36:39.781536 1948 kubelet.go:314] "Adding apiserver pod source" Jul 12 00:36:39.781578 kubelet[1948]: I0712 00:36:39.781553 1948 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:36:39.782010 kubelet[1948]: I0712 00:36:39.781972 1948 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:36:39.783619 kubelet[1948]: I0712 00:36:39.783597 1948 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 12 00:36:39.784030 kubelet[1948]: I0712 00:36:39.784015 1948 server.go:1274] "Started kubelet" Jul 12 00:36:39.784974 kubelet[1948]: I0712 00:36:39.784747 1948 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:36:39.785052 kubelet[1948]: I0712 00:36:39.785034 1948 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:36:39.785356 kubelet[1948]: I0712 00:36:39.785290 1948 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:36:39.784000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.784000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:36:39.784000 audit[1948]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400086d620 a1=4000057f80 a2=400086d5f0 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:39.784000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:36:39.784000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.784000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:36:39.784000 audit[1948]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400042faa0 a1=4000057f98 a2=400086d6b0 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:39.784000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:36:39.786270 kubelet[1948]: I0712 00:36:39.785873 1948 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:36:39.786270 kubelet[1948]: I0712 00:36:39.785918 1948 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 12 00:36:39.786270 kubelet[1948]: I0712 00:36:39.785940 1948 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:36:39.786270 kubelet[1948]: I0712 00:36:39.786094 1948 server.go:449] "Adding debug handlers to kubelet server" Jul 12 00:36:39.801670 kubelet[1948]: I0712 00:36:39.801608 1948 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:36:39.802307 kubelet[1948]: I0712 00:36:39.802284 1948 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 12 00:36:39.802678 kubelet[1948]: E0712 00:36:39.802641 1948 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:36:39.803077 kubelet[1948]: I0712 00:36:39.803055 1948 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 12 00:36:39.803206 kubelet[1948]: I0712 00:36:39.803192 1948 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:36:39.806923 kubelet[1948]: I0712 00:36:39.806901 1948 factory.go:221] Registration of the systemd container factory successfully Jul 12 00:36:39.807256 kubelet[1948]: I0712 00:36:39.807208 1948 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:36:39.808315 kubelet[1948]: E0712 00:36:39.808291 1948 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:36:39.809602 kubelet[1948]: I0712 00:36:39.809577 1948 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 12 00:36:39.809898 kubelet[1948]: I0712 00:36:39.809874 1948 factory.go:221] Registration of the containerd container factory successfully Jul 12 00:36:39.810938 kubelet[1948]: I0712 00:36:39.810910 1948 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 12 00:36:39.810938 kubelet[1948]: I0712 00:36:39.810940 1948 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 12 00:36:39.811040 kubelet[1948]: I0712 00:36:39.810958 1948 kubelet.go:2321] "Starting kubelet main sync loop" Jul 12 00:36:39.811040 kubelet[1948]: E0712 00:36:39.811003 1948 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 12 00:36:39.838458 kubelet[1948]: I0712 00:36:39.838434 1948 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 12 00:36:39.838458 kubelet[1948]: I0712 00:36:39.838452 1948 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 12 00:36:39.838656 kubelet[1948]: I0712 00:36:39.838483 1948 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:36:39.838691 kubelet[1948]: I0712 00:36:39.838657 1948 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 12 00:36:39.838691 kubelet[1948]: I0712 00:36:39.838669 1948 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 12 00:36:39.838691 kubelet[1948]: I0712 00:36:39.838686 1948 policy_none.go:49] "None policy: Start" Jul 12 00:36:39.839220 kubelet[1948]: I0712 00:36:39.839205 1948 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 12 00:36:39.839283 kubelet[1948]: I0712 00:36:39.839226 1948 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:36:39.839343 kubelet[1948]: I0712 00:36:39.839331 1948 state_mem.go:75] "Updated machine memory state" Jul 12 00:36:39.845400 kubelet[1948]: I0712 00:36:39.845364 1948 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 12 00:36:39.844000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:39.844000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:36:39.844000 audit[1948]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007ba270 a1=4000efe4c8 a2=40007ba240 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:39.844000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:36:39.845725 kubelet[1948]: I0712 00:36:39.845441 1948 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 12 00:36:39.845725 kubelet[1948]: I0712 00:36:39.845593 1948 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:36:39.845725 kubelet[1948]: I0712 00:36:39.845604 1948 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:36:39.845812 kubelet[1948]: I0712 00:36:39.845755 1948 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:36:39.949482 kubelet[1948]: I0712 00:36:39.949442 1948 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 12 00:36:39.955947 kubelet[1948]: I0712 00:36:39.955910 1948 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 12 00:36:39.956049 kubelet[1948]: I0712 00:36:39.955985 1948 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 12 00:36:40.004550 kubelet[1948]: I0712 00:36:40.004507 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:40.004550 kubelet[1948]: I0712 00:36:40.004541 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:40.004719 kubelet[1948]: I0712 00:36:40.004574 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:40.004719 kubelet[1948]: I0712 00:36:40.004596 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8f5a2afcbdfd910fa891ede9aa7a1c18-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8f5a2afcbdfd910fa891ede9aa7a1c18\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:36:40.004719 kubelet[1948]: I0712 00:36:40.004613 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:40.004719 kubelet[1948]: I0712 00:36:40.004637 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:36:40.004719 kubelet[1948]: I0712 00:36:40.004654 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 12 00:36:40.004838 kubelet[1948]: I0712 00:36:40.004669 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8f5a2afcbdfd910fa891ede9aa7a1c18-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f5a2afcbdfd910fa891ede9aa7a1c18\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:36:40.004838 kubelet[1948]: I0712 00:36:40.004706 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8f5a2afcbdfd910fa891ede9aa7a1c18-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8f5a2afcbdfd910fa891ede9aa7a1c18\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:36:40.219661 kubelet[1948]: E0712 00:36:40.219619 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:40.219661 kubelet[1948]: E0712 00:36:40.219636 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:40.219858 kubelet[1948]: E0712 00:36:40.219679 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:40.325000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 12 00:36:40.325000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001090f80 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:40.325000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:40.782782 kubelet[1948]: I0712 00:36:40.782745 1948 apiserver.go:52] "Watching apiserver" Jul 12 00:36:40.803720 kubelet[1948]: I0712 00:36:40.803686 1948 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 12 00:36:40.824073 kubelet[1948]: E0712 00:36:40.824039 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:40.824185 kubelet[1948]: E0712 00:36:40.824155 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:40.824217 kubelet[1948]: E0712 00:36:40.824195 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:40.841710 kubelet[1948]: I0712 00:36:40.841648 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.8416199 podStartE2EDuration="1.8416199s" podCreationTimestamp="2025-07-12 00:36:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:36:40.84119858 +0000 UTC m=+1.119381841" watchObservedRunningTime="2025-07-12 00:36:40.8416199 +0000 UTC m=+1.119803161" Jul 12 00:36:40.848217 kubelet[1948]: I0712 00:36:40.848150 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.84813982 podStartE2EDuration="1.84813982s" podCreationTimestamp="2025-07-12 00:36:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:36:40.8479323 +0000 UTC m=+1.126115561" watchObservedRunningTime="2025-07-12 00:36:40.84813982 +0000 UTC m=+1.126323081" Jul 12 00:36:40.854415 kubelet[1948]: I0712 00:36:40.853898 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.8538863399999999 podStartE2EDuration="1.85388634s" podCreationTimestamp="2025-07-12 00:36:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:36:40.85379374 +0000 UTC m=+1.131977001" watchObservedRunningTime="2025-07-12 00:36:40.85388634 +0000 UTC m=+1.132069601" Jul 12 00:36:41.826132 kubelet[1948]: E0712 00:36:41.826086 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:43.076000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:43.076000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001337cc0 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:43.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:43.079000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:43.079000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001337e80 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:43.079000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:43.079000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:43.079000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001337ec0 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:43.079000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:43.080000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:36:43.080000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014c3de0 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:36:43.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:36:44.049965 kubelet[1948]: I0712 00:36:44.049926 1948 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 12 00:36:44.050368 env[1225]: time="2025-07-12T00:36:44.050233660Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 12 00:36:44.050571 kubelet[1948]: I0712 00:36:44.050412 1948 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 12 00:36:44.397747 kubelet[1948]: E0712 00:36:44.397649 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:44.862392 systemd[1]: Created slice kubepods-besteffort-podda086ebb_288c_4ea9_8e12_5a787845f943.slice. Jul 12 00:36:44.940819 kubelet[1948]: I0712 00:36:44.940780 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/da086ebb-288c-4ea9-8e12-5a787845f943-kube-proxy\") pod \"kube-proxy-hwwkk\" (UID: \"da086ebb-288c-4ea9-8e12-5a787845f943\") " pod="kube-system/kube-proxy-hwwkk" Jul 12 00:36:44.940819 kubelet[1948]: I0712 00:36:44.940824 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/da086ebb-288c-4ea9-8e12-5a787845f943-xtables-lock\") pod \"kube-proxy-hwwkk\" (UID: \"da086ebb-288c-4ea9-8e12-5a787845f943\") " pod="kube-system/kube-proxy-hwwkk" Jul 12 00:36:44.941061 kubelet[1948]: I0712 00:36:44.940873 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/da086ebb-288c-4ea9-8e12-5a787845f943-lib-modules\") pod \"kube-proxy-hwwkk\" (UID: \"da086ebb-288c-4ea9-8e12-5a787845f943\") " pod="kube-system/kube-proxy-hwwkk" Jul 12 00:36:44.941061 kubelet[1948]: I0712 00:36:44.940968 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2ls26\" (UniqueName: \"kubernetes.io/projected/da086ebb-288c-4ea9-8e12-5a787845f943-kube-api-access-2ls26\") pod \"kube-proxy-hwwkk\" (UID: \"da086ebb-288c-4ea9-8e12-5a787845f943\") " pod="kube-system/kube-proxy-hwwkk" Jul 12 00:36:45.049361 kubelet[1948]: I0712 00:36:45.049327 1948 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 12 00:36:45.081223 kubelet[1948]: E0712 00:36:45.081187 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:45.164329 systemd[1]: Created slice kubepods-besteffort-pod75fb23b1_7fdb_4264_9dc3_01f84a7f5490.slice. Jul 12 00:36:45.171771 kubelet[1948]: E0712 00:36:45.171737 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:45.172406 env[1225]: time="2025-07-12T00:36:45.172355860Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-hwwkk,Uid:da086ebb-288c-4ea9-8e12-5a787845f943,Namespace:kube-system,Attempt:0,}" Jul 12 00:36:45.190339 env[1225]: time="2025-07-12T00:36:45.190269540Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:45.190489 env[1225]: time="2025-07-12T00:36:45.190348580Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:45.190489 env[1225]: time="2025-07-12T00:36:45.190376060Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:45.190636 env[1225]: time="2025-07-12T00:36:45.190607060Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3f3617f62245736ab5b1300f9f09ea4c5a0305d70803692a0415abf4b49d6098 pid=2005 runtime=io.containerd.runc.v2 Jul 12 00:36:45.200651 systemd[1]: Started cri-containerd-3f3617f62245736ab5b1300f9f09ea4c5a0305d70803692a0415abf4b49d6098.scope. Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224534 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 12 00:36:45.224593 kernel: audit: type=1400 audit(1752280605.222:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.227861 kernel: audit: type=1400 audit(1752280605.222:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.227944 kernel: audit: type=1400 audit(1752280605.222:816): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.229495 kernel: audit: type=1400 audit(1752280605.222:817): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.231268 kernel: audit: type=1400 audit(1752280605.222:818): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.233331 kernel: audit: type=1400 audit(1752280605.222:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.235227 kernel: audit: type=1400 audit(1752280605.222:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.239092 kernel: audit: type=1400 audit(1752280605.222:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.239162 kernel: audit: type=1400 audit(1752280605.222:822): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.242255 kubelet[1948]: I0712 00:36:45.242216 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9klqs\" (UniqueName: \"kubernetes.io/projected/75fb23b1-7fdb-4264-9dc3-01f84a7f5490-kube-api-access-9klqs\") pod \"tigera-operator-5bf8dfcb4-w652x\" (UID: \"75fb23b1-7fdb-4264-9dc3-01f84a7f5490\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-w652x" Jul 12 00:36:45.242499 kubelet[1948]: I0712 00:36:45.242262 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/75fb23b1-7fdb-4264-9dc3-01f84a7f5490-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-w652x\" (UID: \"75fb23b1-7fdb-4264-9dc3-01f84a7f5490\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-w652x" Jul 12 00:36:45.243284 kernel: audit: type=1400 audit(1752280605.223:823): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit: BPF prog-id=103 op=LOAD Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2005 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366333631376636323234353733366162356231333030663966303965 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2005 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366333631376636323234353733366162356231333030663966303965 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.223000 audit: BPF prog-id=104 op=LOAD Jul 12 00:36:45.223000 audit[2014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2005 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366333631376636323234353733366162356231333030663966303965 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.224000 audit: BPF prog-id=105 op=LOAD Jul 12 00:36:45.224000 audit[2014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2005 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366333631376636323234353733366162356231333030663966303965 Jul 12 00:36:45.226000 audit: BPF prog-id=105 op=UNLOAD Jul 12 00:36:45.226000 audit: BPF prog-id=104 op=UNLOAD Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { perfmon } for pid=2014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit[2014]: AVC avc: denied { bpf } for pid=2014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.226000 audit: BPF prog-id=106 op=LOAD Jul 12 00:36:45.226000 audit[2014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2005 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366333631376636323234353733366162356231333030663966303965 Jul 12 00:36:45.250406 env[1225]: time="2025-07-12T00:36:45.250123700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-hwwkk,Uid:da086ebb-288c-4ea9-8e12-5a787845f943,Namespace:kube-system,Attempt:0,} returns sandbox id \"3f3617f62245736ab5b1300f9f09ea4c5a0305d70803692a0415abf4b49d6098\"" Jul 12 00:36:45.250906 kubelet[1948]: E0712 00:36:45.250887 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:45.253148 env[1225]: time="2025-07-12T00:36:45.252933780Z" level=info msg="CreateContainer within sandbox \"3f3617f62245736ab5b1300f9f09ea4c5a0305d70803692a0415abf4b49d6098\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 12 00:36:45.266728 env[1225]: time="2025-07-12T00:36:45.266678100Z" level=info msg="CreateContainer within sandbox \"3f3617f62245736ab5b1300f9f09ea4c5a0305d70803692a0415abf4b49d6098\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ac6fafb37bcd900574e7bdc6b6c17fe5212e8a0746b5a5668d7dc28b421af905\"" Jul 12 00:36:45.269308 env[1225]: time="2025-07-12T00:36:45.269263380Z" level=info msg="StartContainer for \"ac6fafb37bcd900574e7bdc6b6c17fe5212e8a0746b5a5668d7dc28b421af905\"" Jul 12 00:36:45.285475 systemd[1]: Started cri-containerd-ac6fafb37bcd900574e7bdc6b6c17fe5212e8a0746b5a5668d7dc28b421af905.scope. Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163366661666233376263643930303537346537626463366236633137 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.305000 audit: BPF prog-id=107 op=LOAD Jul 12 00:36:45.305000 audit[2046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163366661666233376263643930303537346537626463366236633137 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit: BPF prog-id=108 op=LOAD Jul 12 00:36:45.306000 audit[2046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163366661666233376263643930303537346537626463366236633137 Jul 12 00:36:45.306000 audit: BPF prog-id=108 op=UNLOAD Jul 12 00:36:45.306000 audit: BPF prog-id=107 op=UNLOAD Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { perfmon } for pid=2046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit[2046]: AVC avc: denied { bpf } for pid=2046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.306000 audit: BPF prog-id=109 op=LOAD Jul 12 00:36:45.306000 audit[2046]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2005 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163366661666233376263643930303537346537626463366236633137 Jul 12 00:36:45.323164 env[1225]: time="2025-07-12T00:36:45.323112860Z" level=info msg="StartContainer for \"ac6fafb37bcd900574e7bdc6b6c17fe5212e8a0746b5a5668d7dc28b421af905\" returns successfully" Jul 12 00:36:45.467513 env[1225]: time="2025-07-12T00:36:45.467474660Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-w652x,Uid:75fb23b1-7fdb-4264-9dc3-01f84a7f5490,Namespace:tigera-operator,Attempt:0,}" Jul 12 00:36:45.481020 env[1225]: time="2025-07-12T00:36:45.480822460Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:45.481020 env[1225]: time="2025-07-12T00:36:45.480871820Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:45.481020 env[1225]: time="2025-07-12T00:36:45.480884940Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:45.481250 env[1225]: time="2025-07-12T00:36:45.481048980Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aa77d0b67a2e4ea77e709d1dd3fd89ac84aae4d22f8734ebf74995c2cef0c249 pid=2092 runtime=io.containerd.runc.v2 Jul 12 00:36:45.491490 systemd[1]: Started cri-containerd-aa77d0b67a2e4ea77e709d1dd3fd89ac84aae4d22f8734ebf74995c2cef0c249.scope. Jul 12 00:36:45.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit: BPF prog-id=110 op=LOAD Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2092 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161373764306236376132653465613737653730396431646433666438 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2092 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161373764306236376132653465613737653730396431646433666438 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit: BPF prog-id=111 op=LOAD Jul 12 00:36:45.513000 audit[2101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2092 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161373764306236376132653465613737653730396431646433666438 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.513000 audit: BPF prog-id=112 op=LOAD Jul 12 00:36:45.513000 audit[2101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2092 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161373764306236376132653465613737653730396431646433666438 Jul 12 00:36:45.513000 audit: BPF prog-id=112 op=UNLOAD Jul 12 00:36:45.513000 audit: BPF prog-id=111 op=UNLOAD Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { perfmon } for pid=2101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit[2101]: AVC avc: denied { bpf } for pid=2101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:45.514000 audit: BPF prog-id=113 op=LOAD Jul 12 00:36:45.514000 audit[2101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2092 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161373764306236376132653465613737653730396431646433666438 Jul 12 00:36:45.533677 env[1225]: time="2025-07-12T00:36:45.533620620Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-w652x,Uid:75fb23b1-7fdb-4264-9dc3-01f84a7f5490,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"aa77d0b67a2e4ea77e709d1dd3fd89ac84aae4d22f8734ebf74995c2cef0c249\"" Jul 12 00:36:45.536692 env[1225]: time="2025-07-12T00:36:45.536654540Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 12 00:36:45.546000 audit[2151]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.546000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe313e440 a2=0 a3=1 items=0 ppid=2057 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:36:45.547000 audit[2152]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.547000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff2047d30 a2=0 a3=1 items=0 ppid=2057 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.547000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:36:45.548000 audit[2154]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.548000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc92fcf20 a2=0 a3=1 items=0 ppid=2057 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.548000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:36:45.548000 audit[2153]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.548000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd241f4c0 a2=0 a3=1 items=0 ppid=2057 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.548000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:36:45.549000 audit[2155]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.549000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc0e58360 a2=0 a3=1 items=0 ppid=2057 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:36:45.551000 audit[2156]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.551000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd9ca1c40 a2=0 a3=1 items=0 ppid=2057 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.551000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:36:45.649000 audit[2157]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.649000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd78d0200 a2=0 a3=1 items=0 ppid=2057 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.649000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:36:45.654000 audit[2159]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.654000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc1a13060 a2=0 a3=1 items=0 ppid=2057 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 12 00:36:45.657000 audit[2162]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.657000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe09d0a60 a2=0 a3=1 items=0 ppid=2057 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 12 00:36:45.658000 audit[2163]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.658000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1badd70 a2=0 a3=1 items=0 ppid=2057 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:36:45.660000 audit[2165]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.660000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcaef79f0 a2=0 a3=1 items=0 ppid=2057 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.660000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:36:45.661000 audit[2166]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.661000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff0792a60 a2=0 a3=1 items=0 ppid=2057 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.661000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:36:45.664000 audit[2168]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.664000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffda94c330 a2=0 a3=1 items=0 ppid=2057 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:36:45.667000 audit[2171]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.667000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffd3f62f0 a2=0 a3=1 items=0 ppid=2057 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.667000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 12 00:36:45.668000 audit[2172]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.668000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcba70880 a2=0 a3=1 items=0 ppid=2057 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:36:45.671000 audit[2174]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.671000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcbd42ac0 a2=0 a3=1 items=0 ppid=2057 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.671000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:36:45.672000 audit[2175]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.672000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1c02560 a2=0 a3=1 items=0 ppid=2057 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:36:45.675000 audit[2177]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.675000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe3e2f1c0 a2=0 a3=1 items=0 ppid=2057 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:36:45.679000 audit[2180]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.679000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6508910 a2=0 a3=1 items=0 ppid=2057 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.679000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:36:45.683000 audit[2183]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.683000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdc18c4f0 a2=0 a3=1 items=0 ppid=2057 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:36:45.684000 audit[2184]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.684000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff899d1f0 a2=0 a3=1 items=0 ppid=2057 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.684000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:36:45.686000 audit[2186]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.686000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffff88bc90 a2=0 a3=1 items=0 ppid=2057 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:36:45.689000 audit[2189]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.689000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff4f127f0 a2=0 a3=1 items=0 ppid=2057 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.689000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:36:45.691000 audit[2190]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.691000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf045a70 a2=0 a3=1 items=0 ppid=2057 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.691000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:36:45.693000 audit[2192]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:36:45.693000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd1017010 a2=0 a3=1 items=0 ppid=2057 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:36:45.716000 audit[2198]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:45.716000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff55912e0 a2=0 a3=1 items=0 ppid=2057 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:45.728000 audit[2198]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:45.728000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff55912e0 a2=0 a3=1 items=0 ppid=2057 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.728000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:45.729000 audit[2203]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.729000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc84c8250 a2=0 a3=1 items=0 ppid=2057 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:36:45.731000 audit[2205]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.731000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffbc31750 a2=0 a3=1 items=0 ppid=2057 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.731000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 12 00:36:45.735000 audit[2208]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.735000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe31c54c0 a2=0 a3=1 items=0 ppid=2057 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 12 00:36:45.736000 audit[2209]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.736000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffa83a90 a2=0 a3=1 items=0 ppid=2057 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.736000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:36:45.738000 audit[2211]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.738000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdbe80ea0 a2=0 a3=1 items=0 ppid=2057 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:36:45.739000 audit[2212]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.739000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe5ec8e40 a2=0 a3=1 items=0 ppid=2057 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.739000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:36:45.741000 audit[2214]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.741000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe444bad0 a2=0 a3=1 items=0 ppid=2057 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.741000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 12 00:36:45.745000 audit[2217]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.745000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffea96a880 a2=0 a3=1 items=0 ppid=2057 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.745000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:36:45.746000 audit[2218]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.746000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf69cdd0 a2=0 a3=1 items=0 ppid=2057 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.746000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:36:45.748000 audit[2220]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.748000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffb08d880 a2=0 a3=1 items=0 ppid=2057 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:36:45.749000 audit[2221]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.749000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc4492690 a2=0 a3=1 items=0 ppid=2057 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:36:45.751000 audit[2223]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.751000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6212480 a2=0 a3=1 items=0 ppid=2057 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.751000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:36:45.755000 audit[2226]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.755000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff3d40d70 a2=0 a3=1 items=0 ppid=2057 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.755000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:36:45.759000 audit[2229]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.759000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd94c6540 a2=0 a3=1 items=0 ppid=2057 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.759000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 12 00:36:45.760000 audit[2230]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.760000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffa9ae6e0 a2=0 a3=1 items=0 ppid=2057 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.760000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:36:45.762000 audit[2232]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.762000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdb848540 a2=0 a3=1 items=0 ppid=2057 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:36:45.766000 audit[2235]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.766000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd3fe6380 a2=0 a3=1 items=0 ppid=2057 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:36:45.767000 audit[2236]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.767000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdae2e460 a2=0 a3=1 items=0 ppid=2057 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:36:45.769000 audit[2238]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.769000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe0e2f630 a2=0 a3=1 items=0 ppid=2057 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.769000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:36:45.770000 audit[2239]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.770000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2a14410 a2=0 a3=1 items=0 ppid=2057 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.770000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:36:45.772000 audit[2241]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.772000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc31feab0 a2=0 a3=1 items=0 ppid=2057 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:36:45.775000 audit[2244]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:36:45.775000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd74369c0 a2=0 a3=1 items=0 ppid=2057 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:36:45.778000 audit[2246]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:36:45.778000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd4f65eb0 a2=0 a3=1 items=0 ppid=2057 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.778000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:45.779000 audit[2246]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:36:45.779000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd4f65eb0 a2=0 a3=1 items=0 ppid=2057 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:45.779000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:45.836722 kubelet[1948]: E0712 00:36:45.836680 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:45.837281 kubelet[1948]: E0712 00:36:45.837261 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:46.055399 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1746676764.mount: Deactivated successfully. Jul 12 00:36:46.650787 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount889720938.mount: Deactivated successfully. Jul 12 00:36:47.331319 env[1225]: time="2025-07-12T00:36:47.331266723Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:47.333283 env[1225]: time="2025-07-12T00:36:47.333238448Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:47.335037 env[1225]: time="2025-07-12T00:36:47.335004327Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:47.337155 env[1225]: time="2025-07-12T00:36:47.337093294Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 12 00:36:47.338259 env[1225]: time="2025-07-12T00:36:47.338063556Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:47.341007 env[1225]: time="2025-07-12T00:36:47.340858218Z" level=info msg="CreateContainer within sandbox \"aa77d0b67a2e4ea77e709d1dd3fd89ac84aae4d22f8734ebf74995c2cef0c249\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 12 00:36:47.351100 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount579376804.mount: Deactivated successfully. Jul 12 00:36:47.352424 env[1225]: time="2025-07-12T00:36:47.352351436Z" level=info msg="CreateContainer within sandbox \"aa77d0b67a2e4ea77e709d1dd3fd89ac84aae4d22f8734ebf74995c2cef0c249\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"58a6aaa9c1a3415b4df057d99cf0f2544d919c740d43f7d27076b89af573b06d\"" Jul 12 00:36:47.354412 env[1225]: time="2025-07-12T00:36:47.354320840Z" level=info msg="StartContainer for \"58a6aaa9c1a3415b4df057d99cf0f2544d919c740d43f7d27076b89af573b06d\"" Jul 12 00:36:47.373918 systemd[1]: Started cri-containerd-58a6aaa9c1a3415b4df057d99cf0f2544d919c740d43f7d27076b89af573b06d.scope. Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.401000 audit: BPF prog-id=114 op=LOAD Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2092 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:47.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613661616139633161333431356234646630353764393963663066 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2092 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:47.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613661616139633161333431356234646630353764393963663066 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit: BPF prog-id=115 op=LOAD Jul 12 00:36:47.402000 audit[2254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2092 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:47.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613661616139633161333431356234646630353764393963663066 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit: BPF prog-id=116 op=LOAD Jul 12 00:36:47.402000 audit[2254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2092 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:47.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613661616139633161333431356234646630353764393963663066 Jul 12 00:36:47.402000 audit: BPF prog-id=116 op=UNLOAD Jul 12 00:36:47.402000 audit: BPF prog-id=115 op=UNLOAD Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { perfmon } for pid=2254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit[2254]: AVC avc: denied { bpf } for pid=2254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:47.402000 audit: BPF prog-id=117 op=LOAD Jul 12 00:36:47.402000 audit[2254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2092 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:47.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538613661616139633161333431356234646630353764393963663066 Jul 12 00:36:47.416300 env[1225]: time="2025-07-12T00:36:47.416232668Z" level=info msg="StartContainer for \"58a6aaa9c1a3415b4df057d99cf0f2544d919c740d43f7d27076b89af573b06d\" returns successfully" Jul 12 00:36:47.848763 kubelet[1948]: I0712 00:36:47.848697 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-hwwkk" podStartSLOduration=3.848681724 podStartE2EDuration="3.848681724s" podCreationTimestamp="2025-07-12 00:36:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:36:45.85441638 +0000 UTC m=+6.132599681" watchObservedRunningTime="2025-07-12 00:36:47.848681724 +0000 UTC m=+8.126865025" Jul 12 00:36:48.349243 systemd[1]: run-containerd-runc-k8s.io-58a6aaa9c1a3415b4df057d99cf0f2544d919c740d43f7d27076b89af573b06d-runc.XIMYCL.mount: Deactivated successfully. Jul 12 00:36:48.967151 kubelet[1948]: E0712 00:36:48.966372 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:48.989165 kubelet[1948]: I0712 00:36:48.989094 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-w652x" podStartSLOduration=2.185530246 podStartE2EDuration="3.989066348s" podCreationTimestamp="2025-07-12 00:36:45 +0000 UTC" firstStartedPulling="2025-07-12 00:36:45.53480438 +0000 UTC m=+5.812987641" lastFinishedPulling="2025-07-12 00:36:47.338340482 +0000 UTC m=+7.616523743" observedRunningTime="2025-07-12 00:36:47.849277378 +0000 UTC m=+8.127460679" watchObservedRunningTime="2025-07-12 00:36:48.989066348 +0000 UTC m=+9.267249609" Jul 12 00:36:49.843548 kubelet[1948]: E0712 00:36:49.843515 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:50.845063 kubelet[1948]: E0712 00:36:50.845012 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:52.883873 sudo[1360]: pam_unix(sudo:session): session closed for user root Jul 12 00:36:52.883000 audit[1360]: USER_END pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:52.884881 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 12 00:36:52.884935 kernel: audit: type=1106 audit(1752280612.883:925): pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:52.883000 audit[1360]: CRED_DISP pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:52.889000 kernel: audit: type=1104 audit(1752280612.883:926): pid=1360 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:36:52.892653 sshd[1356]: pam_unix(sshd:session): session closed for user core Jul 12 00:36:52.902000 audit[1356]: USER_END pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:52.902000 audit[1356]: CRED_DISP pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:52.907791 systemd-logind[1210]: Session 7 logged out. Waiting for processes to exit. Jul 12 00:36:52.909035 kernel: audit: type=1106 audit(1752280612.902:927): pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:52.909083 kernel: audit: type=1104 audit(1752280612.902:928): pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:36:52.909357 systemd[1]: sshd@6-10.0.0.113:22-10.0.0.1:36646.service: Deactivated successfully. Jul 12 00:36:52.909717 kernel: audit: type=1131 audit(1752280612.909:929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.113:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:52.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.113:22-10.0.0.1:36646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:36:52.910110 systemd[1]: session-7.scope: Deactivated successfully. Jul 12 00:36:52.910266 systemd[1]: session-7.scope: Consumed 5.327s CPU time. Jul 12 00:36:52.910873 systemd-logind[1210]: Removed session 7. Jul 12 00:36:54.417272 kubelet[1948]: E0712 00:36:54.417235 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:54.966000 audit[2341]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:54.969414 kernel: audit: type=1325 audit(1752280614.966:930): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:54.966000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc280c800 a2=0 a3=1 items=0 ppid=2057 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:54.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:54.975338 kernel: audit: type=1300 audit(1752280614.966:930): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc280c800 a2=0 a3=1 items=0 ppid=2057 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:54.975420 kernel: audit: type=1327 audit(1752280614.966:930): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:54.975000 audit[2341]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:54.978418 kernel: audit: type=1325 audit(1752280614.975:931): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:54.975000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc280c800 a2=0 a3=1 items=0 ppid=2057 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:54.975000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:54.984411 kernel: audit: type=1300 audit(1752280614.975:931): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc280c800 a2=0 a3=1 items=0 ppid=2057 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:54.990000 audit[2343]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:54.990000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffff9446d0 a2=0 a3=1 items=0 ppid=2057 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:54.990000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:54.996000 audit[2343]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:54.996000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffff9446d0 a2=0 a3=1 items=0 ppid=2057 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:54.996000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:57.344000 audit[2345]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:57.344000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe7d1fb40 a2=0 a3=1 items=0 ppid=2057 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:57.344000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:57.352000 audit[2345]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:57.352000 audit[2345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe7d1fb40 a2=0 a3=1 items=0 ppid=2057 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:57.352000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:57.374000 audit[2347]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:57.374000 audit[2347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeb768860 a2=0 a3=1 items=0 ppid=2057 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:57.374000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:57.379000 audit[2347]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:57.379000 audit[2347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeb768860 a2=0 a3=1 items=0 ppid=2057 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:57.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:57.674440 systemd[1]: Created slice kubepods-besteffort-pod0eaa5443_6315_4afb_bff6_5acd753a9ef2.slice. Jul 12 00:36:57.733438 kubelet[1948]: I0712 00:36:57.733376 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z95fb\" (UniqueName: \"kubernetes.io/projected/0eaa5443-6315-4afb-bff6-5acd753a9ef2-kube-api-access-z95fb\") pod \"calico-typha-55cb6b5857-cgmcr\" (UID: \"0eaa5443-6315-4afb-bff6-5acd753a9ef2\") " pod="calico-system/calico-typha-55cb6b5857-cgmcr" Jul 12 00:36:57.733438 kubelet[1948]: I0712 00:36:57.733443 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0eaa5443-6315-4afb-bff6-5acd753a9ef2-tigera-ca-bundle\") pod \"calico-typha-55cb6b5857-cgmcr\" (UID: \"0eaa5443-6315-4afb-bff6-5acd753a9ef2\") " pod="calico-system/calico-typha-55cb6b5857-cgmcr" Jul 12 00:36:57.733872 kubelet[1948]: I0712 00:36:57.733465 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/0eaa5443-6315-4afb-bff6-5acd753a9ef2-typha-certs\") pod \"calico-typha-55cb6b5857-cgmcr\" (UID: \"0eaa5443-6315-4afb-bff6-5acd753a9ef2\") " pod="calico-system/calico-typha-55cb6b5857-cgmcr" Jul 12 00:36:57.979123 kubelet[1948]: E0712 00:36:57.979086 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:57.979863 env[1225]: time="2025-07-12T00:36:57.979806737Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-55cb6b5857-cgmcr,Uid:0eaa5443-6315-4afb-bff6-5acd753a9ef2,Namespace:calico-system,Attempt:0,}" Jul 12 00:36:57.994403 env[1225]: time="2025-07-12T00:36:57.994077185Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:57.994403 env[1225]: time="2025-07-12T00:36:57.994115065Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:57.994403 env[1225]: time="2025-07-12T00:36:57.994125545Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:57.994403 env[1225]: time="2025-07-12T00:36:57.994265507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2974b0678a2e7a2aaef7e3bc0455ad279d6063177b46379e8623f7764192f35b pid=2358 runtime=io.containerd.runc.v2 Jul 12 00:36:58.031694 systemd[1]: Started cri-containerd-2974b0678a2e7a2aaef7e3bc0455ad279d6063177b46379e8623f7764192f35b.scope. Jul 12 00:36:58.077256 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 12 00:36:58.077363 kernel: audit: type=1400 audit(1752280618.067:938): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.077412 kernel: audit: type=1400 audit(1752280618.067:939): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.077440 kernel: audit: type=1400 audit(1752280618.067:940): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.077459 kernel: audit: type=1400 audit(1752280618.067:941): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.081727 kernel: audit: type=1400 audit(1752280618.067:942): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.086982 kernel: audit: type=1400 audit(1752280618.067:943): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.089014 kernel: audit: type=1400 audit(1752280618.067:944): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.092842 kernel: audit: type=1400 audit(1752280618.067:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.092136 systemd[1]: Created slice kubepods-besteffort-pod89e78d42_81ba_4cfe_90bf_5914d90201dc.slice. Jul 12 00:36:58.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.095101 kernel: audit: type=1400 audit(1752280618.067:946): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.097502 kernel: audit: type=1400 audit(1752280618.068:947): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit: BPF prog-id=118 op=LOAD Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2358 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373462303637386132653761326161656637653362633034353561 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2358 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373462303637386132653761326161656637653362633034353561 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.068000 audit: BPF prog-id=119 op=LOAD Jul 12 00:36:58.068000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2358 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373462303637386132653761326161656637653362633034353561 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.070000 audit: BPF prog-id=120 op=LOAD Jul 12 00:36:58.070000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2358 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373462303637386132653761326161656637653362633034353561 Jul 12 00:36:58.072000 audit: BPF prog-id=120 op=UNLOAD Jul 12 00:36:58.072000 audit: BPF prog-id=119 op=UNLOAD Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { perfmon } for pid=2367 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit[2367]: AVC avc: denied { bpf } for pid=2367 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.072000 audit: BPF prog-id=121 op=LOAD Jul 12 00:36:58.072000 audit[2367]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2358 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373462303637386132653761326161656637653362633034353561 Jul 12 00:36:58.119195 env[1225]: time="2025-07-12T00:36:58.119142728Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-55cb6b5857-cgmcr,Uid:0eaa5443-6315-4afb-bff6-5acd753a9ef2,Namespace:calico-system,Attempt:0,} returns sandbox id \"2974b0678a2e7a2aaef7e3bc0455ad279d6063177b46379e8623f7764192f35b\"" Jul 12 00:36:58.119861 kubelet[1948]: E0712 00:36:58.119824 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:58.120824 env[1225]: time="2025-07-12T00:36:58.120776946Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 12 00:36:58.139369 kubelet[1948]: I0712 00:36:58.139330 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-flexvol-driver-host\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139459 kubelet[1948]: I0712 00:36:58.139396 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-cni-bin-dir\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139459 kubelet[1948]: I0712 00:36:58.139417 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-var-run-calico\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139459 kubelet[1948]: I0712 00:36:58.139449 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-policysync\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139553 kubelet[1948]: I0712 00:36:58.139472 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-var-lib-calico\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139553 kubelet[1948]: I0712 00:36:58.139487 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-xtables-lock\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139553 kubelet[1948]: I0712 00:36:58.139538 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-cni-net-dir\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139633 kubelet[1948]: I0712 00:36:58.139557 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-lib-modules\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139633 kubelet[1948]: I0712 00:36:58.139574 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/89e78d42-81ba-4cfe-90bf-5914d90201dc-node-certs\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139633 kubelet[1948]: I0712 00:36:58.139591 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/89e78d42-81ba-4cfe-90bf-5914d90201dc-tigera-ca-bundle\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139633 kubelet[1948]: I0712 00:36:58.139606 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-crm78\" (UniqueName: \"kubernetes.io/projected/89e78d42-81ba-4cfe-90bf-5914d90201dc-kube-api-access-crm78\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.139719 kubelet[1948]: I0712 00:36:58.139639 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/89e78d42-81ba-4cfe-90bf-5914d90201dc-cni-log-dir\") pod \"calico-node-dfcdn\" (UID: \"89e78d42-81ba-4cfe-90bf-5914d90201dc\") " pod="calico-system/calico-node-dfcdn" Jul 12 00:36:58.244840 kubelet[1948]: E0712 00:36:58.243489 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.244840 kubelet[1948]: W0712 00:36:58.243523 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.244840 kubelet[1948]: E0712 00:36:58.243547 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.244840 kubelet[1948]: E0712 00:36:58.244990 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.245607 kubelet[1948]: W0712 00:36:58.245003 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.245607 kubelet[1948]: E0712 00:36:58.245024 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.252966 kubelet[1948]: E0712 00:36:58.252946 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.253062 kubelet[1948]: W0712 00:36:58.253048 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.253119 kubelet[1948]: E0712 00:36:58.253108 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.341940 kubelet[1948]: E0712 00:36:58.341890 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lmhhb" podUID="b2661cac-2427-4630-8294-055c230ed79c" Jul 12 00:36:58.389000 audit[2397]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:58.389000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe76796d0 a2=0 a3=1 items=0 ppid=2057 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:58.394330 env[1225]: time="2025-07-12T00:36:58.394291001Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dfcdn,Uid:89e78d42-81ba-4cfe-90bf-5914d90201dc,Namespace:calico-system,Attempt:0,}" Jul 12 00:36:58.395000 audit[2397]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:36:58.395000 audit[2397]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe76796d0 a2=0 a3=1 items=0 ppid=2057 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:36:58.406357 env[1225]: time="2025-07-12T00:36:58.406297854Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:36:58.406501 env[1225]: time="2025-07-12T00:36:58.406477376Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:36:58.406577 env[1225]: time="2025-07-12T00:36:58.406557456Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:36:58.406869 env[1225]: time="2025-07-12T00:36:58.406830059Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c pid=2407 runtime=io.containerd.runc.v2 Jul 12 00:36:58.418284 systemd[1]: Started cri-containerd-bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c.scope. Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.432564 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434230 kubelet[1948]: W0712 00:36:58.432586 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.432605 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.432797 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434230 kubelet[1948]: W0712 00:36:58.432804 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.432812 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.432947 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434230 kubelet[1948]: W0712 00:36:58.432954 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.432963 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434230 kubelet[1948]: E0712 00:36:58.433099 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434564 kubelet[1948]: W0712 00:36:58.433106 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434564 kubelet[1948]: E0712 00:36:58.433122 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434564 kubelet[1948]: E0712 00:36:58.433270 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434564 kubelet[1948]: W0712 00:36:58.433278 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434564 kubelet[1948]: E0712 00:36:58.433287 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434564 kubelet[1948]: E0712 00:36:58.433428 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434564 kubelet[1948]: W0712 00:36:58.433436 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434564 kubelet[1948]: E0712 00:36:58.433444 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434564 kubelet[1948]: E0712 00:36:58.433574 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434564 kubelet[1948]: W0712 00:36:58.433583 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.433591 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.433732 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434771 kubelet[1948]: W0712 00:36:58.433739 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.433746 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.433891 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434771 kubelet[1948]: W0712 00:36:58.433898 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.433906 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.434038 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434771 kubelet[1948]: W0712 00:36:58.434045 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434771 kubelet[1948]: E0712 00:36:58.434052 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434177 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434970 kubelet[1948]: W0712 00:36:58.434183 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434191 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434328 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434970 kubelet[1948]: W0712 00:36:58.434334 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434341 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434503 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.434970 kubelet[1948]: W0712 00:36:58.434510 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434518 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.434970 kubelet[1948]: E0712 00:36:58.434656 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435183 kubelet[1948]: W0712 00:36:58.434663 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435183 kubelet[1948]: E0712 00:36:58.434670 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.435183 kubelet[1948]: E0712 00:36:58.434797 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435183 kubelet[1948]: W0712 00:36:58.434803 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435183 kubelet[1948]: E0712 00:36:58.434811 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.435183 kubelet[1948]: E0712 00:36:58.434930 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435183 kubelet[1948]: W0712 00:36:58.434937 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435183 kubelet[1948]: E0712 00:36:58.434943 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.435183 kubelet[1948]: E0712 00:36:58.435070 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435183 kubelet[1948]: W0712 00:36:58.435077 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435409 kubelet[1948]: E0712 00:36:58.435084 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.435409 kubelet[1948]: E0712 00:36:58.435210 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435409 kubelet[1948]: W0712 00:36:58.435216 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435409 kubelet[1948]: E0712 00:36:58.435223 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.435409 kubelet[1948]: E0712 00:36:58.435365 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435409 kubelet[1948]: W0712 00:36:58.435372 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435409 kubelet[1948]: E0712 00:36:58.435391 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.435555 kubelet[1948]: E0712 00:36:58.435522 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.435555 kubelet[1948]: W0712 00:36:58.435528 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.435555 kubelet[1948]: E0712 00:36:58.435536 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.441943 kubelet[1948]: E0712 00:36:58.441908 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.441943 kubelet[1948]: W0712 00:36:58.441925 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.441943 kubelet[1948]: E0712 00:36:58.441943 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.442082 kubelet[1948]: I0712 00:36:58.441970 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b2661cac-2427-4630-8294-055c230ed79c-registration-dir\") pod \"csi-node-driver-lmhhb\" (UID: \"b2661cac-2427-4630-8294-055c230ed79c\") " pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:36:58.442312 kubelet[1948]: E0712 00:36:58.442279 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.442312 kubelet[1948]: W0712 00:36:58.442295 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.442312 kubelet[1948]: E0712 00:36:58.442312 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.442440 kubelet[1948]: I0712 00:36:58.442327 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b2661cac-2427-4630-8294-055c230ed79c-varrun\") pod \"csi-node-driver-lmhhb\" (UID: \"b2661cac-2427-4630-8294-055c230ed79c\") " pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:36:58.442568 kubelet[1948]: E0712 00:36:58.442539 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.442568 kubelet[1948]: W0712 00:36:58.442556 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.442568 kubelet[1948]: E0712 00:36:58.442566 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.442646 kubelet[1948]: I0712 00:36:58.442588 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b2661cac-2427-4630-8294-055c230ed79c-kubelet-dir\") pod \"csi-node-driver-lmhhb\" (UID: \"b2661cac-2427-4630-8294-055c230ed79c\") " pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:36:58.442796 kubelet[1948]: E0712 00:36:58.442780 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.442796 kubelet[1948]: W0712 00:36:58.442794 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.442853 kubelet[1948]: E0712 00:36:58.442805 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.442853 kubelet[1948]: I0712 00:36:58.442820 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b2661cac-2427-4630-8294-055c230ed79c-socket-dir\") pod \"csi-node-driver-lmhhb\" (UID: \"b2661cac-2427-4630-8294-055c230ed79c\") " pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:36:58.443024 kubelet[1948]: E0712 00:36:58.442994 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.443024 kubelet[1948]: W0712 00:36:58.443010 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.443024 kubelet[1948]: E0712 00:36:58.443020 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.443109 kubelet[1948]: I0712 00:36:58.443091 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w2j92\" (UniqueName: \"kubernetes.io/projected/b2661cac-2427-4630-8294-055c230ed79c-kube-api-access-w2j92\") pod \"csi-node-driver-lmhhb\" (UID: \"b2661cac-2427-4630-8294-055c230ed79c\") " pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:36:58.443275 kubelet[1948]: E0712 00:36:58.443261 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.443275 kubelet[1948]: W0712 00:36:58.443273 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.443332 kubelet[1948]: E0712 00:36:58.443311 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.443476 kubelet[1948]: E0712 00:36:58.443464 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.443476 kubelet[1948]: W0712 00:36:58.443474 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.443537 kubelet[1948]: E0712 00:36:58.443511 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.443639 kubelet[1948]: E0712 00:36:58.443629 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.443675 kubelet[1948]: W0712 00:36:58.443638 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.443698 kubelet[1948]: E0712 00:36:58.443681 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.443799 kubelet[1948]: E0712 00:36:58.443789 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.443823 kubelet[1948]: W0712 00:36:58.443799 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.443823 kubelet[1948]: E0712 00:36:58.443808 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.443978 kubelet[1948]: E0712 00:36:58.443966 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.443978 kubelet[1948]: W0712 00:36:58.443976 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.444032 kubelet[1948]: E0712 00:36:58.443984 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.444130 kubelet[1948]: E0712 00:36:58.444118 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.444130 kubelet[1948]: W0712 00:36:58.444129 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.444200 kubelet[1948]: E0712 00:36:58.444136 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.444300 kubelet[1948]: E0712 00:36:58.444287 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.444300 kubelet[1948]: W0712 00:36:58.444298 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.444356 kubelet[1948]: E0712 00:36:58.444306 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.444520 kubelet[1948]: E0712 00:36:58.444508 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.444555 kubelet[1948]: W0712 00:36:58.444520 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.444555 kubelet[1948]: E0712 00:36:58.444528 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.444685 kubelet[1948]: E0712 00:36:58.444674 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.444714 kubelet[1948]: W0712 00:36:58.444685 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.444714 kubelet[1948]: E0712 00:36:58.444694 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.444866 kubelet[1948]: E0712 00:36:58.444854 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.444866 kubelet[1948]: W0712 00:36:58.444865 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.444922 kubelet[1948]: E0712 00:36:58.444872 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.446000 audit: BPF prog-id=122 op=LOAD Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2407 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326530616561613037373432666536663735306536353539393364 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2407 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326530616561613037373432666536663735306536353539393364 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit: BPF prog-id=123 op=LOAD Jul 12 00:36:58.447000 audit[2417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2407 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326530616561613037373432666536663735306536353539393364 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit: BPF prog-id=124 op=LOAD Jul 12 00:36:58.447000 audit[2417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2407 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326530616561613037373432666536663735306536353539393364 Jul 12 00:36:58.447000 audit: BPF prog-id=124 op=UNLOAD Jul 12 00:36:58.447000 audit: BPF prog-id=123 op=UNLOAD Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { perfmon } for pid=2417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit[2417]: AVC avc: denied { bpf } for pid=2417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:58.447000 audit: BPF prog-id=125 op=LOAD Jul 12 00:36:58.447000 audit[2417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2407 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:58.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264326530616561613037373432666536663735306536353539393364 Jul 12 00:36:58.456896 env[1225]: time="2025-07-12T00:36:58.456859411Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-dfcdn,Uid:89e78d42-81ba-4cfe-90bf-5914d90201dc,Namespace:calico-system,Attempt:0,} returns sandbox id \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\"" Jul 12 00:36:58.494313 update_engine[1213]: I0712 00:36:58.494078 1213 update_attempter.cc:509] Updating boot flags... Jul 12 00:36:58.548225 kubelet[1948]: E0712 00:36:58.544024 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.548225 kubelet[1948]: W0712 00:36:58.544048 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.548225 kubelet[1948]: E0712 00:36:58.544067 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.548225 kubelet[1948]: E0712 00:36:58.544953 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.548225 kubelet[1948]: W0712 00:36:58.544968 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.548225 kubelet[1948]: E0712 00:36:58.544988 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.548225 kubelet[1948]: E0712 00:36:58.548144 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.548225 kubelet[1948]: W0712 00:36:58.548157 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.548225 kubelet[1948]: E0712 00:36:58.548170 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.553326 kubelet[1948]: E0712 00:36:58.553296 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.553326 kubelet[1948]: W0712 00:36:58.553313 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.553445 kubelet[1948]: E0712 00:36:58.553420 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.553538 kubelet[1948]: E0712 00:36:58.553521 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.553538 kubelet[1948]: W0712 00:36:58.553534 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.553608 kubelet[1948]: E0712 00:36:58.553599 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.554821 kubelet[1948]: E0712 00:36:58.554800 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.554821 kubelet[1948]: W0712 00:36:58.554818 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.555055 kubelet[1948]: E0712 00:36:58.554899 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.555173 kubelet[1948]: E0712 00:36:58.555151 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.555173 kubelet[1948]: W0712 00:36:58.555168 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.555337 kubelet[1948]: E0712 00:36:58.555205 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.555491 kubelet[1948]: E0712 00:36:58.555473 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.555491 kubelet[1948]: W0712 00:36:58.555488 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.555586 kubelet[1948]: E0712 00:36:58.555546 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.555662 kubelet[1948]: E0712 00:36:58.555647 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.555662 kubelet[1948]: W0712 00:36:58.555661 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.555739 kubelet[1948]: E0712 00:36:58.555718 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.555813 kubelet[1948]: E0712 00:36:58.555799 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.555813 kubelet[1948]: W0712 00:36:58.555812 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.555879 kubelet[1948]: E0712 00:36:58.555828 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.556112 kubelet[1948]: E0712 00:36:58.556098 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.556153 kubelet[1948]: W0712 00:36:58.556111 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.556153 kubelet[1948]: E0712 00:36:58.556126 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.556405 kubelet[1948]: E0712 00:36:58.556391 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.556405 kubelet[1948]: W0712 00:36:58.556404 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.556522 kubelet[1948]: E0712 00:36:58.556489 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.556618 kubelet[1948]: E0712 00:36:58.556598 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.556659 kubelet[1948]: W0712 00:36:58.556632 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.556686 kubelet[1948]: E0712 00:36:58.556660 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.557568 kubelet[1948]: E0712 00:36:58.557541 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.557568 kubelet[1948]: W0712 00:36:58.557560 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.557663 kubelet[1948]: E0712 00:36:58.557647 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.557808 kubelet[1948]: E0712 00:36:58.557784 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.557808 kubelet[1948]: W0712 00:36:58.557797 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.557886 kubelet[1948]: E0712 00:36:58.557870 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.561089 kubelet[1948]: E0712 00:36:58.561068 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.561089 kubelet[1948]: W0712 00:36:58.561087 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.561308 kubelet[1948]: E0712 00:36:58.561118 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.561471 kubelet[1948]: E0712 00:36:58.561455 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.561522 kubelet[1948]: W0712 00:36:58.561470 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.561598 kubelet[1948]: E0712 00:36:58.561563 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.562487 kubelet[1948]: E0712 00:36:58.562465 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.562552 kubelet[1948]: W0712 00:36:58.562487 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.562583 kubelet[1948]: E0712 00:36:58.562561 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.562790 kubelet[1948]: E0712 00:36:58.562772 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.562832 kubelet[1948]: W0712 00:36:58.562789 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.562887 kubelet[1948]: E0712 00:36:58.562872 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.563148 kubelet[1948]: E0712 00:36:58.563127 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.563148 kubelet[1948]: W0712 00:36:58.563141 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.563174 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.563947 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.565603 kubelet[1948]: W0712 00:36:58.563963 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.563982 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.564197 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.565603 kubelet[1948]: W0712 00:36:58.564205 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.564300 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.564425 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.565603 kubelet[1948]: W0712 00:36:58.564434 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.565603 kubelet[1948]: E0712 00:36:58.564505 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.566684 kubelet[1948]: E0712 00:36:58.564611 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.566684 kubelet[1948]: W0712 00:36:58.564618 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.566684 kubelet[1948]: E0712 00:36:58.564626 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.566684 kubelet[1948]: E0712 00:36:58.564779 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.566684 kubelet[1948]: W0712 00:36:58.564787 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.566684 kubelet[1948]: E0712 00:36:58.564794 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.579453 kubelet[1948]: E0712 00:36:58.579419 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:58.579453 kubelet[1948]: W0712 00:36:58.579441 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:58.579453 kubelet[1948]: E0712 00:36:58.579460 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:58.842193 systemd[1]: run-containerd-runc-k8s.io-2974b0678a2e7a2aaef7e3bc0455ad279d6063177b46379e8623f7764192f35b-runc.rm3Hak.mount: Deactivated successfully. Jul 12 00:36:59.013053 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3779519613.mount: Deactivated successfully. Jul 12 00:36:59.702808 env[1225]: time="2025-07-12T00:36:59.702751822Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:59.704665 env[1225]: time="2025-07-12T00:36:59.704634481Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:59.705867 env[1225]: time="2025-07-12T00:36:59.705840054Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:59.707275 env[1225]: time="2025-07-12T00:36:59.707239748Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:36:59.707810 env[1225]: time="2025-07-12T00:36:59.707779674Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 12 00:36:59.722006 env[1225]: time="2025-07-12T00:36:59.721671937Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 12 00:36:59.745954 env[1225]: time="2025-07-12T00:36:59.745838107Z" level=info msg="CreateContainer within sandbox \"2974b0678a2e7a2aaef7e3bc0455ad279d6063177b46379e8623f7764192f35b\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 12 00:36:59.755653 env[1225]: time="2025-07-12T00:36:59.755596568Z" level=info msg="CreateContainer within sandbox \"2974b0678a2e7a2aaef7e3bc0455ad279d6063177b46379e8623f7764192f35b\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"cbb140f86623669cb4d35cf7035a93d6c261bd616fc080575c94324f31c0b8db\"" Jul 12 00:36:59.756411 env[1225]: time="2025-07-12T00:36:59.756215054Z" level=info msg="StartContainer for \"cbb140f86623669cb4d35cf7035a93d6c261bd616fc080575c94324f31c0b8db\"" Jul 12 00:36:59.777521 systemd[1]: Started cri-containerd-cbb140f86623669cb4d35cf7035a93d6c261bd616fc080575c94324f31c0b8db.scope. Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit: BPF prog-id=126 op=LOAD Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2358 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:59.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623134306638363632333636396362346433356366373033356139 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2358 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:59.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623134306638363632333636396362346433356366373033356139 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit: BPF prog-id=127 op=LOAD Jul 12 00:36:59.803000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2358 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:59.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623134306638363632333636396362346433356366373033356139 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit: BPF prog-id=128 op=LOAD Jul 12 00:36:59.803000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2358 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:59.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623134306638363632333636396362346433356366373033356139 Jul 12 00:36:59.803000 audit: BPF prog-id=128 op=UNLOAD Jul 12 00:36:59.803000 audit: BPF prog-id=127 op=UNLOAD Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:36:59.803000 audit: BPF prog-id=129 op=LOAD Jul 12 00:36:59.803000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2358 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:36:59.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362623134306638363632333636396362346433356366373033356139 Jul 12 00:36:59.830748 env[1225]: time="2025-07-12T00:36:59.830702224Z" level=info msg="StartContainer for \"cbb140f86623669cb4d35cf7035a93d6c261bd616fc080575c94324f31c0b8db\" returns successfully" Jul 12 00:36:59.847513 kubelet[1948]: E0712 00:36:59.847470 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lmhhb" podUID="b2661cac-2427-4630-8294-055c230ed79c" Jul 12 00:36:59.862027 kubelet[1948]: E0712 00:36:59.861976 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:36:59.949955 kubelet[1948]: E0712 00:36:59.949924 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.949955 kubelet[1948]: W0712 00:36:59.949947 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.950230 kubelet[1948]: E0712 00:36:59.949972 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.951485 kubelet[1948]: E0712 00:36:59.951462 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.951485 kubelet[1948]: W0712 00:36:59.951481 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.951608 kubelet[1948]: E0712 00:36:59.951497 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.951726 kubelet[1948]: E0712 00:36:59.951712 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.951764 kubelet[1948]: W0712 00:36:59.951729 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.951764 kubelet[1948]: E0712 00:36:59.951740 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.951938 kubelet[1948]: E0712 00:36:59.951924 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.951981 kubelet[1948]: W0712 00:36:59.951938 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.951981 kubelet[1948]: E0712 00:36:59.951949 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.952141 kubelet[1948]: E0712 00:36:59.952128 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.952178 kubelet[1948]: W0712 00:36:59.952142 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.952178 kubelet[1948]: E0712 00:36:59.952152 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.952323 kubelet[1948]: E0712 00:36:59.952309 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.952323 kubelet[1948]: W0712 00:36:59.952322 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.952394 kubelet[1948]: E0712 00:36:59.952331 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.952488 kubelet[1948]: E0712 00:36:59.952476 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.952488 kubelet[1948]: W0712 00:36:59.952486 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.952557 kubelet[1948]: E0712 00:36:59.952494 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.952630 kubelet[1948]: E0712 00:36:59.952618 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.952630 kubelet[1948]: W0712 00:36:59.952628 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.952697 kubelet[1948]: E0712 00:36:59.952636 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.954431 kubelet[1948]: E0712 00:36:59.952824 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.954431 kubelet[1948]: W0712 00:36:59.952837 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.954431 kubelet[1948]: E0712 00:36:59.952847 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.954431 kubelet[1948]: E0712 00:36:59.952996 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.954431 kubelet[1948]: W0712 00:36:59.953004 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.954431 kubelet[1948]: E0712 00:36:59.953012 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.956758 kubelet[1948]: E0712 00:36:59.956682 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.956860 kubelet[1948]: W0712 00:36:59.956755 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.956897 kubelet[1948]: E0712 00:36:59.956823 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.957803 kubelet[1948]: E0712 00:36:59.957777 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.957803 kubelet[1948]: W0712 00:36:59.957793 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.957803 kubelet[1948]: E0712 00:36:59.957805 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.958142 kubelet[1948]: E0712 00:36:59.958126 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.958142 kubelet[1948]: W0712 00:36:59.958140 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.958202 kubelet[1948]: E0712 00:36:59.958153 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.958493 kubelet[1948]: E0712 00:36:59.958479 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.958528 kubelet[1948]: W0712 00:36:59.958496 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.958528 kubelet[1948]: E0712 00:36:59.958507 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.959124 kubelet[1948]: E0712 00:36:59.959094 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.959124 kubelet[1948]: W0712 00:36:59.959110 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.959124 kubelet[1948]: E0712 00:36:59.959121 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.968098 kubelet[1948]: E0712 00:36:59.968077 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.968238 kubelet[1948]: W0712 00:36:59.968223 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.968321 kubelet[1948]: E0712 00:36:59.968307 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.968893 kubelet[1948]: E0712 00:36:59.968875 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.969019 kubelet[1948]: W0712 00:36:59.968992 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.969104 kubelet[1948]: E0712 00:36:59.969091 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.969478 kubelet[1948]: E0712 00:36:59.969448 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.969622 kubelet[1948]: W0712 00:36:59.969606 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.969696 kubelet[1948]: E0712 00:36:59.969684 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.970114 kubelet[1948]: E0712 00:36:59.970093 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.970271 kubelet[1948]: W0712 00:36:59.970242 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.970558 kubelet[1948]: E0712 00:36:59.970539 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.970865 kubelet[1948]: E0712 00:36:59.970845 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.970955 kubelet[1948]: W0712 00:36:59.970941 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.971020 kubelet[1948]: E0712 00:36:59.971008 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.971775 kubelet[1948]: E0712 00:36:59.971754 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.971775 kubelet[1948]: W0712 00:36:59.971773 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.971889 kubelet[1948]: E0712 00:36:59.971787 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.979992 kubelet[1948]: E0712 00:36:59.979940 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.979992 kubelet[1948]: W0712 00:36:59.979960 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.979992 kubelet[1948]: E0712 00:36:59.979980 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.980201 kubelet[1948]: E0712 00:36:59.980183 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.980248 kubelet[1948]: W0712 00:36:59.980238 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.980295 kubelet[1948]: E0712 00:36:59.980266 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.981774 kubelet[1948]: E0712 00:36:59.981752 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.981922 kubelet[1948]: W0712 00:36:59.981771 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.981964 kubelet[1948]: E0712 00:36:59.981937 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.983561 kubelet[1948]: E0712 00:36:59.983539 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.983561 kubelet[1948]: W0712 00:36:59.983558 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.983679 kubelet[1948]: E0712 00:36:59.983577 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.984000 kubelet[1948]: E0712 00:36:59.983981 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.984000 kubelet[1948]: W0712 00:36:59.983996 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.984141 kubelet[1948]: E0712 00:36:59.984123 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.984631 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988429 kubelet[1948]: W0712 00:36:59.984645 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.984663 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.984851 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988429 kubelet[1948]: W0712 00:36:59.984861 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.984871 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.985334 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988429 kubelet[1948]: W0712 00:36:59.985346 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.985359 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988429 kubelet[1948]: E0712 00:36:59.986169 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988726 kubelet[1948]: W0712 00:36:59.986181 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.988726 kubelet[1948]: E0712 00:36:59.986192 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988726 kubelet[1948]: E0712 00:36:59.987460 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988726 kubelet[1948]: W0712 00:36:59.987472 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.988726 kubelet[1948]: E0712 00:36:59.987484 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988726 kubelet[1948]: E0712 00:36:59.987781 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988726 kubelet[1948]: W0712 00:36:59.987795 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.988726 kubelet[1948]: E0712 00:36:59.987806 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:36:59.988726 kubelet[1948]: E0712 00:36:59.988015 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:36:59.988726 kubelet[1948]: W0712 00:36:59.988028 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:36:59.989025 kubelet[1948]: E0712 00:36:59.988038 1948 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:37:00.615985 env[1225]: time="2025-07-12T00:37:00.615938422Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:00.618666 env[1225]: time="2025-07-12T00:37:00.618629848Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:00.620034 env[1225]: time="2025-07-12T00:37:00.619979381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:00.621751 env[1225]: time="2025-07-12T00:37:00.621723598Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:00.622357 env[1225]: time="2025-07-12T00:37:00.622330004Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 12 00:37:00.626633 env[1225]: time="2025-07-12T00:37:00.626589205Z" level=info msg="CreateContainer within sandbox \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 12 00:37:00.643066 env[1225]: time="2025-07-12T00:37:00.643014285Z" level=info msg="CreateContainer within sandbox \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5\"" Jul 12 00:37:00.644224 env[1225]: time="2025-07-12T00:37:00.644191576Z" level=info msg="StartContainer for \"8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5\"" Jul 12 00:37:00.668953 systemd[1]: Started cri-containerd-8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5.scope. Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2407 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:00.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861393134663338393864653630653237323534656534643935633034 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.691000 audit: BPF prog-id=130 op=LOAD Jul 12 00:37:00.691000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2407 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:00.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861393134663338393864653630653237323534656534643935633034 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit: BPF prog-id=131 op=LOAD Jul 12 00:37:00.692000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2407 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:00.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861393134663338393864653630653237323534656534643935633034 Jul 12 00:37:00.692000 audit: BPF prog-id=131 op=UNLOAD Jul 12 00:37:00.692000 audit: BPF prog-id=130 op=UNLOAD Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { perfmon } for pid=2601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit[2601]: AVC avc: denied { bpf } for pid=2601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:00.692000 audit: BPF prog-id=132 op=LOAD Jul 12 00:37:00.692000 audit[2601]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2407 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:00.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861393134663338393864653630653237323534656534643935633034 Jul 12 00:37:00.708431 env[1225]: time="2025-07-12T00:37:00.708371598Z" level=info msg="StartContainer for \"8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5\" returns successfully" Jul 12 00:37:00.735195 systemd[1]: cri-containerd-8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5.scope: Deactivated successfully. Jul 12 00:37:00.741000 audit: BPF prog-id=132 op=UNLOAD Jul 12 00:37:00.787016 env[1225]: time="2025-07-12T00:37:00.786968279Z" level=info msg="shim disconnected" id=8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5 Jul 12 00:37:00.787016 env[1225]: time="2025-07-12T00:37:00.787014960Z" level=warning msg="cleaning up after shim disconnected" id=8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5 namespace=k8s.io Jul 12 00:37:00.787264 env[1225]: time="2025-07-12T00:37:00.787025120Z" level=info msg="cleaning up dead shim" Jul 12 00:37:00.794391 env[1225]: time="2025-07-12T00:37:00.794316751Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:37:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2640 runtime=io.containerd.runc.v2\n" Jul 12 00:37:00.838783 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8a914f3898de60e27254ee4d95c0427b53d3937139132d3af1046445eacbb1b5-rootfs.mount: Deactivated successfully. Jul 12 00:37:00.864611 kubelet[1948]: I0712 00:37:00.864575 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:00.864981 kubelet[1948]: E0712 00:37:00.864875 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:00.866095 env[1225]: time="2025-07-12T00:37:00.865991445Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 12 00:37:00.891959 kubelet[1948]: I0712 00:37:00.891891 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-55cb6b5857-cgmcr" podStartSLOduration=2.29444658 podStartE2EDuration="3.891874576s" podCreationTimestamp="2025-07-12 00:36:57 +0000 UTC" firstStartedPulling="2025-07-12 00:36:58.120509703 +0000 UTC m=+18.398692924" lastFinishedPulling="2025-07-12 00:36:59.717937659 +0000 UTC m=+19.996120920" observedRunningTime="2025-07-12 00:36:59.900271943 +0000 UTC m=+20.178455244" watchObservedRunningTime="2025-07-12 00:37:00.891874576 +0000 UTC m=+21.170057837" Jul 12 00:37:01.811904 kubelet[1948]: E0712 00:37:01.811817 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lmhhb" podUID="b2661cac-2427-4630-8294-055c230ed79c" Jul 12 00:37:03.490888 env[1225]: time="2025-07-12T00:37:03.490837862Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:03.492084 env[1225]: time="2025-07-12T00:37:03.492044872Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:03.493512 env[1225]: time="2025-07-12T00:37:03.493476243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:03.496229 env[1225]: time="2025-07-12T00:37:03.496196145Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:03.496975 env[1225]: time="2025-07-12T00:37:03.496942591Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 12 00:37:03.499833 env[1225]: time="2025-07-12T00:37:03.499240249Z" level=info msg="CreateContainer within sandbox \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 12 00:37:03.517261 env[1225]: time="2025-07-12T00:37:03.517205033Z" level=info msg="CreateContainer within sandbox \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed\"" Jul 12 00:37:03.518173 env[1225]: time="2025-07-12T00:37:03.518145520Z" level=info msg="StartContainer for \"3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed\"" Jul 12 00:37:03.539414 systemd[1]: Started cri-containerd-3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed.scope. Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629580 kernel: kauditd_printk_skb: 211 callbacks suppressed Jul 12 00:37:03.629654 kernel: audit: type=1400 audit(1752280623.628:1001): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2407 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:03.634805 kernel: audit: type=1300 audit(1752280623.628:1001): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2407 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:03.634878 kernel: audit: type=1327 audit(1752280623.628:1001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365356233386131386162303765373366613239353938306338396432 Jul 12 00:37:03.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365356233386131386162303765373366613239353938306338396432 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.639484 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.641637 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.644056 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.646245 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.646331 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.650328 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.650384 kernel: audit: type=1400 audit(1752280623.628:1002): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.628000 audit: BPF prog-id=133 op=LOAD Jul 12 00:37:03.628000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2407 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:03.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365356233386131386162303765373366613239353938306338396432 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.629000 audit: BPF prog-id=134 op=LOAD Jul 12 00:37:03.629000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2407 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:03.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365356233386131386162303765373366613239353938306338396432 Jul 12 00:37:03.631000 audit: BPF prog-id=134 op=UNLOAD Jul 12 00:37:03.631000 audit: BPF prog-id=133 op=UNLOAD Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:03.631000 audit: BPF prog-id=135 op=LOAD Jul 12 00:37:03.631000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2407 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:03.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365356233386131386162303765373366613239353938306338396432 Jul 12 00:37:03.653754 env[1225]: time="2025-07-12T00:37:03.653474041Z" level=info msg="StartContainer for \"3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed\" returns successfully" Jul 12 00:37:03.812191 kubelet[1948]: E0712 00:37:03.812081 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-lmhhb" podUID="b2661cac-2427-4630-8294-055c230ed79c" Jul 12 00:37:04.345402 env[1225]: time="2025-07-12T00:37:04.345333632Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:37:04.347628 systemd[1]: cri-containerd-3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed.scope: Deactivated successfully. Jul 12 00:37:04.351000 audit: BPF prog-id=135 op=UNLOAD Jul 12 00:37:04.364176 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed-rootfs.mount: Deactivated successfully. Jul 12 00:37:04.383033 env[1225]: time="2025-07-12T00:37:04.382820473Z" level=info msg="shim disconnected" id=3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed Jul 12 00:37:04.383033 env[1225]: time="2025-07-12T00:37:04.382868673Z" level=warning msg="cleaning up after shim disconnected" id=3e5b38a18ab07e73fa295980c89d2a1ea978bccf6e3c9fea9e55424eb62370ed namespace=k8s.io Jul 12 00:37:04.383033 env[1225]: time="2025-07-12T00:37:04.382878033Z" level=info msg="cleaning up dead shim" Jul 12 00:37:04.389558 env[1225]: time="2025-07-12T00:37:04.389515403Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:37:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2708 runtime=io.containerd.runc.v2\n" Jul 12 00:37:04.414403 kubelet[1948]: I0712 00:37:04.414236 1948 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 12 00:37:04.450257 systemd[1]: Created slice kubepods-besteffort-poda628162b_ce5f_4ca6_8662_fc728afedeff.slice. Jul 12 00:37:04.453880 systemd[1]: Created slice kubepods-besteffort-pod333c2284_4856_4b96_ae71_299989a675c9.slice. Jul 12 00:37:04.458741 systemd[1]: Created slice kubepods-besteffort-podab89e077_9e27_42c7_85ee_0fd8db11d2e2.slice. Jul 12 00:37:04.464850 systemd[1]: Created slice kubepods-besteffort-podf1037071_874e_4ed9_81a9_12644090e882.slice. Jul 12 00:37:04.470634 systemd[1]: Created slice kubepods-besteffort-pod959bd649_cd6f_4cca_bb3b_7522130f9a6e.slice. Jul 12 00:37:04.476660 systemd[1]: Created slice kubepods-burstable-podfce8ecab_7388_48d6_ad03_2056d4c42692.slice. Jul 12 00:37:04.481198 systemd[1]: Created slice kubepods-burstable-pod90be7b23_6894_474b_b81f_606de468c5af.slice. Jul 12 00:37:04.638779 kubelet[1948]: I0712 00:37:04.638667 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/ab89e077-9e27-42c7-85ee-0fd8db11d2e2-config\") pod \"goldmane-58fd7646b9-qd6zx\" (UID: \"ab89e077-9e27-42c7-85ee-0fd8db11d2e2\") " pod="calico-system/goldmane-58fd7646b9-qd6zx" Jul 12 00:37:04.638976 kubelet[1948]: I0712 00:37:04.638956 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/ab89e077-9e27-42c7-85ee-0fd8db11d2e2-goldmane-key-pair\") pod \"goldmane-58fd7646b9-qd6zx\" (UID: \"ab89e077-9e27-42c7-85ee-0fd8db11d2e2\") " pod="calico-system/goldmane-58fd7646b9-qd6zx" Jul 12 00:37:04.639104 kubelet[1948]: I0712 00:37:04.639090 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f1037071-874e-4ed9-81a9-12644090e882-whisker-backend-key-pair\") pod \"whisker-7dc57d494d-5mv8g\" (UID: \"f1037071-874e-4ed9-81a9-12644090e882\") " pod="calico-system/whisker-7dc57d494d-5mv8g" Jul 12 00:37:04.639219 kubelet[1948]: I0712 00:37:04.639205 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/959bd649-cd6f-4cca-bb3b-7522130f9a6e-tigera-ca-bundle\") pod \"calico-kube-controllers-7c9584d98d-54sbn\" (UID: \"959bd649-cd6f-4cca-bb3b-7522130f9a6e\") " pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" Jul 12 00:37:04.639320 kubelet[1948]: I0712 00:37:04.639307 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/fce8ecab-7388-48d6-ad03-2056d4c42692-config-volume\") pod \"coredns-7c65d6cfc9-gswv7\" (UID: \"fce8ecab-7388-48d6-ad03-2056d4c42692\") " pod="kube-system/coredns-7c65d6cfc9-gswv7" Jul 12 00:37:04.639452 kubelet[1948]: I0712 00:37:04.639435 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2hcxq\" (UniqueName: \"kubernetes.io/projected/90be7b23-6894-474b-b81f-606de468c5af-kube-api-access-2hcxq\") pod \"coredns-7c65d6cfc9-jzsjt\" (UID: \"90be7b23-6894-474b-b81f-606de468c5af\") " pod="kube-system/coredns-7c65d6cfc9-jzsjt" Jul 12 00:37:04.639556 kubelet[1948]: I0712 00:37:04.639530 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bxpmd\" (UniqueName: \"kubernetes.io/projected/a628162b-ce5f-4ca6-8662-fc728afedeff-kube-api-access-bxpmd\") pod \"calico-apiserver-5b66657499-knnn4\" (UID: \"a628162b-ce5f-4ca6-8662-fc728afedeff\") " pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" Jul 12 00:37:04.639649 kubelet[1948]: I0712 00:37:04.639636 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7g69d\" (UniqueName: \"kubernetes.io/projected/333c2284-4856-4b96-ae71-299989a675c9-kube-api-access-7g69d\") pod \"calico-apiserver-5b66657499-h6rg8\" (UID: \"333c2284-4856-4b96-ae71-299989a675c9\") " pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" Jul 12 00:37:04.639749 kubelet[1948]: I0712 00:37:04.639736 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/333c2284-4856-4b96-ae71-299989a675c9-calico-apiserver-certs\") pod \"calico-apiserver-5b66657499-h6rg8\" (UID: \"333c2284-4856-4b96-ae71-299989a675c9\") " pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" Jul 12 00:37:04.639853 kubelet[1948]: I0712 00:37:04.639838 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dsckk\" (UniqueName: \"kubernetes.io/projected/959bd649-cd6f-4cca-bb3b-7522130f9a6e-kube-api-access-dsckk\") pod \"calico-kube-controllers-7c9584d98d-54sbn\" (UID: \"959bd649-cd6f-4cca-bb3b-7522130f9a6e\") " pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" Jul 12 00:37:04.639951 kubelet[1948]: I0712 00:37:04.639938 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5pxkn\" (UniqueName: \"kubernetes.io/projected/fce8ecab-7388-48d6-ad03-2056d4c42692-kube-api-access-5pxkn\") pod \"coredns-7c65d6cfc9-gswv7\" (UID: \"fce8ecab-7388-48d6-ad03-2056d4c42692\") " pod="kube-system/coredns-7c65d6cfc9-gswv7" Jul 12 00:37:04.640064 kubelet[1948]: I0712 00:37:04.640051 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ab89e077-9e27-42c7-85ee-0fd8db11d2e2-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-qd6zx\" (UID: \"ab89e077-9e27-42c7-85ee-0fd8db11d2e2\") " pod="calico-system/goldmane-58fd7646b9-qd6zx" Jul 12 00:37:04.640160 kubelet[1948]: I0712 00:37:04.640144 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f1037071-874e-4ed9-81a9-12644090e882-whisker-ca-bundle\") pod \"whisker-7dc57d494d-5mv8g\" (UID: \"f1037071-874e-4ed9-81a9-12644090e882\") " pod="calico-system/whisker-7dc57d494d-5mv8g" Jul 12 00:37:04.640256 kubelet[1948]: I0712 00:37:04.640244 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mt4kp\" (UniqueName: \"kubernetes.io/projected/f1037071-874e-4ed9-81a9-12644090e882-kube-api-access-mt4kp\") pod \"whisker-7dc57d494d-5mv8g\" (UID: \"f1037071-874e-4ed9-81a9-12644090e882\") " pod="calico-system/whisker-7dc57d494d-5mv8g" Jul 12 00:37:04.640410 kubelet[1948]: I0712 00:37:04.640370 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a628162b-ce5f-4ca6-8662-fc728afedeff-calico-apiserver-certs\") pod \"calico-apiserver-5b66657499-knnn4\" (UID: \"a628162b-ce5f-4ca6-8662-fc728afedeff\") " pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" Jul 12 00:37:04.640516 kubelet[1948]: I0712 00:37:04.640493 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tn46v\" (UniqueName: \"kubernetes.io/projected/ab89e077-9e27-42c7-85ee-0fd8db11d2e2-kube-api-access-tn46v\") pod \"goldmane-58fd7646b9-qd6zx\" (UID: \"ab89e077-9e27-42c7-85ee-0fd8db11d2e2\") " pod="calico-system/goldmane-58fd7646b9-qd6zx" Jul 12 00:37:04.640634 kubelet[1948]: I0712 00:37:04.640619 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/90be7b23-6894-474b-b81f-606de468c5af-config-volume\") pod \"coredns-7c65d6cfc9-jzsjt\" (UID: \"90be7b23-6894-474b-b81f-606de468c5af\") " pod="kube-system/coredns-7c65d6cfc9-jzsjt" Jul 12 00:37:04.769373 env[1225]: time="2025-07-12T00:37:04.768957643Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7dc57d494d-5mv8g,Uid:f1037071-874e-4ed9-81a9-12644090e882,Namespace:calico-system,Attempt:0,}" Jul 12 00:37:04.775214 env[1225]: time="2025-07-12T00:37:04.774949928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c9584d98d-54sbn,Uid:959bd649-cd6f-4cca-bb3b-7522130f9a6e,Namespace:calico-system,Attempt:0,}" Jul 12 00:37:04.779968 kubelet[1948]: E0712 00:37:04.779942 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:04.780981 env[1225]: time="2025-07-12T00:37:04.780914452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gswv7,Uid:fce8ecab-7388-48d6-ad03-2056d4c42692,Namespace:kube-system,Attempt:0,}" Jul 12 00:37:04.785738 kubelet[1948]: E0712 00:37:04.785474 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:04.785960 env[1225]: time="2025-07-12T00:37:04.785873810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jzsjt,Uid:90be7b23-6894-474b-b81f-606de468c5af,Namespace:kube-system,Attempt:0,}" Jul 12 00:37:04.923941 env[1225]: time="2025-07-12T00:37:04.923834522Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 12 00:37:05.056738 env[1225]: time="2025-07-12T00:37:05.056677370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-knnn4,Uid:a628162b-ce5f-4ca6-8662-fc728afedeff,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:37:05.059918 env[1225]: time="2025-07-12T00:37:05.056767971Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-h6rg8,Uid:333c2284-4856-4b96-ae71-299989a675c9,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:37:05.062623 env[1225]: time="2025-07-12T00:37:05.062509211Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-qd6zx,Uid:ab89e077-9e27-42c7-85ee-0fd8db11d2e2,Namespace:calico-system,Attempt:0,}" Jul 12 00:37:05.260308 env[1225]: time="2025-07-12T00:37:05.260235838Z" level=error msg="Failed to destroy network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.260953 env[1225]: time="2025-07-12T00:37:05.260918843Z" level=error msg="encountered an error cleaning up failed sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.261093 env[1225]: time="2025-07-12T00:37:05.261065844Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gswv7,Uid:fce8ecab-7388-48d6-ad03-2056d4c42692,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.262300 kubelet[1948]: E0712 00:37:05.262237 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.262800 kubelet[1948]: E0712 00:37:05.262340 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-gswv7" Jul 12 00:37:05.262800 kubelet[1948]: E0712 00:37:05.262362 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-gswv7" Jul 12 00:37:05.262800 kubelet[1948]: E0712 00:37:05.262444 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-gswv7_kube-system(fce8ecab-7388-48d6-ad03-2056d4c42692)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-gswv7_kube-system(fce8ecab-7388-48d6-ad03-2056d4c42692)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-gswv7" podUID="fce8ecab-7388-48d6-ad03-2056d4c42692" Jul 12 00:37:05.267679 env[1225]: time="2025-07-12T00:37:05.267614250Z" level=error msg="Failed to destroy network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.268741 env[1225]: time="2025-07-12T00:37:05.268684498Z" level=error msg="encountered an error cleaning up failed sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.268836 env[1225]: time="2025-07-12T00:37:05.268753978Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-h6rg8,Uid:333c2284-4856-4b96-ae71-299989a675c9,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.268999 kubelet[1948]: E0712 00:37:05.268958 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.269072 kubelet[1948]: E0712 00:37:05.269017 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" Jul 12 00:37:05.269072 kubelet[1948]: E0712 00:37:05.269037 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" Jul 12 00:37:05.269145 kubelet[1948]: E0712 00:37:05.269076 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5b66657499-h6rg8_calico-apiserver(333c2284-4856-4b96-ae71-299989a675c9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5b66657499-h6rg8_calico-apiserver(333c2284-4856-4b96-ae71-299989a675c9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" podUID="333c2284-4856-4b96-ae71-299989a675c9" Jul 12 00:37:05.276450 env[1225]: time="2025-07-12T00:37:05.276367632Z" level=error msg="Failed to destroy network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.276774 env[1225]: time="2025-07-12T00:37:05.276733234Z" level=error msg="encountered an error cleaning up failed sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.276829 env[1225]: time="2025-07-12T00:37:05.276791475Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7dc57d494d-5mv8g,Uid:f1037071-874e-4ed9-81a9-12644090e882,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.277008 kubelet[1948]: E0712 00:37:05.276973 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.277089 kubelet[1948]: E0712 00:37:05.277030 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7dc57d494d-5mv8g" Jul 12 00:37:05.277089 kubelet[1948]: E0712 00:37:05.277051 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7dc57d494d-5mv8g" Jul 12 00:37:05.277176 kubelet[1948]: E0712 00:37:05.277085 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7dc57d494d-5mv8g_calico-system(f1037071-874e-4ed9-81a9-12644090e882)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7dc57d494d-5mv8g_calico-system(f1037071-874e-4ed9-81a9-12644090e882)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7dc57d494d-5mv8g" podUID="f1037071-874e-4ed9-81a9-12644090e882" Jul 12 00:37:05.279872 env[1225]: time="2025-07-12T00:37:05.279820496Z" level=error msg="Failed to destroy network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.280542 env[1225]: time="2025-07-12T00:37:05.280504581Z" level=error msg="encountered an error cleaning up failed sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.280690 env[1225]: time="2025-07-12T00:37:05.280660342Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c9584d98d-54sbn,Uid:959bd649-cd6f-4cca-bb3b-7522130f9a6e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.280974 env[1225]: time="2025-07-12T00:37:05.280947584Z" level=error msg="Failed to destroy network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.281042 kubelet[1948]: E0712 00:37:05.280986 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.281083 kubelet[1948]: E0712 00:37:05.281046 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" Jul 12 00:37:05.281083 kubelet[1948]: E0712 00:37:05.281065 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" Jul 12 00:37:05.281140 kubelet[1948]: E0712 00:37:05.281098 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7c9584d98d-54sbn_calico-system(959bd649-cd6f-4cca-bb3b-7522130f9a6e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7c9584d98d-54sbn_calico-system(959bd649-cd6f-4cca-bb3b-7522130f9a6e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" podUID="959bd649-cd6f-4cca-bb3b-7522130f9a6e" Jul 12 00:37:05.281575 env[1225]: time="2025-07-12T00:37:05.281523468Z" level=error msg="encountered an error cleaning up failed sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.281763 env[1225]: time="2025-07-12T00:37:05.281705549Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-knnn4,Uid:a628162b-ce5f-4ca6-8662-fc728afedeff,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.282153 kubelet[1948]: E0712 00:37:05.282035 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.282153 kubelet[1948]: E0712 00:37:05.282075 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" Jul 12 00:37:05.282153 kubelet[1948]: E0712 00:37:05.282091 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" Jul 12 00:37:05.282472 kubelet[1948]: E0712 00:37:05.282163 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5b66657499-knnn4_calico-apiserver(a628162b-ce5f-4ca6-8662-fc728afedeff)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5b66657499-knnn4_calico-apiserver(a628162b-ce5f-4ca6-8662-fc728afedeff)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" podUID="a628162b-ce5f-4ca6-8662-fc728afedeff" Jul 12 00:37:05.289184 env[1225]: time="2025-07-12T00:37:05.289140601Z" level=error msg="Failed to destroy network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.289509 env[1225]: time="2025-07-12T00:37:05.289475764Z" level=error msg="encountered an error cleaning up failed sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.289593 env[1225]: time="2025-07-12T00:37:05.289525404Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-qd6zx,Uid:ab89e077-9e27-42c7-85ee-0fd8db11d2e2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.289926 kubelet[1948]: E0712 00:37:05.289759 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.289926 kubelet[1948]: E0712 00:37:05.289797 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-qd6zx" Jul 12 00:37:05.289926 kubelet[1948]: E0712 00:37:05.289812 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-qd6zx" Jul 12 00:37:05.290857 kubelet[1948]: E0712 00:37:05.289855 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-qd6zx_calico-system(ab89e077-9e27-42c7-85ee-0fd8db11d2e2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-qd6zx_calico-system(ab89e077-9e27-42c7-85ee-0fd8db11d2e2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-qd6zx" podUID="ab89e077-9e27-42c7-85ee-0fd8db11d2e2" Jul 12 00:37:05.290941 env[1225]: time="2025-07-12T00:37:05.290376290Z" level=error msg="Failed to destroy network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.291045 env[1225]: time="2025-07-12T00:37:05.290964134Z" level=error msg="encountered an error cleaning up failed sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.291045 env[1225]: time="2025-07-12T00:37:05.291024014Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jzsjt,Uid:90be7b23-6894-474b-b81f-606de468c5af,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.291708 kubelet[1948]: E0712 00:37:05.291226 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.291708 kubelet[1948]: E0712 00:37:05.291266 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-jzsjt" Jul 12 00:37:05.291708 kubelet[1948]: E0712 00:37:05.291290 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-jzsjt" Jul 12 00:37:05.291839 kubelet[1948]: E0712 00:37:05.291321 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-jzsjt_kube-system(90be7b23-6894-474b-b81f-606de468c5af)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-jzsjt_kube-system(90be7b23-6894-474b-b81f-606de468c5af)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-jzsjt" podUID="90be7b23-6894-474b-b81f-606de468c5af" Jul 12 00:37:05.748516 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916-shm.mount: Deactivated successfully. Jul 12 00:37:05.816306 systemd[1]: Created slice kubepods-besteffort-podb2661cac_2427_4630_8294_055c230ed79c.slice. Jul 12 00:37:05.818115 env[1225]: time="2025-07-12T00:37:05.818069713Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lmhhb,Uid:b2661cac-2427-4630-8294-055c230ed79c,Namespace:calico-system,Attempt:0,}" Jul 12 00:37:05.870583 env[1225]: time="2025-07-12T00:37:05.870510161Z" level=error msg="Failed to destroy network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.872805 env[1225]: time="2025-07-12T00:37:05.872748456Z" level=error msg="encountered an error cleaning up failed sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.872858 env[1225]: time="2025-07-12T00:37:05.872820817Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lmhhb,Uid:b2661cac-2427-4630-8294-055c230ed79c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.873099 kubelet[1948]: E0712 00:37:05.873047 1948 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.873148 kubelet[1948]: E0712 00:37:05.873129 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:37:05.873178 kubelet[1948]: E0712 00:37:05.873150 1948 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-lmhhb" Jul 12 00:37:05.873232 kubelet[1948]: E0712 00:37:05.873207 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-lmhhb_calico-system(b2661cac-2427-4630-8294-055c230ed79c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-lmhhb_calico-system(b2661cac-2427-4630-8294-055c230ed79c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-lmhhb" podUID="b2661cac-2427-4630-8294-055c230ed79c" Jul 12 00:37:05.874183 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb-shm.mount: Deactivated successfully. Jul 12 00:37:05.911161 kubelet[1948]: I0712 00:37:05.911128 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:05.911850 env[1225]: time="2025-07-12T00:37:05.911812890Z" level=info msg="StopPodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\"" Jul 12 00:37:05.912351 kubelet[1948]: I0712 00:37:05.912326 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:05.912853 env[1225]: time="2025-07-12T00:37:05.912807737Z" level=info msg="StopPodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\"" Jul 12 00:37:05.913896 kubelet[1948]: I0712 00:37:05.913862 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:05.914678 env[1225]: time="2025-07-12T00:37:05.914648630Z" level=info msg="StopPodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\"" Jul 12 00:37:05.915979 kubelet[1948]: I0712 00:37:05.915951 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:05.916613 env[1225]: time="2025-07-12T00:37:05.916578644Z" level=info msg="StopPodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\"" Jul 12 00:37:05.917588 kubelet[1948]: I0712 00:37:05.917564 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:05.918742 env[1225]: time="2025-07-12T00:37:05.918708619Z" level=info msg="StopPodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\"" Jul 12 00:37:05.920417 kubelet[1948]: I0712 00:37:05.920371 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:05.923854 env[1225]: time="2025-07-12T00:37:05.923795655Z" level=info msg="StopPodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\"" Jul 12 00:37:05.925554 kubelet[1948]: I0712 00:37:05.925487 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:05.926180 env[1225]: time="2025-07-12T00:37:05.926149711Z" level=info msg="StopPodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\"" Jul 12 00:37:05.930461 kubelet[1948]: I0712 00:37:05.930414 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:05.930977 env[1225]: time="2025-07-12T00:37:05.930934785Z" level=info msg="StopPodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\"" Jul 12 00:37:05.963801 env[1225]: time="2025-07-12T00:37:05.963744415Z" level=error msg="StopPodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" failed" error="failed to destroy network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.964388 kubelet[1948]: E0712 00:37:05.964177 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:05.964388 kubelet[1948]: E0712 00:37:05.964231 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b"} Jul 12 00:37:05.964388 kubelet[1948]: E0712 00:37:05.964300 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"333c2284-4856-4b96-ae71-299989a675c9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:05.964388 kubelet[1948]: E0712 00:37:05.964325 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"333c2284-4856-4b96-ae71-299989a675c9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" podUID="333c2284-4856-4b96-ae71-299989a675c9" Jul 12 00:37:05.970549 env[1225]: time="2025-07-12T00:37:05.970500502Z" level=error msg="StopPodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" failed" error="failed to destroy network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.970965 kubelet[1948]: E0712 00:37:05.970825 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:05.970965 kubelet[1948]: E0712 00:37:05.970867 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb"} Jul 12 00:37:05.970965 kubelet[1948]: E0712 00:37:05.970897 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"90be7b23-6894-474b-b81f-606de468c5af\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:05.970965 kubelet[1948]: E0712 00:37:05.970921 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"90be7b23-6894-474b-b81f-606de468c5af\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-jzsjt" podUID="90be7b23-6894-474b-b81f-606de468c5af" Jul 12 00:37:05.995137 env[1225]: time="2025-07-12T00:37:05.995050275Z" level=error msg="StopPodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" failed" error="failed to destroy network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.995796 kubelet[1948]: E0712 00:37:05.995636 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:05.995796 kubelet[1948]: E0712 00:37:05.995684 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916"} Jul 12 00:37:05.995796 kubelet[1948]: E0712 00:37:05.995718 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f1037071-874e-4ed9-81a9-12644090e882\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:05.995796 kubelet[1948]: E0712 00:37:05.995740 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f1037071-874e-4ed9-81a9-12644090e882\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7dc57d494d-5mv8g" podUID="f1037071-874e-4ed9-81a9-12644090e882" Jul 12 00:37:05.997267 env[1225]: time="2025-07-12T00:37:05.997218490Z" level=error msg="StopPodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" failed" error="failed to destroy network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:05.997634 kubelet[1948]: E0712 00:37:05.997510 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:05.997634 kubelet[1948]: E0712 00:37:05.997545 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced"} Jul 12 00:37:05.997634 kubelet[1948]: E0712 00:37:05.997570 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"959bd649-cd6f-4cca-bb3b-7522130f9a6e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:05.997634 kubelet[1948]: E0712 00:37:05.997594 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"959bd649-cd6f-4cca-bb3b-7522130f9a6e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" podUID="959bd649-cd6f-4cca-bb3b-7522130f9a6e" Jul 12 00:37:06.002420 env[1225]: time="2025-07-12T00:37:06.002321485Z" level=error msg="StopPodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" failed" error="failed to destroy network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:06.002757 kubelet[1948]: E0712 00:37:06.002641 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:06.002757 kubelet[1948]: E0712 00:37:06.002673 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234"} Jul 12 00:37:06.002757 kubelet[1948]: E0712 00:37:06.002696 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a628162b-ce5f-4ca6-8662-fc728afedeff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:06.002757 kubelet[1948]: E0712 00:37:06.002714 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a628162b-ce5f-4ca6-8662-fc728afedeff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" podUID="a628162b-ce5f-4ca6-8662-fc728afedeff" Jul 12 00:37:06.015180 env[1225]: time="2025-07-12T00:37:06.015128769Z" level=error msg="StopPodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" failed" error="failed to destroy network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:06.015700 kubelet[1948]: E0712 00:37:06.015554 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:06.015700 kubelet[1948]: E0712 00:37:06.015607 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a"} Jul 12 00:37:06.015700 kubelet[1948]: E0712 00:37:06.015638 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fce8ecab-7388-48d6-ad03-2056d4c42692\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:06.015700 kubelet[1948]: E0712 00:37:06.015660 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fce8ecab-7388-48d6-ad03-2056d4c42692\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-gswv7" podUID="fce8ecab-7388-48d6-ad03-2056d4c42692" Jul 12 00:37:06.017885 env[1225]: time="2025-07-12T00:37:06.017767186Z" level=error msg="StopPodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" failed" error="failed to destroy network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:06.018123 kubelet[1948]: E0712 00:37:06.018060 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:06.018123 kubelet[1948]: E0712 00:37:06.018116 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb"} Jul 12 00:37:06.018226 kubelet[1948]: E0712 00:37:06.018143 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b2661cac-2427-4630-8294-055c230ed79c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:06.018226 kubelet[1948]: E0712 00:37:06.018160 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b2661cac-2427-4630-8294-055c230ed79c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-lmhhb" podUID="b2661cac-2427-4630-8294-055c230ed79c" Jul 12 00:37:06.021272 env[1225]: time="2025-07-12T00:37:06.021227889Z" level=error msg="StopPodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" failed" error="failed to destroy network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:37:06.021506 kubelet[1948]: E0712 00:37:06.021457 1948 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:06.021573 kubelet[1948]: E0712 00:37:06.021504 1948 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7"} Jul 12 00:37:06.021573 kubelet[1948]: E0712 00:37:06.021542 1948 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ab89e077-9e27-42c7-85ee-0fd8db11d2e2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:37:06.021573 kubelet[1948]: E0712 00:37:06.021566 1948 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ab89e077-9e27-42c7-85ee-0fd8db11d2e2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-qd6zx" podUID="ab89e077-9e27-42c7-85ee-0fd8db11d2e2" Jul 12 00:37:09.604067 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount977620176.mount: Deactivated successfully. Jul 12 00:37:09.831368 env[1225]: time="2025-07-12T00:37:09.831295823Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:09.833311 env[1225]: time="2025-07-12T00:37:09.833262034Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:09.835256 env[1225]: time="2025-07-12T00:37:09.835219684Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:09.836517 env[1225]: time="2025-07-12T00:37:09.836485491Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:09.836998 env[1225]: time="2025-07-12T00:37:09.836955254Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 12 00:37:09.858719 env[1225]: time="2025-07-12T00:37:09.858602411Z" level=info msg="CreateContainer within sandbox \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 12 00:37:09.975540 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount429851660.mount: Deactivated successfully. Jul 12 00:37:09.996231 env[1225]: time="2025-07-12T00:37:09.996178877Z" level=info msg="CreateContainer within sandbox \"bd2e0aeaa07742fe6f750e655993d5f6aeb67b2e2a653775964fcc56cba7f03c\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"ede71a555e48dac4da0aa35a908c0e7b3e6549f124036d3ea3612bbfcd04eb34\"" Jul 12 00:37:09.997914 env[1225]: time="2025-07-12T00:37:09.996919081Z" level=info msg="StartContainer for \"ede71a555e48dac4da0aa35a908c0e7b3e6549f124036d3ea3612bbfcd04eb34\"" Jul 12 00:37:10.015009 systemd[1]: Started cri-containerd-ede71a555e48dac4da0aa35a908c0e7b3e6549f124036d3ea3612bbfcd04eb34.scope. Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065645 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 12 00:37:10.065712 kernel: audit: type=1400 audit(1752280630.064:1008): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2407 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:10.070396 kernel: audit: type=1300 audit(1752280630.064:1008): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2407 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:10.070496 kernel: audit: type=1327 audit(1752280630.064:1008): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564653731613535356534386461633464613061613335613930386330 Jul 12 00:37:10.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564653731613535356534386461633464613061613335613930386330 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.075100 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.077802 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.080984 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.087230 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.087343 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.092460 env[1225]: time="2025-07-12T00:37:10.092417767Z" level=info msg="StartContainer for \"ede71a555e48dac4da0aa35a908c0e7b3e6549f124036d3ea3612bbfcd04eb34\" returns successfully" Jul 12 00:37:10.094107 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.096636 kernel: audit: type=1400 audit(1752280630.064:1009): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.064000 audit: BPF prog-id=136 op=LOAD Jul 12 00:37:10.064000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2407 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:10.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564653731613535356534386461633464613061613335613930386330 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.065000 audit: BPF prog-id=137 op=LOAD Jul 12 00:37:10.065000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2407 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:10.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564653731613535356534386461633464613061613335613930386330 Jul 12 00:37:10.067000 audit: BPF prog-id=137 op=UNLOAD Jul 12 00:37:10.067000 audit: BPF prog-id=136 op=UNLOAD Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:10.067000 audit: BPF prog-id=138 op=LOAD Jul 12 00:37:10.067000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2407 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:10.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564653731613535356534386461633464613061613335613930386330 Jul 12 00:37:10.324202 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 12 00:37:10.324341 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 12 00:37:10.457591 env[1225]: time="2025-07-12T00:37:10.457531463Z" level=info msg="StopPodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\"" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.588 [INFO][3212] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.589 [INFO][3212] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" iface="eth0" netns="/var/run/netns/cni-76b1a44e-126d-f37b-a049-97c3a75e17e1" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.589 [INFO][3212] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" iface="eth0" netns="/var/run/netns/cni-76b1a44e-126d-f37b-a049-97c3a75e17e1" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.590 [INFO][3212] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" iface="eth0" netns="/var/run/netns/cni-76b1a44e-126d-f37b-a049-97c3a75e17e1" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.590 [INFO][3212] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.590 [INFO][3212] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.715 [INFO][3220] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.715 [INFO][3220] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.716 [INFO][3220] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.726 [WARNING][3220] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.726 [INFO][3220] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.728 [INFO][3220] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:10.731480 env[1225]: 2025-07-12 00:37:10.729 [INFO][3212] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:10.734193 env[1225]: time="2025-07-12T00:37:10.734148028Z" level=info msg="TearDown network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" successfully" Jul 12 00:37:10.734341 env[1225]: time="2025-07-12T00:37:10.734320909Z" level=info msg="StopPodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" returns successfully" Jul 12 00:37:10.736015 systemd[1]: run-netns-cni\x2d76b1a44e\x2d126d\x2df37b\x2da049\x2d97c3a75e17e1.mount: Deactivated successfully. Jul 12 00:37:10.899851 kubelet[1948]: I0712 00:37:10.899799 1948 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f1037071-874e-4ed9-81a9-12644090e882-whisker-backend-key-pair\") pod \"f1037071-874e-4ed9-81a9-12644090e882\" (UID: \"f1037071-874e-4ed9-81a9-12644090e882\") " Jul 12 00:37:10.899851 kubelet[1948]: I0712 00:37:10.899851 1948 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mt4kp\" (UniqueName: \"kubernetes.io/projected/f1037071-874e-4ed9-81a9-12644090e882-kube-api-access-mt4kp\") pod \"f1037071-874e-4ed9-81a9-12644090e882\" (UID: \"f1037071-874e-4ed9-81a9-12644090e882\") " Jul 12 00:37:10.900408 kubelet[1948]: I0712 00:37:10.899885 1948 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f1037071-874e-4ed9-81a9-12644090e882-whisker-ca-bundle\") pod \"f1037071-874e-4ed9-81a9-12644090e882\" (UID: \"f1037071-874e-4ed9-81a9-12644090e882\") " Jul 12 00:37:10.904411 kubelet[1948]: I0712 00:37:10.903993 1948 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f1037071-874e-4ed9-81a9-12644090e882-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "f1037071-874e-4ed9-81a9-12644090e882" (UID: "f1037071-874e-4ed9-81a9-12644090e882"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 12 00:37:10.907593 systemd[1]: var-lib-kubelet-pods-f1037071\x2d874e\x2d4ed9\x2d81a9\x2d12644090e882-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 12 00:37:10.909872 systemd[1]: var-lib-kubelet-pods-f1037071\x2d874e\x2d4ed9\x2d81a9\x2d12644090e882-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmt4kp.mount: Deactivated successfully. Jul 12 00:37:10.910989 kubelet[1948]: I0712 00:37:10.910956 1948 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f1037071-874e-4ed9-81a9-12644090e882-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "f1037071-874e-4ed9-81a9-12644090e882" (UID: "f1037071-874e-4ed9-81a9-12644090e882"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 12 00:37:10.911111 kubelet[1948]: I0712 00:37:10.911003 1948 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f1037071-874e-4ed9-81a9-12644090e882-kube-api-access-mt4kp" (OuterVolumeSpecName: "kube-api-access-mt4kp") pod "f1037071-874e-4ed9-81a9-12644090e882" (UID: "f1037071-874e-4ed9-81a9-12644090e882"). InnerVolumeSpecName "kube-api-access-mt4kp". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 12 00:37:10.947805 systemd[1]: Removed slice kubepods-besteffort-podf1037071_874e_4ed9_81a9_12644090e882.slice. Jul 12 00:37:10.965491 kubelet[1948]: I0712 00:37:10.965153 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-dfcdn" podStartSLOduration=1.5851073260000001 podStartE2EDuration="12.965134602s" podCreationTimestamp="2025-07-12 00:36:58 +0000 UTC" firstStartedPulling="2025-07-12 00:36:58.457967703 +0000 UTC m=+18.736150964" lastFinishedPulling="2025-07-12 00:37:09.837995019 +0000 UTC m=+30.116178240" observedRunningTime="2025-07-12 00:37:10.963644475 +0000 UTC m=+31.241827736" watchObservedRunningTime="2025-07-12 00:37:10.965134602 +0000 UTC m=+31.243317863" Jul 12 00:37:11.000521 kubelet[1948]: I0712 00:37:11.000409 1948 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f1037071-874e-4ed9-81a9-12644090e882-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 12 00:37:11.000701 kubelet[1948]: I0712 00:37:11.000659 1948 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-mt4kp\" (UniqueName: \"kubernetes.io/projected/f1037071-874e-4ed9-81a9-12644090e882-kube-api-access-mt4kp\") on node \"localhost\" DevicePath \"\"" Jul 12 00:37:11.000738 kubelet[1948]: I0712 00:37:11.000703 1948 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f1037071-874e-4ed9-81a9-12644090e882-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 12 00:37:11.009008 systemd[1]: Created slice kubepods-besteffort-pod4bc45812_8602_4788_be86_b2d4cd9d6443.slice. Jul 12 00:37:11.201946 kubelet[1948]: I0712 00:37:11.201890 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4bc45812-8602-4788-be86-b2d4cd9d6443-whisker-ca-bundle\") pod \"whisker-f4c4d7b88-fvjtv\" (UID: \"4bc45812-8602-4788-be86-b2d4cd9d6443\") " pod="calico-system/whisker-f4c4d7b88-fvjtv" Jul 12 00:37:11.201946 kubelet[1948]: I0712 00:37:11.201943 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/4bc45812-8602-4788-be86-b2d4cd9d6443-whisker-backend-key-pair\") pod \"whisker-f4c4d7b88-fvjtv\" (UID: \"4bc45812-8602-4788-be86-b2d4cd9d6443\") " pod="calico-system/whisker-f4c4d7b88-fvjtv" Jul 12 00:37:11.202133 kubelet[1948]: I0712 00:37:11.201965 1948 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gtzcj\" (UniqueName: \"kubernetes.io/projected/4bc45812-8602-4788-be86-b2d4cd9d6443-kube-api-access-gtzcj\") pod \"whisker-f4c4d7b88-fvjtv\" (UID: \"4bc45812-8602-4788-be86-b2d4cd9d6443\") " pod="calico-system/whisker-f4c4d7b88-fvjtv" Jul 12 00:37:11.613228 env[1225]: time="2025-07-12T00:37:11.613174861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f4c4d7b88-fvjtv,Uid:4bc45812-8602-4788-be86-b2d4cd9d6443,Namespace:calico-system,Attempt:0,}" Jul 12 00:37:11.724893 systemd-networkd[1058]: cali5e6095c3d39: Link UP Jul 12 00:37:11.727057 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:37:11.727136 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5e6095c3d39: link becomes ready Jul 12 00:37:11.727661 systemd-networkd[1058]: cali5e6095c3d39: Gained carrier Jul 12 00:37:11.753000 audit[3314]: AVC avc: denied { write } for pid=3314 comm="tee" name="fd" dev="proc" ino=20517 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.753000 audit[3314]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd9c637dd a2=241 a3=1b6 items=1 ppid=3283 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.753000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 12 00:37:11.753000 audit: PATH item=0 name="/dev/fd/63" inode=18949 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.639 [INFO][3244] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.652 [INFO][3244] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0 whisker-f4c4d7b88- calico-system 4bc45812-8602-4788-be86-b2d4cd9d6443 925 0 2025-07-12 00:37:10 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:f4c4d7b88 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-f4c4d7b88-fvjtv eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali5e6095c3d39 [] [] }} ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.652 [INFO][3244] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.675 [INFO][3257] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" HandleID="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Workload="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.675 [INFO][3257] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" HandleID="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Workload="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d2a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-f4c4d7b88-fvjtv", "timestamp":"2025-07-12 00:37:11.675740039 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.676 [INFO][3257] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.676 [INFO][3257] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.676 [INFO][3257] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.687 [INFO][3257] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.694 [INFO][3257] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.699 [INFO][3257] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.701 [INFO][3257] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.703 [INFO][3257] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.703 [INFO][3257] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.704 [INFO][3257] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45 Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.708 [INFO][3257] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.713 [INFO][3257] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.713 [INFO][3257] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" host="localhost" Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.713 [INFO][3257] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:11.760612 env[1225]: 2025-07-12 00:37:11.713 [INFO][3257] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" HandleID="k8s-pod-network.c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Workload="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.761184 env[1225]: 2025-07-12 00:37:11.715 [INFO][3244] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0", GenerateName:"whisker-f4c4d7b88-", Namespace:"calico-system", SelfLink:"", UID:"4bc45812-8602-4788-be86-b2d4cd9d6443", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 37, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f4c4d7b88", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-f4c4d7b88-fvjtv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali5e6095c3d39", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:11.761184 env[1225]: 2025-07-12 00:37:11.715 [INFO][3244] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.761184 env[1225]: 2025-07-12 00:37:11.715 [INFO][3244] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5e6095c3d39 ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.761184 env[1225]: 2025-07-12 00:37:11.727 [INFO][3244] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.761184 env[1225]: 2025-07-12 00:37:11.729 [INFO][3244] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0", GenerateName:"whisker-f4c4d7b88-", Namespace:"calico-system", SelfLink:"", UID:"4bc45812-8602-4788-be86-b2d4cd9d6443", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 37, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f4c4d7b88", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45", Pod:"whisker-f4c4d7b88-fvjtv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali5e6095c3d39", MAC:"36:82:53:75:f5:a8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:11.761184 env[1225]: 2025-07-12 00:37:11.756 [INFO][3244] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45" Namespace="calico-system" Pod="whisker-f4c4d7b88-fvjtv" WorkloadEndpoint="localhost-k8s-whisker--f4c4d7b88--fvjtv-eth0" Jul 12 00:37:11.764000 audit[3302]: AVC avc: denied { write } for pid=3302 comm="tee" name="fd" dev="proc" ino=19816 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.764000 audit[3302]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd29747ce a2=241 a3=1b6 items=1 ppid=3282 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.764000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 12 00:37:11.764000 audit: PATH item=0 name="/dev/fd/63" inode=20508 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.764000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.768000 audit[3342]: AVC avc: denied { write } for pid=3342 comm="tee" name="fd" dev="proc" ino=20530 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.768000 audit[3342]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe072f7cd a2=241 a3=1b6 items=1 ppid=3291 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.768000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 12 00:37:11.768000 audit: PATH item=0 name="/dev/fd/63" inode=19819 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.768000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.778000 audit[3351]: AVC avc: denied { write } for pid=3351 comm="tee" name="fd" dev="proc" ino=18963 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.778000 audit[3351]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc4acd7dd a2=241 a3=1b6 items=1 ppid=3286 pid=3351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.778000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 12 00:37:11.778000 audit: PATH item=0 name="/dev/fd/63" inode=18960 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.778000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.780000 audit[3340]: AVC avc: denied { write } for pid=3340 comm="tee" name="fd" dev="proc" ino=18967 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.780000 audit[3340]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffb3cd7dd a2=241 a3=1b6 items=1 ppid=3297 pid=3340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.780000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 12 00:37:11.780000 audit: PATH item=0 name="/dev/fd/63" inode=19818 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.780000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.788000 audit[3358]: AVC avc: denied { write } for pid=3358 comm="tee" name="fd" dev="proc" ino=20539 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.788000 audit[3358]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc98487df a2=241 a3=1b6 items=1 ppid=3279 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.788000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 12 00:37:11.788000 audit: PATH item=0 name="/dev/fd/63" inode=18123 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.788000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.806000 audit[3364]: AVC avc: denied { write } for pid=3364 comm="tee" name="fd" dev="proc" ino=20543 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:37:11.806000 audit[3364]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc17a47de a2=241 a3=1b6 items=1 ppid=3278 pid=3364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.806000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 12 00:37:11.806000 audit: PATH item=0 name="/dev/fd/63" inode=20536 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:37:11.806000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:37:11.814281 kubelet[1948]: I0712 00:37:11.814225 1948 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="f1037071-874e-4ed9-81a9-12644090e882" path="/var/lib/kubelet/pods/f1037071-874e-4ed9-81a9-12644090e882/volumes" Jul 12 00:37:11.820753 env[1225]: time="2025-07-12T00:37:11.820657849Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:11.820923 env[1225]: time="2025-07-12T00:37:11.820762170Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:11.820923 env[1225]: time="2025-07-12T00:37:11.820790130Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:11.821002 env[1225]: time="2025-07-12T00:37:11.820965331Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45 pid=3374 runtime=io.containerd.runc.v2 Jul 12 00:37:11.853089 systemd[1]: Started cri-containerd-c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45.scope. Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit: BPF prog-id=139 op=LOAD Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366435396135396435376636383635396236376231323863633564 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366435396135396435376636383635396236376231323863633564 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit: BPF prog-id=140 op=LOAD Jul 12 00:37:11.884000 audit[3386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366435396135396435376636383635396236376231323863633564 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.884000 audit: BPF prog-id=141 op=LOAD Jul 12 00:37:11.884000 audit[3386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366435396135396435376636383635396236376231323863633564 Jul 12 00:37:11.885000 audit: BPF prog-id=141 op=UNLOAD Jul 12 00:37:11.885000 audit: BPF prog-id=140 op=UNLOAD Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:11.885000 audit: BPF prog-id=142 op=LOAD Jul 12 00:37:11.885000 audit[3386]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3374 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:11.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333366435396135396435376636383635396236376231323863633564 Jul 12 00:37:11.890445 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:11.914194 env[1225]: time="2025-07-12T00:37:11.914147855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f4c4d7b88-fvjtv,Uid:4bc45812-8602-4788-be86-b2d4cd9d6443,Namespace:calico-system,Attempt:0,} returns sandbox id \"c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45\"" Jul 12 00:37:11.915801 env[1225]: time="2025-07-12T00:37:11.915767502Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 12 00:37:11.943860 kubelet[1948]: I0712 00:37:11.943817 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:12.604468 systemd[1]: run-containerd-runc-k8s.io-c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45-runc.xsXnMp.mount: Deactivated successfully. Jul 12 00:37:12.878480 env[1225]: time="2025-07-12T00:37:12.878348507Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:12.880214 env[1225]: time="2025-07-12T00:37:12.880176955Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:12.881957 env[1225]: time="2025-07-12T00:37:12.881926003Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:12.883212 env[1225]: time="2025-07-12T00:37:12.883184688Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:12.883784 env[1225]: time="2025-07-12T00:37:12.883739051Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 12 00:37:12.890721 env[1225]: time="2025-07-12T00:37:12.890671642Z" level=info msg="CreateContainer within sandbox \"c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 12 00:37:12.904590 env[1225]: time="2025-07-12T00:37:12.904539784Z" level=info msg="CreateContainer within sandbox \"c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"6c2fc740fed54d38272cb3e37e58178acfeca504fba757fb0c434288ebd99045\"" Jul 12 00:37:12.905361 env[1225]: time="2025-07-12T00:37:12.905331987Z" level=info msg="StartContainer for \"6c2fc740fed54d38272cb3e37e58178acfeca504fba757fb0c434288ebd99045\"" Jul 12 00:37:12.947951 systemd[1]: Started cri-containerd-6c2fc740fed54d38272cb3e37e58178acfeca504fba757fb0c434288ebd99045.scope. Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.984000 audit: BPF prog-id=143 op=LOAD Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3374 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:12.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663326663373430666564353464333832373263623365333765353831 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3374 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:12.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663326663373430666564353464333832373263623365333765353831 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit: BPF prog-id=144 op=LOAD Jul 12 00:37:12.985000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3374 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:12.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663326663373430666564353464333832373263623365333765353831 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit: BPF prog-id=145 op=LOAD Jul 12 00:37:12.985000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3374 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:12.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663326663373430666564353464333832373263623365333765353831 Jul 12 00:37:12.985000 audit: BPF prog-id=145 op=UNLOAD Jul 12 00:37:12.985000 audit: BPF prog-id=144 op=UNLOAD Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { perfmon } for pid=3434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit[3434]: AVC avc: denied { bpf } for pid=3434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:12.985000 audit: BPF prog-id=146 op=LOAD Jul 12 00:37:12.985000 audit[3434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3374 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:12.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663326663373430666564353464333832373263623365333765353831 Jul 12 00:37:13.015144 env[1225]: time="2025-07-12T00:37:13.015093553Z" level=info msg="StartContainer for \"6c2fc740fed54d38272cb3e37e58178acfeca504fba757fb0c434288ebd99045\" returns successfully" Jul 12 00:37:13.016564 env[1225]: time="2025-07-12T00:37:13.016537359Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 12 00:37:13.043000 audit[3450]: AVC avc: denied { search } for pid=3450 comm="nginx" name="crypto" dev="proc" ino=18206 scontext=system_u:system_r:svirt_lxc_net_t:s0:c692,c780 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 12 00:37:13.043000 audit[3450]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffb89c3958 a2=0 a3=0 items=0 ppid=3374 pid=3450 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c692,c780 key=(null) Jul 12 00:37:13.043000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 12 00:37:13.133504 systemd-networkd[1058]: cali5e6095c3d39: Gained IPv6LL Jul 12 00:37:13.604639 systemd[1]: run-containerd-runc-k8s.io-6c2fc740fed54d38272cb3e37e58178acfeca504fba757fb0c434288ebd99045-runc.X7aKRL.mount: Deactivated successfully. Jul 12 00:37:14.306090 kubelet[1948]: I0712 00:37:14.305411 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:14.306090 kubelet[1948]: E0712 00:37:14.305746 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:14.370000 audit[3501]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:14.370000 audit[3501]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdc68a760 a2=0 a3=1 items=0 ppid=2057 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:14.376000 audit[3501]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:14.376000 audit[3501]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdc68a760 a2=0 a3=1 items=0 ppid=2057 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.376000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:14.470233 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3714098319.mount: Deactivated successfully. Jul 12 00:37:14.507886 env[1225]: time="2025-07-12T00:37:14.507829031Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:14.509648 env[1225]: time="2025-07-12T00:37:14.509609318Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:14.511213 env[1225]: time="2025-07-12T00:37:14.511186724Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:14.512559 env[1225]: time="2025-07-12T00:37:14.512527449Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:14.513240 env[1225]: time="2025-07-12T00:37:14.513208732Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 12 00:37:14.516163 env[1225]: time="2025-07-12T00:37:14.516122783Z" level=info msg="CreateContainer within sandbox \"c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 12 00:37:14.531718 env[1225]: time="2025-07-12T00:37:14.531664044Z" level=info msg="CreateContainer within sandbox \"c36d59a59d57f68659b67b128cc5dcc6eef63ed3479bfcc1c97a95bb0b7bbb45\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"ece78683f02378401e6e119523a63399a47a6b65803faa70e347a423530cf052\"" Jul 12 00:37:14.533763 env[1225]: time="2025-07-12T00:37:14.533712972Z" level=info msg="StartContainer for \"ece78683f02378401e6e119523a63399a47a6b65803faa70e347a423530cf052\"" Jul 12 00:37:14.551309 systemd[1]: Started cri-containerd-ece78683f02378401e6e119523a63399a47a6b65803faa70e347a423530cf052.scope. Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.590000 audit: BPF prog-id=147 op=LOAD Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3374 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653738363833663032333738343031653665313139353233613633 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3374 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653738363833663032333738343031653665313139353233613633 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit: BPF prog-id=148 op=LOAD Jul 12 00:37:14.591000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3374 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653738363833663032333738343031653665313139353233613633 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit: BPF prog-id=149 op=LOAD Jul 12 00:37:14.591000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3374 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653738363833663032333738343031653665313139353233613633 Jul 12 00:37:14.591000 audit: BPF prog-id=149 op=UNLOAD Jul 12 00:37:14.591000 audit: BPF prog-id=148 op=UNLOAD Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:14.591000 audit: BPF prog-id=150 op=LOAD Jul 12 00:37:14.591000 audit[3510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3374 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653738363833663032333738343031653665313139353233613633 Jul 12 00:37:14.613881 env[1225]: time="2025-07-12T00:37:14.613830087Z" level=info msg="StartContainer for \"ece78683f02378401e6e119523a63399a47a6b65803faa70e347a423530cf052\" returns successfully" Jul 12 00:37:14.962958 kubelet[1948]: E0712 00:37:14.962187 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:14.981000 audit[3543]: NETFILTER_CFG table=filter:101 family=2 entries=19 op=nft_register_rule pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:14.981000 audit[3543]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeee98210 a2=0 a3=1 items=0 ppid=2057 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.981000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:14.995000 audit[3543]: NETFILTER_CFG table=nat:102 family=2 entries=21 op=nft_register_chain pid=3543 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:14.995000 audit[3543]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffeee98210 a2=0 a3=1 items=0 ppid=2057 pid=3543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:14.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:15.141142 kernel: kauditd_printk_skb: 254 callbacks suppressed Jul 12 00:37:15.141300 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.141334 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143330 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.145210 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.147165 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.149402 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.151400 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.155335 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.155400 kernel: audit: type=1400 audit(1752280635.136:1080): avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.136000 audit: BPF prog-id=151 op=LOAD Jul 12 00:37:15.136000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd330afb8 a2=98 a3=ffffd330afa8 items=0 ppid=3544 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.156494 kernel: audit: type=1334 audit(1752280635.136:1080): prog-id=151 op=LOAD Jul 12 00:37:15.136000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:37:15.137000 audit: BPF prog-id=151 op=UNLOAD Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.137000 audit: BPF prog-id=152 op=LOAD Jul 12 00:37:15.137000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd330ae68 a2=74 a3=95 items=0 ppid=3544 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.137000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:37:15.139000 audit: BPF prog-id=152 op=UNLOAD Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.139000 audit: BPF prog-id=153 op=LOAD Jul 12 00:37:15.139000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd330ae98 a2=40 a3=ffffd330aec8 items=0 ppid=3544 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.139000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:37:15.140000 audit: BPF prog-id=153 op=UNLOAD Jul 12 00:37:15.140000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.140000 audit[3577]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd330afb0 a2=50 a3=0 items=0 ppid=3544 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.140000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.143000 audit: BPF prog-id=154 op=LOAD Jul 12 00:37:15.143000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffeb6e4598 a2=98 a3=ffffeb6e4588 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.143000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.144000 audit: BPF prog-id=154 op=UNLOAD Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.144000 audit: BPF prog-id=155 op=LOAD Jul 12 00:37:15.144000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffeb6e4228 a2=74 a3=95 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.144000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.156000 audit: BPF prog-id=155 op=UNLOAD Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.156000 audit: BPF prog-id=156 op=LOAD Jul 12 00:37:15.156000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffeb6e4288 a2=94 a3=2 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.156000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.156000 audit: BPF prog-id=156 op=UNLOAD Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit: BPF prog-id=157 op=LOAD Jul 12 00:37:15.273000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffeb6e4248 a2=40 a3=ffffeb6e4278 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.273000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.273000 audit: BPF prog-id=157 op=UNLOAD Jul 12 00:37:15.273000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.273000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffeb6e4360 a2=50 a3=0 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.273000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.283000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.283000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeb6e42b8 a2=28 a3=ffffeb6e43e8 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.283000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.283000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.283000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeb6e42e8 a2=28 a3=ffffeb6e4418 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.283000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.283000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.283000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeb6e4198 a2=28 a3=ffffeb6e42c8 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.283000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.283000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.283000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeb6e4308 a2=28 a3=ffffeb6e4438 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.283000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.283000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.283000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeb6e42e8 a2=28 a3=ffffeb6e4418 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.283000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeb6e42d8 a2=28 a3=ffffeb6e4408 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeb6e4308 a2=28 a3=ffffeb6e4438 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeb6e42e8 a2=28 a3=ffffeb6e4418 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeb6e4308 a2=28 a3=ffffeb6e4438 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeb6e42d8 a2=28 a3=ffffeb6e4408 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeb6e4358 a2=28 a3=ffffeb6e4498 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffeb6e4090 a2=50 a3=0 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit: BPF prog-id=158 op=LOAD Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffeb6e4098 a2=94 a3=5 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit: BPF prog-id=158 op=UNLOAD Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffeb6e41a0 a2=50 a3=0 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffeb6e42e8 a2=4 a3=3 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.285000 audit[3578]: AVC avc: denied { confidentiality } for pid=3578 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:37:15.285000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeb6e42c8 a2=94 a3=6 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.285000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.286000 audit[3578]: AVC avc: denied { confidentiality } for pid=3578 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:37:15.286000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeb6e3a98 a2=94 a3=83 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.286000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { perfmon } for pid=3578 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { bpf } for pid=3578 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.287000 audit[3578]: AVC avc: denied { confidentiality } for pid=3578 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:37:15.287000 audit[3578]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeb6e3a98 a2=94 a3=83 items=0 ppid=3544 pid=3578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.287000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.295000 audit: BPF prog-id=159 op=LOAD Jul 12 00:37:15.295000 audit[3604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb27fdc8 a2=98 a3=fffffb27fdb8 items=0 ppid=3544 pid=3604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.295000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:37:15.296000 audit: BPF prog-id=159 op=UNLOAD Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit: BPF prog-id=160 op=LOAD Jul 12 00:37:15.296000 audit[3604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb27fc78 a2=74 a3=95 items=0 ppid=3544 pid=3604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.296000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:37:15.296000 audit: BPF prog-id=160 op=UNLOAD Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { perfmon } for pid=3604 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit[3604]: AVC avc: denied { bpf } for pid=3604 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.296000 audit: BPF prog-id=161 op=LOAD Jul 12 00:37:15.296000 audit[3604]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb27fca8 a2=40 a3=fffffb27fcd8 items=0 ppid=3544 pid=3604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.296000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:37:15.296000 audit: BPF prog-id=161 op=UNLOAD Jul 12 00:37:15.349873 systemd-networkd[1058]: vxlan.calico: Link UP Jul 12 00:37:15.349883 systemd-networkd[1058]: vxlan.calico: Gained carrier Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit: BPF prog-id=162 op=LOAD Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd44e3a48 a2=98 a3=ffffd44e3a38 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit: BPF prog-id=162 op=UNLOAD Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit: BPF prog-id=163 op=LOAD Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd44e3728 a2=74 a3=95 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit: BPF prog-id=163 op=UNLOAD Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit: BPF prog-id=164 op=LOAD Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd44e3788 a2=94 a3=2 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit: BPF prog-id=164 op=UNLOAD Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd44e37b8 a2=28 a3=ffffd44e38e8 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd44e37e8 a2=28 a3=ffffd44e3918 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd44e3698 a2=28 a3=ffffd44e37c8 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd44e3808 a2=28 a3=ffffd44e3938 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd44e37e8 a2=28 a3=ffffd44e3918 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd44e37d8 a2=28 a3=ffffd44e3908 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd44e3808 a2=28 a3=ffffd44e3938 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd44e37e8 a2=28 a3=ffffd44e3918 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd44e3808 a2=28 a3=ffffd44e3938 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd44e37d8 a2=28 a3=ffffd44e3908 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffd44e3858 a2=28 a3=ffffd44e3998 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.368000 audit: BPF prog-id=165 op=LOAD Jul 12 00:37:15.368000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd44e3678 a2=40 a3=ffffd44e36a8 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.368000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.368000 audit: BPF prog-id=165 op=UNLOAD Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd44e36a0 a2=50 a3=0 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.369000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffd44e36a0 a2=50 a3=0 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.369000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit: BPF prog-id=166 op=LOAD Jul 12 00:37:15.369000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd44e2e08 a2=94 a3=2 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.369000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.369000 audit: BPF prog-id=166 op=UNLOAD Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { perfmon } for pid=3630 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit[3630]: AVC avc: denied { bpf } for pid=3630 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.369000 audit: BPF prog-id=167 op=LOAD Jul 12 00:37:15.369000 audit[3630]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd44e2f98 a2=94 a3=30 items=0 ppid=3544 pid=3630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.369000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.376000 audit: BPF prog-id=168 op=LOAD Jul 12 00:37:15.376000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd12186b8 a2=98 a3=ffffd12186a8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.376000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.376000 audit: BPF prog-id=168 op=UNLOAD Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit: BPF prog-id=169 op=LOAD Jul 12 00:37:15.377000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd1218348 a2=74 a3=95 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.377000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.377000 audit: BPF prog-id=169 op=UNLOAD Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.377000 audit: BPF prog-id=170 op=LOAD Jul 12 00:37:15.377000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd12183a8 a2=94 a3=2 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.377000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.377000 audit: BPF prog-id=170 op=UNLOAD Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit: BPF prog-id=171 op=LOAD Jul 12 00:37:15.461000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd1218368 a2=40 a3=ffffd1218398 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.461000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.461000 audit: BPF prog-id=171 op=UNLOAD Jul 12 00:37:15.461000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.461000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd1218480 a2=50 a3=0 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.461000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd12183d8 a2=28 a3=ffffd1218508 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1218408 a2=28 a3=ffffd1218538 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd12182b8 a2=28 a3=ffffd12183e8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1218428 a2=28 a3=ffffd1218558 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1218408 a2=28 a3=ffffd1218538 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd12183f8 a2=28 a3=ffffd1218528 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1218428 a2=28 a3=ffffd1218558 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1218408 a2=28 a3=ffffd1218538 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd1218428 a2=28 a3=ffffd1218558 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd12183f8 a2=28 a3=ffffd1218528 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd1218478 a2=28 a3=ffffd12185b8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd12181b0 a2=50 a3=0 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit: BPF prog-id=172 op=LOAD Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd12181b8 a2=94 a3=5 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit: BPF prog-id=172 op=UNLOAD Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd12182c0 a2=50 a3=0 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd1218408 a2=4 a3=3 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { confidentiality } for pid=3633 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd12183e8 a2=94 a3=6 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { confidentiality } for pid=3633 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd1217bb8 a2=94 a3=83 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { perfmon } for pid=3633 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.470000 audit[3633]: AVC avc: denied { confidentiality } for pid=3633 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:37:15.470000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd1217bb8 a2=94 a3=83 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.470000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.471000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.471000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd12195f8 a2=10 a3=ffffd12196e8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.471000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.471000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.471000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd12194b8 a2=10 a3=ffffd12195a8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.471000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.471000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.471000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd1219428 a2=10 a3=ffffd12195a8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.471000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.471000 audit[3633]: AVC avc: denied { bpf } for pid=3633 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:15.471000 audit[3633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd1219428 a2=10 a3=ffffd12195a8 items=0 ppid=3544 pid=3633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.471000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:37:15.477000 audit: BPF prog-id=167 op=UNLOAD Jul 12 00:37:15.524000 audit[3663]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=3663 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:15.524000 audit[3663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffff861fe60 a2=0 a3=ffff91cc0fa8 items=0 ppid=3544 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.524000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:15.536000 audit[3662]: NETFILTER_CFG table=nat:104 family=2 entries=15 op=nft_register_chain pid=3662 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:15.536000 audit[3662]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffeffcca50 a2=0 a3=ffffad67cfa8 items=0 ppid=3544 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.536000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:15.543000 audit[3661]: NETFILTER_CFG table=raw:105 family=2 entries=21 op=nft_register_chain pid=3661 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:15.543000 audit[3661]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffc8787960 a2=0 a3=ffff9aad3fa8 items=0 ppid=3544 pid=3661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.543000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:15.545000 audit[3666]: NETFILTER_CFG table=filter:106 family=2 entries=94 op=nft_register_chain pid=3666 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:15.545000 audit[3666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=ffffea1d8190 a2=0 a3=ffffa0af1fa8 items=0 ppid=3544 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:15.545000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:16.672534 systemd[1]: Started sshd@7-10.0.0.113:22-10.0.0.1:59144.service. Jul 12 00:37:16.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.113:22-10.0.0.1:59144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:16.719000 audit[3683]: USER_ACCT pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:16.720163 sshd[3683]: Accepted publickey for core from 10.0.0.1 port 59144 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:16.720000 audit[3683]: CRED_ACQ pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:16.721000 audit[3683]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf5f79f0 a2=3 a3=1 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:16.721000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:16.722237 sshd[3683]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:16.726370 systemd-logind[1210]: New session 8 of user core. Jul 12 00:37:16.727100 systemd[1]: Started session-8.scope. Jul 12 00:37:16.729000 audit[3683]: USER_START pid=3683 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:16.731000 audit[3685]: CRED_ACQ pid=3685 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:16.816618 env[1225]: time="2025-07-12T00:37:16.816477420Z" level=info msg="StopPodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\"" Jul 12 00:37:16.816968 env[1225]: time="2025-07-12T00:37:16.816857941Z" level=info msg="StopPodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\"" Jul 12 00:37:16.864039 kubelet[1948]: I0712 00:37:16.863733 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-f4c4d7b88-fvjtv" podStartSLOduration=4.264512946 podStartE2EDuration="6.863713983s" podCreationTimestamp="2025-07-12 00:37:10 +0000 UTC" firstStartedPulling="2025-07-12 00:37:11.915476661 +0000 UTC m=+32.193659922" lastFinishedPulling="2025-07-12 00:37:14.514677698 +0000 UTC m=+34.792860959" observedRunningTime="2025-07-12 00:37:14.973935821 +0000 UTC m=+35.252119122" watchObservedRunningTime="2025-07-12 00:37:16.863713983 +0000 UTC m=+37.141897204" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.866 [INFO][3722] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.866 [INFO][3722] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" iface="eth0" netns="/var/run/netns/cni-177ef292-8d0c-6253-2a52-df8dc63bb997" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.866 [INFO][3722] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" iface="eth0" netns="/var/run/netns/cni-177ef292-8d0c-6253-2a52-df8dc63bb997" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.866 [INFO][3722] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" iface="eth0" netns="/var/run/netns/cni-177ef292-8d0c-6253-2a52-df8dc63bb997" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.866 [INFO][3722] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.866 [INFO][3722] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.895 [INFO][3737] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.895 [INFO][3737] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.895 [INFO][3737] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.907 [WARNING][3737] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.908 [INFO][3737] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.909 [INFO][3737] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:16.916064 env[1225]: 2025-07-12 00:37:16.911 [INFO][3722] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:16.919211 env[1225]: time="2025-07-12T00:37:16.919150734Z" level=info msg="TearDown network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" successfully" Jul 12 00:37:16.919409 env[1225]: time="2025-07-12T00:37:16.919374375Z" level=info msg="StopPodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" returns successfully" Jul 12 00:37:16.921413 kubelet[1948]: E0712 00:37:16.919789 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:16.921519 env[1225]: time="2025-07-12T00:37:16.920738180Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gswv7,Uid:fce8ecab-7388-48d6-ad03-2056d4c42692,Namespace:kube-system,Attempt:1,}" Jul 12 00:37:16.921458 systemd[1]: run-netns-cni\x2d177ef292\x2d8d0c\x2d6253\x2d2a52\x2ddf8dc63bb997.mount: Deactivated successfully. Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.881 [INFO][3721] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.881 [INFO][3721] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" iface="eth0" netns="/var/run/netns/cni-c06a35a2-07d3-5aaf-03d1-28baa24c3519" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.881 [INFO][3721] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" iface="eth0" netns="/var/run/netns/cni-c06a35a2-07d3-5aaf-03d1-28baa24c3519" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.882 [INFO][3721] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" iface="eth0" netns="/var/run/netns/cni-c06a35a2-07d3-5aaf-03d1-28baa24c3519" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.882 [INFO][3721] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.882 [INFO][3721] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.974 [INFO][3743] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.975 [INFO][3743] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.975 [INFO][3743] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.990 [WARNING][3743] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.990 [INFO][3743] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:16.998 [INFO][3743] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:17.009711 env[1225]: 2025-07-12 00:37:17.006 [INFO][3721] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:17.011648 systemd[1]: run-netns-cni\x2dc06a35a2\x2d07d3\x2d5aaf\x2d03d1\x2d28baa24c3519.mount: Deactivated successfully. Jul 12 00:37:17.014321 env[1225]: time="2025-07-12T00:37:17.014259540Z" level=info msg="TearDown network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" successfully" Jul 12 00:37:17.014321 env[1225]: time="2025-07-12T00:37:17.014313460Z" level=info msg="StopPodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" returns successfully" Jul 12 00:37:17.015478 env[1225]: time="2025-07-12T00:37:17.015445344Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c9584d98d-54sbn,Uid:959bd649-cd6f-4cca-bb3b-7522130f9a6e,Namespace:calico-system,Attempt:1,}" Jul 12 00:37:17.017545 sshd[3683]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:17.018000 audit[3683]: USER_END pid=3683 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:17.018000 audit[3683]: CRED_DISP pid=3683 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:17.021033 systemd[1]: session-8.scope: Deactivated successfully. Jul 12 00:37:17.021578 systemd-logind[1210]: Session 8 logged out. Waiting for processes to exit. Jul 12 00:37:17.021740 systemd[1]: sshd@7-10.0.0.113:22-10.0.0.1:59144.service: Deactivated successfully. Jul 12 00:37:17.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.113:22-10.0.0.1:59144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:17.022915 systemd-logind[1210]: Removed session 8. Jul 12 00:37:17.124539 systemd-networkd[1058]: calic5d7916ec8a: Link UP Jul 12 00:37:17.125483 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic5d7916ec8a: link becomes ready Jul 12 00:37:17.124742 systemd-networkd[1058]: calic5d7916ec8a: Gained carrier Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.048 [INFO][3755] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0 coredns-7c65d6cfc9- kube-system fce8ecab-7388-48d6-ad03-2056d4c42692 1000 0 2025-07-12 00:36:45 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-gswv7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic5d7916ec8a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.049 [INFO][3755] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.082 [INFO][3782] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" HandleID="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.082 [INFO][3782] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" HandleID="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c2fe0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-gswv7", "timestamp":"2025-07-12 00:37:17.082644561 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.082 [INFO][3782] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.082 [INFO][3782] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.082 [INFO][3782] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.092 [INFO][3782] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.099 [INFO][3782] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.103 [INFO][3782] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.105 [INFO][3782] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.107 [INFO][3782] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.107 [INFO][3782] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.109 [INFO][3782] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312 Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.112 [INFO][3782] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.117 [INFO][3782] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.117 [INFO][3782] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" host="localhost" Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.117 [INFO][3782] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:17.143844 env[1225]: 2025-07-12 00:37:17.117 [INFO][3782] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" HandleID="k8s-pod-network.d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.144457 env[1225]: 2025-07-12 00:37:17.119 [INFO][3755] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"fce8ecab-7388-48d6-ad03-2056d4c42692", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-gswv7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5d7916ec8a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:17.144457 env[1225]: 2025-07-12 00:37:17.119 [INFO][3755] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.144457 env[1225]: 2025-07-12 00:37:17.120 [INFO][3755] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic5d7916ec8a ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.144457 env[1225]: 2025-07-12 00:37:17.123 [INFO][3755] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.144457 env[1225]: 2025-07-12 00:37:17.127 [INFO][3755] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"fce8ecab-7388-48d6-ad03-2056d4c42692", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312", Pod:"coredns-7c65d6cfc9-gswv7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5d7916ec8a", MAC:"62:1a:0c:4b:90:d2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:17.144457 env[1225]: 2025-07-12 00:37:17.137 [INFO][3755] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312" Namespace="kube-system" Pod="coredns-7c65d6cfc9-gswv7" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:17.154634 env[1225]: time="2025-07-12T00:37:17.154454554Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:17.154634 env[1225]: time="2025-07-12T00:37:17.154494034Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:17.154634 env[1225]: time="2025-07-12T00:37:17.154504154Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:17.154804 env[1225]: time="2025-07-12T00:37:17.154660474Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312 pid=3818 runtime=io.containerd.runc.v2 Jul 12 00:37:17.154000 audit[3819]: NETFILTER_CFG table=filter:107 family=2 entries=42 op=nft_register_chain pid=3819 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:17.154000 audit[3819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22552 a0=3 a1=ffffde60e2a0 a2=0 a3=ffff8b9f9fa8 items=0 ppid=3544 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.154000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:17.165051 systemd[1]: Started cri-containerd-d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312.scope. Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.200000 audit: BPF prog-id=173 op=LOAD Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3818 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313331313836643531356363343433346465623066666237373933 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3818 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313331313836643531356363343433346465623066666237373933 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit: BPF prog-id=174 op=LOAD Jul 12 00:37:17.201000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3818 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313331313836643531356363343433346465623066666237373933 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit: BPF prog-id=175 op=LOAD Jul 12 00:37:17.201000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3818 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313331313836643531356363343433346465623066666237373933 Jul 12 00:37:17.201000 audit: BPF prog-id=175 op=UNLOAD Jul 12 00:37:17.201000 audit: BPF prog-id=174 op=UNLOAD Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.201000 audit: BPF prog-id=176 op=LOAD Jul 12 00:37:17.201000 audit[3828]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3818 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436313331313836643531356363343433346465623066666237373933 Jul 12 00:37:17.202952 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:17.232494 env[1225]: time="2025-07-12T00:37:17.231501883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-gswv7,Uid:fce8ecab-7388-48d6-ad03-2056d4c42692,Namespace:kube-system,Attempt:1,} returns sandbox id \"d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312\"" Jul 12 00:37:17.232644 kubelet[1948]: E0712 00:37:17.232143 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:17.238717 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali68e8933f051: link becomes ready Jul 12 00:37:17.240638 systemd-networkd[1058]: cali68e8933f051: Link UP Jul 12 00:37:17.240801 systemd-networkd[1058]: cali68e8933f051: Gained carrier Jul 12 00:37:17.242240 env[1225]: time="2025-07-12T00:37:17.242199958Z" level=info msg="CreateContainer within sandbox \"d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.075 [INFO][3768] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0 calico-kube-controllers-7c9584d98d- calico-system 959bd649-cd6f-4cca-bb3b-7522130f9a6e 1001 0 2025-07-12 00:36:58 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7c9584d98d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7c9584d98d-54sbn eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali68e8933f051 [] [] }} ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.077 [INFO][3768] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.108 [INFO][3792] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" HandleID="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.108 [INFO][3792] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" HandleID="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d5730), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7c9584d98d-54sbn", "timestamp":"2025-07-12 00:37:17.108323525 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.108 [INFO][3792] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.118 [INFO][3792] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.118 [INFO][3792] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.194 [INFO][3792] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.199 [INFO][3792] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.213 [INFO][3792] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.215 [INFO][3792] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.218 [INFO][3792] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.218 [INFO][3792] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.220 [INFO][3792] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632 Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.225 [INFO][3792] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.230 [INFO][3792] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.230 [INFO][3792] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" host="localhost" Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.231 [INFO][3792] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:17.258992 env[1225]: 2025-07-12 00:37:17.231 [INFO][3792] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" HandleID="k8s-pod-network.cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.260092 env[1225]: 2025-07-12 00:37:17.234 [INFO][3768] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0", GenerateName:"calico-kube-controllers-7c9584d98d-", Namespace:"calico-system", SelfLink:"", UID:"959bd649-cd6f-4cca-bb3b-7522130f9a6e", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c9584d98d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7c9584d98d-54sbn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali68e8933f051", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:17.260092 env[1225]: 2025-07-12 00:37:17.234 [INFO][3768] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.260092 env[1225]: 2025-07-12 00:37:17.235 [INFO][3768] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali68e8933f051 ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.260092 env[1225]: 2025-07-12 00:37:17.239 [INFO][3768] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.260092 env[1225]: 2025-07-12 00:37:17.241 [INFO][3768] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0", GenerateName:"calico-kube-controllers-7c9584d98d-", Namespace:"calico-system", SelfLink:"", UID:"959bd649-cd6f-4cca-bb3b-7522130f9a6e", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c9584d98d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632", Pod:"calico-kube-controllers-7c9584d98d-54sbn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali68e8933f051", MAC:"06:8f:d6:12:cc:74", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:17.260092 env[1225]: 2025-07-12 00:37:17.252 [INFO][3768] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632" Namespace="calico-system" Pod="calico-kube-controllers-7c9584d98d-54sbn" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:17.266000 audit[3860]: NETFILTER_CFG table=filter:108 family=2 entries=40 op=nft_register_chain pid=3860 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:17.266000 audit[3860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffc61a0640 a2=0 a3=ffffa13befa8 items=0 ppid=3544 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.266000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:17.272554 env[1225]: time="2025-07-12T00:37:17.272513096Z" level=info msg="CreateContainer within sandbox \"d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"036aab611978dbed09238fa2bcbf16c11b729812770139199408ff6884336565\"" Jul 12 00:37:17.273002 env[1225]: time="2025-07-12T00:37:17.272976897Z" level=info msg="StartContainer for \"036aab611978dbed09238fa2bcbf16c11b729812770139199408ff6884336565\"" Jul 12 00:37:17.275836 env[1225]: time="2025-07-12T00:37:17.275750266Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:17.275836 env[1225]: time="2025-07-12T00:37:17.275809546Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:17.275986 env[1225]: time="2025-07-12T00:37:17.275821706Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:17.276486 env[1225]: time="2025-07-12T00:37:17.276432708Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632 pid=3869 runtime=io.containerd.runc.v2 Jul 12 00:37:17.288039 systemd[1]: Started cri-containerd-036aab611978dbed09238fa2bcbf16c11b729812770139199408ff6884336565.scope. Jul 12 00:37:17.294427 systemd[1]: Started cri-containerd-cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632.scope. Jul 12 00:37:17.294911 systemd-networkd[1058]: vxlan.calico: Gained IPv6LL Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit: BPF prog-id=177 op=LOAD Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3869 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653134646366333538353565373532356364306533373861663964 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3869 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653134646366333538353565373532356364306533373861663964 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit: BPF prog-id=178 op=LOAD Jul 12 00:37:17.325000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3869 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653134646366333538353565373532356364306533373861663964 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit: BPF prog-id=179 op=LOAD Jul 12 00:37:17.325000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3869 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653134646366333538353565373532356364306533373861663964 Jul 12 00:37:17.325000 audit: BPF prog-id=179 op=UNLOAD Jul 12 00:37:17.325000 audit: BPF prog-id=178 op=UNLOAD Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { perfmon } for pid=3887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit[3887]: AVC avc: denied { bpf } for pid=3887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.325000 audit: BPF prog-id=180 op=LOAD Jul 12 00:37:17.325000 audit[3887]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3869 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653134646366333538353565373532356364306533373861663964 Jul 12 00:37:17.327675 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.327000 audit: BPF prog-id=181 op=LOAD Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3818 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366161623631313937386462656430393233386661326263626631 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3818 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366161623631313937386462656430393233386661326263626631 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit: BPF prog-id=182 op=LOAD Jul 12 00:37:17.328000 audit[3888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3818 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366161623631313937386462656430393233386661326263626631 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit: BPF prog-id=183 op=LOAD Jul 12 00:37:17.328000 audit[3888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3818 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366161623631313937386462656430393233386661326263626631 Jul 12 00:37:17.328000 audit: BPF prog-id=183 op=UNLOAD Jul 12 00:37:17.328000 audit: BPF prog-id=182 op=UNLOAD Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { perfmon } for pid=3888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit[3888]: AVC avc: denied { bpf } for pid=3888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:17.328000 audit: BPF prog-id=184 op=LOAD Jul 12 00:37:17.328000 audit[3888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3818 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:17.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033366161623631313937386462656430393233386661326263626631 Jul 12 00:37:17.352158 env[1225]: time="2025-07-12T00:37:17.352116113Z" level=info msg="StartContainer for \"036aab611978dbed09238fa2bcbf16c11b729812770139199408ff6884336565\" returns successfully" Jul 12 00:37:17.352496 env[1225]: time="2025-07-12T00:37:17.352460194Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c9584d98d-54sbn,Uid:959bd649-cd6f-4cca-bb3b-7522130f9a6e,Namespace:calico-system,Attempt:1,} returns sandbox id \"cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632\"" Jul 12 00:37:17.356518 env[1225]: time="2025-07-12T00:37:17.356485127Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 12 00:37:17.413000 audit[3907]: AVC avc: denied { getattr } for pid=3907 comm="coredns" path="cgroup:[4026532267]" dev="nsfs" ino=4026532267 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c346 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:37:17.413000 audit[3907]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000569a8 a2=40000da578 a3=0 items=0 ppid=3818 pid=3907 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c346 key=(null) Jul 12 00:37:17.413000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:37:17.813223 env[1225]: time="2025-07-12T00:37:17.813149204Z" level=info msg="StopPodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\"" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.864 [INFO][3952] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.864 [INFO][3952] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" iface="eth0" netns="/var/run/netns/cni-7e5c069c-60f8-f977-5c26-a1374c8cc540" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.864 [INFO][3952] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" iface="eth0" netns="/var/run/netns/cni-7e5c069c-60f8-f977-5c26-a1374c8cc540" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.865 [INFO][3952] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" iface="eth0" netns="/var/run/netns/cni-7e5c069c-60f8-f977-5c26-a1374c8cc540" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.865 [INFO][3952] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.865 [INFO][3952] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.886 [INFO][3961] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.886 [INFO][3961] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.886 [INFO][3961] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.896 [WARNING][3961] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.896 [INFO][3961] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.898 [INFO][3961] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:17.901697 env[1225]: 2025-07-12 00:37:17.899 [INFO][3952] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:17.902423 env[1225]: time="2025-07-12T00:37:17.901839891Z" level=info msg="TearDown network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" successfully" Jul 12 00:37:17.902423 env[1225]: time="2025-07-12T00:37:17.901872251Z" level=info msg="StopPodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" returns successfully" Jul 12 00:37:17.902479 kubelet[1948]: E0712 00:37:17.902177 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:17.903749 env[1225]: time="2025-07-12T00:37:17.903715337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jzsjt,Uid:90be7b23-6894-474b-b81f-606de468c5af,Namespace:kube-system,Attempt:1,}" Jul 12 00:37:17.921035 systemd[1]: run-netns-cni\x2d7e5c069c\x2d60f8\x2df977\x2d5c26\x2da1374c8cc540.mount: Deactivated successfully. Jul 12 00:37:17.987981 kubelet[1948]: E0712 00:37:17.984458 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:18.015072 kubelet[1948]: I0712 00:37:18.014807 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-gswv7" podStartSLOduration=33.014788174 podStartE2EDuration="33.014788174s" podCreationTimestamp="2025-07-12 00:36:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:37:18.001974735 +0000 UTC m=+38.280157996" watchObservedRunningTime="2025-07-12 00:37:18.014788174 +0000 UTC m=+38.292971435" Jul 12 00:37:18.033000 audit[3991]: NETFILTER_CFG table=filter:109 family=2 entries=18 op=nft_register_rule pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:18.033000 audit[3991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffea608810 a2=0 a3=1 items=0 ppid=2057 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.033000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:18.043000 audit[3991]: NETFILTER_CFG table=nat:110 family=2 entries=16 op=nft_register_rule pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:18.043000 audit[3991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffea608810 a2=0 a3=1 items=0 ppid=2057 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.043000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:18.060000 audit[3994]: NETFILTER_CFG table=filter:111 family=2 entries=15 op=nft_register_rule pid=3994 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:18.060000 audit[3994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff2412800 a2=0 a3=1 items=0 ppid=2057 pid=3994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.060000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:18.075000 audit[3994]: NETFILTER_CFG table=nat:112 family=2 entries=37 op=nft_register_chain pid=3994 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:18.075000 audit[3994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=fffff2412800 a2=0 a3=1 items=0 ppid=2057 pid=3994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:18.087177 systemd-networkd[1058]: cali198b604ec9b: Link UP Jul 12 00:37:18.090106 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali198b604ec9b: link becomes ready Jul 12 00:37:18.088373 systemd-networkd[1058]: cali198b604ec9b: Gained carrier Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:17.979 [INFO][3969] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0 coredns-7c65d6cfc9- kube-system 90be7b23-6894-474b-b81f-606de468c5af 1022 0 2025-07-12 00:36:45 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-jzsjt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali198b604ec9b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:17.979 [INFO][3969] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.037 [INFO][3984] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" HandleID="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.037 [INFO][3984] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" HandleID="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d5a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-jzsjt", "timestamp":"2025-07-12 00:37:18.037647443 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.037 [INFO][3984] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.038 [INFO][3984] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.038 [INFO][3984] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.049 [INFO][3984] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.055 [INFO][3984] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.062 [INFO][3984] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.065 [INFO][3984] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.067 [INFO][3984] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.067 [INFO][3984] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.068 [INFO][3984] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50 Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.072 [INFO][3984] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.081 [INFO][3984] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.081 [INFO][3984] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" host="localhost" Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.081 [INFO][3984] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:18.105012 env[1225]: 2025-07-12 00:37:18.081 [INFO][3984] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" HandleID="k8s-pod-network.aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.105634 env[1225]: 2025-07-12 00:37:18.085 [INFO][3969] cni-plugin/k8s.go 418: Populated endpoint ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"90be7b23-6894-474b-b81f-606de468c5af", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-jzsjt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali198b604ec9b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:18.105634 env[1225]: 2025-07-12 00:37:18.085 [INFO][3969] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.105634 env[1225]: 2025-07-12 00:37:18.086 [INFO][3969] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali198b604ec9b ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.105634 env[1225]: 2025-07-12 00:37:18.088 [INFO][3969] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.105634 env[1225]: 2025-07-12 00:37:18.091 [INFO][3969] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"90be7b23-6894-474b-b81f-606de468c5af", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50", Pod:"coredns-7c65d6cfc9-jzsjt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali198b604ec9b", MAC:"ce:58:df:a5:60:7a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:18.105634 env[1225]: 2025-07-12 00:37:18.103 [INFO][3969] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jzsjt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:18.119000 audit[4014]: NETFILTER_CFG table=filter:113 family=2 entries=40 op=nft_register_chain pid=4014 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:18.119000 audit[4014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20344 a0=3 a1=ffffe6ca6d10 a2=0 a3=ffff8e523fa8 items=0 ppid=3544 pid=4014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.119000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:18.120459 env[1225]: time="2025-07-12T00:37:18.120044853Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:18.120459 env[1225]: time="2025-07-12T00:37:18.120106813Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:18.120459 env[1225]: time="2025-07-12T00:37:18.120120413Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:18.120459 env[1225]: time="2025-07-12T00:37:18.120308054Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50 pid=4012 runtime=io.containerd.runc.v2 Jul 12 00:37:18.136422 systemd[1]: Started cri-containerd-aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50.scope. Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.168000 audit: BPF prog-id=185 op=LOAD Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4012 pid=4023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161326433613335646437346663643561653330363063626432313562 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4012 pid=4023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161326433613335646437346663643561653330363063626432313562 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit: BPF prog-id=186 op=LOAD Jul 12 00:37:18.169000 audit[4023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4012 pid=4023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161326433613335646437346663643561653330363063626432313562 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit: BPF prog-id=187 op=LOAD Jul 12 00:37:18.169000 audit[4023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4012 pid=4023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161326433613335646437346663643561653330363063626432313562 Jul 12 00:37:18.169000 audit: BPF prog-id=187 op=UNLOAD Jul 12 00:37:18.169000 audit: BPF prog-id=186 op=UNLOAD Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { perfmon } for pid=4023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit[4023]: AVC avc: denied { bpf } for pid=4023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.169000 audit: BPF prog-id=188 op=LOAD Jul 12 00:37:18.169000 audit[4023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4012 pid=4023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161326433613335646437346663643561653330363063626432313562 Jul 12 00:37:18.170593 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:18.213439 env[1225]: time="2025-07-12T00:37:18.213362736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jzsjt,Uid:90be7b23-6894-474b-b81f-606de468c5af,Namespace:kube-system,Attempt:1,} returns sandbox id \"aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50\"" Jul 12 00:37:18.214136 kubelet[1948]: E0712 00:37:18.214109 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:18.216138 env[1225]: time="2025-07-12T00:37:18.216104304Z" level=info msg="CreateContainer within sandbox \"aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:37:18.241803 env[1225]: time="2025-07-12T00:37:18.241715542Z" level=info msg="CreateContainer within sandbox \"aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"77b0aeb8a83a19c67bf3d8bebfd2aefa77f37fb040fd65164d66dc2cfb20c8c4\"" Jul 12 00:37:18.243864 env[1225]: time="2025-07-12T00:37:18.242412064Z" level=info msg="StartContainer for \"77b0aeb8a83a19c67bf3d8bebfd2aefa77f37fb040fd65164d66dc2cfb20c8c4\"" Jul 12 00:37:18.267847 systemd[1]: Started cri-containerd-77b0aeb8a83a19c67bf3d8bebfd2aefa77f37fb040fd65164d66dc2cfb20c8c4.scope. Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.293000 audit: BPF prog-id=189 op=LOAD Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4012 pid=4056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623061656238613833613139633637626633643862656266643261 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4012 pid=4056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623061656238613833613139633637626633643862656266643261 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit: BPF prog-id=190 op=LOAD Jul 12 00:37:18.294000 audit[4056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4012 pid=4056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623061656238613833613139633637626633643862656266643261 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit: BPF prog-id=191 op=LOAD Jul 12 00:37:18.294000 audit[4056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4012 pid=4056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623061656238613833613139633637626633643862656266643261 Jul 12 00:37:18.294000 audit: BPF prog-id=191 op=UNLOAD Jul 12 00:37:18.294000 audit: BPF prog-id=190 op=UNLOAD Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { perfmon } for pid=4056 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit[4056]: AVC avc: denied { bpf } for pid=4056 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:18.294000 audit: BPF prog-id=192 op=LOAD Jul 12 00:37:18.294000 audit[4056]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4012 pid=4056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:18.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737623061656238613833613139633637626633643862656266643261 Jul 12 00:37:18.311764 env[1225]: time="2025-07-12T00:37:18.311706914Z" level=info msg="StartContainer for \"77b0aeb8a83a19c67bf3d8bebfd2aefa77f37fb040fd65164d66dc2cfb20c8c4\" returns successfully" Jul 12 00:37:18.324000 audit[4066]: AVC avc: denied { getattr } for pid=4066 comm="coredns" path="cgroup:[4026532332]" dev="nsfs" ino=4026532332 scontext=system_u:system_r:svirt_lxc_net_t:s0:c370,c609 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:37:18.324000 audit[4066]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40001de918 a2=40001e0578 a3=0 items=0 ppid=4012 pid=4066 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c370,c609 key=(null) Jul 12 00:37:18.324000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:37:18.812572 env[1225]: time="2025-07-12T00:37:18.812515553Z" level=info msg="StopPodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\"" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.863 [INFO][4099] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.863 [INFO][4099] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" iface="eth0" netns="/var/run/netns/cni-67777f95-585f-29f2-e16d-21b86a08f864" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.864 [INFO][4099] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" iface="eth0" netns="/var/run/netns/cni-67777f95-585f-29f2-e16d-21b86a08f864" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.864 [INFO][4099] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" iface="eth0" netns="/var/run/netns/cni-67777f95-585f-29f2-e16d-21b86a08f864" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.864 [INFO][4099] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.864 [INFO][4099] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.887 [INFO][4108] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.889 [INFO][4108] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.889 [INFO][4108] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.898 [WARNING][4108] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.898 [INFO][4108] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.899 [INFO][4108] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:18.903664 env[1225]: 2025-07-12 00:37:18.901 [INFO][4099] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:18.904301 env[1225]: time="2025-07-12T00:37:18.903775509Z" level=info msg="TearDown network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" successfully" Jul 12 00:37:18.904301 env[1225]: time="2025-07-12T00:37:18.903808029Z" level=info msg="StopPodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" returns successfully" Jul 12 00:37:18.905075 env[1225]: time="2025-07-12T00:37:18.905046313Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-knnn4,Uid:a628162b-ce5f-4ca6-8662-fc728afedeff,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:37:18.919861 systemd[1]: run-netns-cni\x2d67777f95\x2d585f\x2d29f2\x2de16d\x2d21b86a08f864.mount: Deactivated successfully. Jul 12 00:37:18.957542 systemd-networkd[1058]: cali68e8933f051: Gained IPv6LL Jul 12 00:37:18.995789 kubelet[1948]: E0712 00:37:18.995697 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:18.998641 kubelet[1948]: E0712 00:37:18.998335 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:19.021550 systemd-networkd[1058]: calic5d7916ec8a: Gained IPv6LL Jul 12 00:37:19.028634 kubelet[1948]: I0712 00:37:19.028571 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-jzsjt" podStartSLOduration=34.028552962 podStartE2EDuration="34.028552962s" podCreationTimestamp="2025-07-12 00:36:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:37:19.028124361 +0000 UTC m=+39.306307622" watchObservedRunningTime="2025-07-12 00:37:19.028552962 +0000 UTC m=+39.306736223" Jul 12 00:37:19.104000 audit[4140]: NETFILTER_CFG table=filter:114 family=2 entries=12 op=nft_register_rule pid=4140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:19.104000 audit[4140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdc2c8b70 a2=0 a3=1 items=0 ppid=2057 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.104000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:19.109000 audit[4140]: NETFILTER_CFG table=nat:115 family=2 entries=46 op=nft_register_rule pid=4140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:19.109000 audit[4140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffdc2c8b70 a2=0 a3=1 items=0 ppid=2057 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.109000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:19.144036 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:37:19.144143 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3456c1d2dd5: link becomes ready Jul 12 00:37:19.142099 systemd-networkd[1058]: cali3456c1d2dd5: Link UP Jul 12 00:37:19.143552 systemd-networkd[1058]: cali3456c1d2dd5: Gained carrier Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:18.971 [INFO][4117] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0 calico-apiserver-5b66657499- calico-apiserver a628162b-ce5f-4ca6-8662-fc728afedeff 1047 0 2025-07-12 00:36:54 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5b66657499 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5b66657499-knnn4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3456c1d2dd5 [] [] }} ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:18.971 [INFO][4117] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.007 [INFO][4132] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" HandleID="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.007 [INFO][4132] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" HandleID="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400049ba10), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5b66657499-knnn4", "timestamp":"2025-07-12 00:37:19.007201062 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.007 [INFO][4132] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.007 [INFO][4132] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.007 [INFO][4132] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.028 [INFO][4132] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.088 [INFO][4132] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.100 [INFO][4132] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.104 [INFO][4132] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.106 [INFO][4132] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.106 [INFO][4132] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.108 [INFO][4132] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461 Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.119 [INFO][4132] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.138 [INFO][4132] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.138 [INFO][4132] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" host="localhost" Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.138 [INFO][4132] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:19.160052 env[1225]: 2025-07-12 00:37:19.138 [INFO][4132] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" HandleID="k8s-pod-network.c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.160681 env[1225]: 2025-07-12 00:37:19.140 [INFO][4117] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"a628162b-ce5f-4ca6-8662-fc728afedeff", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5b66657499-knnn4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3456c1d2dd5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:19.160681 env[1225]: 2025-07-12 00:37:19.140 [INFO][4117] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.160681 env[1225]: 2025-07-12 00:37:19.140 [INFO][4117] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3456c1d2dd5 ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.160681 env[1225]: 2025-07-12 00:37:19.143 [INFO][4117] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.160681 env[1225]: 2025-07-12 00:37:19.144 [INFO][4117] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"a628162b-ce5f-4ca6-8662-fc728afedeff", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461", Pod:"calico-apiserver-5b66657499-knnn4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3456c1d2dd5", MAC:"da:36:0e:05:96:b1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:19.160681 env[1225]: 2025-07-12 00:37:19.157 [INFO][4117] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-knnn4" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:19.171000 audit[4156]: NETFILTER_CFG table=filter:116 family=2 entries=62 op=nft_register_chain pid=4156 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:19.171000 audit[4156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=31772 a0=3 a1=ffffcf83b200 a2=0 a3=ffffba83cfa8 items=0 ppid=3544 pid=4156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.171000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:19.174414 env[1225]: time="2025-07-12T00:37:19.174308097Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:19.174414 env[1225]: time="2025-07-12T00:37:19.174355177Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:19.174414 env[1225]: time="2025-07-12T00:37:19.174365457Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:19.174807 env[1225]: time="2025-07-12T00:37:19.174762338Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461 pid=4158 runtime=io.containerd.runc.v2 Jul 12 00:37:19.199750 systemd[1]: Started cri-containerd-c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461.scope. Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.237000 audit: BPF prog-id=193 op=LOAD Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4158 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337663366663838363236396530313361663633363365633830373738 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4158 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337663366663838363236396530313361663633363365633830373738 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit: BPF prog-id=194 op=LOAD Jul 12 00:37:19.238000 audit[4167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4158 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337663366663838363236396530313361663633363365633830373738 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit: BPF prog-id=195 op=LOAD Jul 12 00:37:19.238000 audit[4167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4158 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337663366663838363236396530313361663633363365633830373738 Jul 12 00:37:19.238000 audit: BPF prog-id=195 op=UNLOAD Jul 12 00:37:19.238000 audit: BPF prog-id=194 op=UNLOAD Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { perfmon } for pid=4167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit[4167]: AVC avc: denied { bpf } for pid=4167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.238000 audit: BPF prog-id=196 op=LOAD Jul 12 00:37:19.238000 audit[4167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4158 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337663366663838363236396530313361663633363365633830373738 Jul 12 00:37:19.239450 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:19.257674 env[1225]: time="2025-07-12T00:37:19.257631693Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-knnn4,Uid:a628162b-ce5f-4ca6-8662-fc728afedeff,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461\"" Jul 12 00:37:19.277546 systemd-networkd[1058]: cali198b604ec9b: Gained IPv6LL Jul 12 00:37:19.312604 env[1225]: time="2025-07-12T00:37:19.312554290Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:19.314205 env[1225]: time="2025-07-12T00:37:19.314178414Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:19.317671 env[1225]: time="2025-07-12T00:37:19.317630304Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:19.318983 env[1225]: time="2025-07-12T00:37:19.318941668Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:19.319614 env[1225]: time="2025-07-12T00:37:19.319581750Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 12 00:37:19.322205 env[1225]: time="2025-07-12T00:37:19.321456115Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:37:19.330204 env[1225]: time="2025-07-12T00:37:19.330148180Z" level=info msg="CreateContainer within sandbox \"cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 12 00:37:19.342693 env[1225]: time="2025-07-12T00:37:19.342651855Z" level=info msg="CreateContainer within sandbox \"cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"dda30595ebcaca32f3f47e2a368c68798553d9f01e4bbacf9fc74b533d8b8e31\"" Jul 12 00:37:19.343375 env[1225]: time="2025-07-12T00:37:19.343336857Z" level=info msg="StartContainer for \"dda30595ebcaca32f3f47e2a368c68798553d9f01e4bbacf9fc74b533d8b8e31\"" Jul 12 00:37:19.362769 systemd[1]: Started cri-containerd-dda30595ebcaca32f3f47e2a368c68798553d9f01e4bbacf9fc74b533d8b8e31.scope. Jul 12 00:37:19.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit: BPF prog-id=197 op=LOAD Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3869 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613330353935656263616361333266336634376532613336386336 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3869 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613330353935656263616361333266336634376532613336386336 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit: BPF prog-id=198 op=LOAD Jul 12 00:37:19.386000 audit[4199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3869 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613330353935656263616361333266336634376532613336386336 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.386000 audit: BPF prog-id=199 op=LOAD Jul 12 00:37:19.386000 audit[4199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3869 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613330353935656263616361333266336634376532613336386336 Jul 12 00:37:19.386000 audit: BPF prog-id=199 op=UNLOAD Jul 12 00:37:19.387000 audit: BPF prog-id=198 op=UNLOAD Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:19.387000 audit: BPF prog-id=200 op=LOAD Jul 12 00:37:19.387000 audit[4199]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3869 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:19.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464613330353935656263616361333266336634376532613336386336 Jul 12 00:37:19.407964 env[1225]: time="2025-07-12T00:37:19.407921121Z" level=info msg="StartContainer for \"dda30595ebcaca32f3f47e2a368c68798553d9f01e4bbacf9fc74b533d8b8e31\" returns successfully" Jul 12 00:37:20.001332 kubelet[1948]: E0712 00:37:20.001231 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:20.002611 kubelet[1948]: E0712 00:37:20.002439 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:20.009613 kubelet[1948]: I0712 00:37:20.009562 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7c9584d98d-54sbn" podStartSLOduration=20.044912482 podStartE2EDuration="22.009550229s" podCreationTimestamp="2025-07-12 00:36:58 +0000 UTC" firstStartedPulling="2025-07-12 00:37:17.356079606 +0000 UTC m=+37.634262867" lastFinishedPulling="2025-07-12 00:37:19.320717353 +0000 UTC m=+39.598900614" observedRunningTime="2025-07-12 00:37:20.008836508 +0000 UTC m=+40.287019769" watchObservedRunningTime="2025-07-12 00:37:20.009550229 +0000 UTC m=+40.287733450" Jul 12 00:37:20.030000 audit[4243]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4243 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:20.030000 audit[4243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffea4f9ac0 a2=0 a3=1 items=0 ppid=2057 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:20.030000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:20.044000 audit[4243]: NETFILTER_CFG table=nat:118 family=2 entries=58 op=nft_register_chain pid=4243 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:20.044000 audit[4243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffea4f9ac0 a2=0 a3=1 items=0 ppid=2057 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:20.044000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:20.243039 kubelet[1948]: I0712 00:37:20.242992 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:20.267101 systemd[1]: run-containerd-runc-k8s.io-ede71a555e48dac4da0aa35a908c0e7b3e6549f124036d3ea3612bbfcd04eb34-runc.lv8Llq.mount: Deactivated successfully. Jul 12 00:37:20.493534 systemd-networkd[1058]: cali3456c1d2dd5: Gained IPv6LL Jul 12 00:37:20.813641 env[1225]: time="2025-07-12T00:37:20.813599772Z" level=info msg="StopPodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\"" Jul 12 00:37:20.814039 env[1225]: time="2025-07-12T00:37:20.814009613Z" level=info msg="StopPodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\"" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.863 [INFO][4318] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.864 [INFO][4318] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" iface="eth0" netns="/var/run/netns/cni-df289fce-7913-024a-77e8-ad5ce9ec1981" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.864 [INFO][4318] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" iface="eth0" netns="/var/run/netns/cni-df289fce-7913-024a-77e8-ad5ce9ec1981" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.864 [INFO][4318] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" iface="eth0" netns="/var/run/netns/cni-df289fce-7913-024a-77e8-ad5ce9ec1981" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.864 [INFO][4318] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.864 [INFO][4318] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.899 [INFO][4333] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.899 [INFO][4333] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.899 [INFO][4333] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.910 [WARNING][4333] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.911 [INFO][4333] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.912 [INFO][4333] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:20.915554 env[1225]: 2025-07-12 00:37:20.914 [INFO][4318] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:20.916182 env[1225]: time="2025-07-12T00:37:20.915681604Z" level=info msg="TearDown network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" successfully" Jul 12 00:37:20.916182 env[1225]: time="2025-07-12T00:37:20.915719444Z" level=info msg="StopPodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" returns successfully" Jul 12 00:37:20.916418 env[1225]: time="2025-07-12T00:37:20.916389446Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-qd6zx,Uid:ab89e077-9e27-42c7-85ee-0fd8db11d2e2,Namespace:calico-system,Attempt:1,}" Jul 12 00:37:20.919387 systemd[1]: run-containerd-runc-k8s.io-ede71a555e48dac4da0aa35a908c0e7b3e6549f124036d3ea3612bbfcd04eb34-runc.mHioVQ.mount: Deactivated successfully. Jul 12 00:37:20.919491 systemd[1]: run-netns-cni\x2ddf289fce\x2d7913\x2d024a\x2d77e8\x2dad5ce9ec1981.mount: Deactivated successfully. Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.888 [INFO][4313] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.888 [INFO][4313] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" iface="eth0" netns="/var/run/netns/cni-26856ccd-669c-6c05-8c09-2f472ee10c77" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.888 [INFO][4313] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" iface="eth0" netns="/var/run/netns/cni-26856ccd-669c-6c05-8c09-2f472ee10c77" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.888 [INFO][4313] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" iface="eth0" netns="/var/run/netns/cni-26856ccd-669c-6c05-8c09-2f472ee10c77" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.888 [INFO][4313] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.888 [INFO][4313] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.926 [INFO][4341] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.926 [INFO][4341] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.927 [INFO][4341] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.939 [WARNING][4341] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.939 [INFO][4341] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.949 [INFO][4341] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:20.953188 env[1225]: 2025-07-12 00:37:20.951 [INFO][4313] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:20.953948 env[1225]: time="2025-07-12T00:37:20.953913346Z" level=info msg="TearDown network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" successfully" Jul 12 00:37:20.954023 env[1225]: time="2025-07-12T00:37:20.954006747Z" level=info msg="StopPodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" returns successfully" Jul 12 00:37:20.956130 systemd[1]: run-netns-cni\x2d26856ccd\x2d669c\x2d6c05\x2d8c09\x2d2f472ee10c77.mount: Deactivated successfully. Jul 12 00:37:20.957439 env[1225]: time="2025-07-12T00:37:20.957405356Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lmhhb,Uid:b2661cac-2427-4630-8294-055c230ed79c,Namespace:calico-system,Attempt:1,}" Jul 12 00:37:21.010447 kubelet[1948]: I0712 00:37:21.007416 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:21.010447 kubelet[1948]: E0712 00:37:21.008126 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:21.113128 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:37:21.113337 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid7a40b89bac: link becomes ready Jul 12 00:37:21.114495 systemd-networkd[1058]: calid7a40b89bac: Link UP Jul 12 00:37:21.114703 systemd-networkd[1058]: calid7a40b89bac: Gained carrier Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.036 [INFO][4357] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--lmhhb-eth0 csi-node-driver- calico-system b2661cac-2427-4630-8294-055c230ed79c 1092 0 2025-07-12 00:36:58 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-lmhhb eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calid7a40b89bac [] [] }} ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.037 [INFO][4357] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.061 [INFO][4379] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" HandleID="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.062 [INFO][4379] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" HandleID="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a0580), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-lmhhb", "timestamp":"2025-07-12 00:37:21.061862504 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.062 [INFO][4379] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.062 [INFO][4379] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.062 [INFO][4379] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.072 [INFO][4379] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.078 [INFO][4379] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.082 [INFO][4379] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.085 [INFO][4379] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.088 [INFO][4379] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.088 [INFO][4379] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.090 [INFO][4379] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.093 [INFO][4379] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.100 [INFO][4379] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.100 [INFO][4379] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" host="localhost" Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.100 [INFO][4379] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:21.125402 env[1225]: 2025-07-12 00:37:21.100 [INFO][4379] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" HandleID="k8s-pod-network.def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.126068 env[1225]: 2025-07-12 00:37:21.106 [INFO][4357] cni-plugin/k8s.go 418: Populated endpoint ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--lmhhb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2661cac-2427-4630-8294-055c230ed79c", ResourceVersion:"1092", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-lmhhb", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid7a40b89bac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:21.126068 env[1225]: 2025-07-12 00:37:21.106 [INFO][4357] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.126068 env[1225]: 2025-07-12 00:37:21.106 [INFO][4357] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid7a40b89bac ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.126068 env[1225]: 2025-07-12 00:37:21.110 [INFO][4357] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.126068 env[1225]: 2025-07-12 00:37:21.113 [INFO][4357] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--lmhhb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2661cac-2427-4630-8294-055c230ed79c", ResourceVersion:"1092", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c", Pod:"csi-node-driver-lmhhb", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid7a40b89bac", MAC:"6e:c7:2e:a1:0e:61", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:21.126068 env[1225]: 2025-07-12 00:37:21.122 [INFO][4357] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c" Namespace="calico-system" Pod="csi-node-driver-lmhhb" WorkloadEndpoint="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:21.144332 env[1225]: time="2025-07-12T00:37:21.141765583Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:21.144332 env[1225]: time="2025-07-12T00:37:21.141853784Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:21.144332 env[1225]: time="2025-07-12T00:37:21.141880744Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:21.144332 env[1225]: time="2025-07-12T00:37:21.142017504Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c pid=4412 runtime=io.containerd.runc.v2 Jul 12 00:37:21.144000 audit[4413]: NETFILTER_CFG table=filter:119 family=2 entries=52 op=nft_register_chain pid=4413 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:21.147302 kernel: kauditd_printk_skb: 964 callbacks suppressed Jul 12 00:37:21.147399 kernel: audit: type=1325 audit(1752280641.144:1331): table=filter:119 family=2 entries=52 op=nft_register_chain pid=4413 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:21.147434 kernel: audit: type=1300 audit(1752280641.144:1331): arch=c00000b7 syscall=211 success=yes exit=24328 a0=3 a1=ffffe334f790 a2=0 a3=ffff84a70fa8 items=0 ppid=3544 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.144000 audit[4413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24328 a0=3 a1=ffffe334f790 a2=0 a3=ffff84a70fa8 items=0 ppid=3544 pid=4413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.144000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:21.151673 kernel: audit: type=1327 audit(1752280641.144:1331): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:21.162128 systemd[1]: Started cri-containerd-def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c.scope. Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194701 kernel: audit: type=1400 audit(1752280641.188:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194777 kernel: audit: type=1400 audit(1752280641.188:1333): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194799 kernel: audit: type=1400 audit(1752280641.188:1334): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199206 kernel: audit: type=1400 audit(1752280641.188:1335): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199274 kernel: audit: type=1400 audit(1752280641.188:1336): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.203987 kernel: audit: type=1400 audit(1752280641.188:1337): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.204149 kernel: audit: type=1400 audit(1752280641.188:1338): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.192000 audit: BPF prog-id=201 op=LOAD Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465663934363133353037393930313864306535626138643562363030 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465663934363133353037393930313864306535626138643562363030 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.194000 audit: BPF prog-id=202 op=LOAD Jul 12 00:37:21.194000 audit[4423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465663934363133353037393930313864306535626138643562363030 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.196000 audit: BPF prog-id=203 op=LOAD Jul 12 00:37:21.196000 audit[4423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465663934363133353037393930313864306535626138643562363030 Jul 12 00:37:21.199000 audit: BPF prog-id=203 op=UNLOAD Jul 12 00:37:21.199000 audit: BPF prog-id=202 op=UNLOAD Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { perfmon } for pid=4423 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit[4423]: AVC avc: denied { bpf } for pid=4423 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.199000 audit: BPF prog-id=204 op=LOAD Jul 12 00:37:21.199000 audit[4423]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4412 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465663934363133353037393930313864306535626138643562363030 Jul 12 00:37:21.206779 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:21.221984 env[1225]: time="2025-07-12T00:37:21.221929824Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:21.224599 env[1225]: time="2025-07-12T00:37:21.224550470Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-lmhhb,Uid:b2661cac-2427-4630-8294-055c230ed79c,Namespace:calico-system,Attempt:1,} returns sandbox id \"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c\"" Jul 12 00:37:21.225654 env[1225]: time="2025-07-12T00:37:21.225511753Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:21.227896 systemd-networkd[1058]: cali6a6028c0dcc: Link UP Jul 12 00:37:21.229630 env[1225]: time="2025-07-12T00:37:21.228566960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:21.229862 systemd-networkd[1058]: cali6a6028c0dcc: Gained carrier Jul 12 00:37:21.230428 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6a6028c0dcc: link becomes ready Jul 12 00:37:21.230570 env[1225]: time="2025-07-12T00:37:21.230538685Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:21.230914 env[1225]: time="2025-07-12T00:37:21.230882246Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:37:21.233693 env[1225]: time="2025-07-12T00:37:21.233659253Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 12 00:37:21.234713 env[1225]: time="2025-07-12T00:37:21.234683376Z" level=info msg="CreateContainer within sandbox \"c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.034 [INFO][4349] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0 goldmane-58fd7646b9- calico-system ab89e077-9e27-42c7-85ee-0fd8db11d2e2 1091 0 2025-07-12 00:36:57 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-qd6zx eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali6a6028c0dcc [] [] }} ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.035 [INFO][4349] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.085 [INFO][4386] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" HandleID="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.085 [INFO][4386] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" HandleID="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000323490), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-qd6zx", "timestamp":"2025-07-12 00:37:21.085467443 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.085 [INFO][4386] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.101 [INFO][4386] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.101 [INFO][4386] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.175 [INFO][4386] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.187 [INFO][4386] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.200 [INFO][4386] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.202 [INFO][4386] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.205 [INFO][4386] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.205 [INFO][4386] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.206 [INFO][4386] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350 Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.211 [INFO][4386] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.222 [INFO][4386] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.223 [INFO][4386] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" host="localhost" Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.223 [INFO][4386] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:21.244141 env[1225]: 2025-07-12 00:37:21.223 [INFO][4386] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" HandleID="k8s-pod-network.65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.244756 env[1225]: 2025-07-12 00:37:21.225 [INFO][4349] cni-plugin/k8s.go 418: Populated endpoint ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"ab89e077-9e27-42c7-85ee-0fd8db11d2e2", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-qd6zx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6a6028c0dcc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:21.244756 env[1225]: 2025-07-12 00:37:21.225 [INFO][4349] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.244756 env[1225]: 2025-07-12 00:37:21.225 [INFO][4349] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6a6028c0dcc ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.244756 env[1225]: 2025-07-12 00:37:21.230 [INFO][4349] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.244756 env[1225]: 2025-07-12 00:37:21.231 [INFO][4349] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"ab89e077-9e27-42c7-85ee-0fd8db11d2e2", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350", Pod:"goldmane-58fd7646b9-qd6zx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6a6028c0dcc", MAC:"7a:40:ac:f6:07:c9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:21.244756 env[1225]: 2025-07-12 00:37:21.241 [INFO][4349] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350" Namespace="calico-system" Pod="goldmane-58fd7646b9-qd6zx" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:21.258430 env[1225]: time="2025-07-12T00:37:21.254018544Z" level=info msg="CreateContainer within sandbox \"c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"dfa80c2c2fcb2960670f585292d975c69c12f9e44913d14105a458917acd7b34\"" Jul 12 00:37:21.258430 env[1225]: time="2025-07-12T00:37:21.254747586Z" level=info msg="StartContainer for \"dfa80c2c2fcb2960670f585292d975c69c12f9e44913d14105a458917acd7b34\"" Jul 12 00:37:21.262330 env[1225]: time="2025-07-12T00:37:21.262223684Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:21.262330 env[1225]: time="2025-07-12T00:37:21.262265964Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:21.262330 env[1225]: time="2025-07-12T00:37:21.262276564Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:21.261000 audit[4458]: NETFILTER_CFG table=filter:120 family=2 entries=70 op=nft_register_chain pid=4458 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:21.262558 env[1225]: time="2025-07-12T00:37:21.262431565Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350 pid=4470 runtime=io.containerd.runc.v2 Jul 12 00:37:21.261000 audit[4458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=33972 a0=3 a1=fffffd818550 a2=0 a3=ffffa08cafa8 items=0 ppid=3544 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.261000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:21.270393 systemd[1]: Started cri-containerd-dfa80c2c2fcb2960670f585292d975c69c12f9e44913d14105a458917acd7b34.scope. Jul 12 00:37:21.281628 systemd[1]: Started cri-containerd-65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350.scope. Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.297000 audit: BPF prog-id=205 op=LOAD Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4158 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613830633263326663623239363036373066353835323932643937 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4158 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613830633263326663623239363036373066353835323932643937 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit: BPF prog-id=206 op=LOAD Jul 12 00:37:21.298000 audit[4471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4158 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613830633263326663623239363036373066353835323932643937 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit: BPF prog-id=207 op=LOAD Jul 12 00:37:21.298000 audit[4471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4158 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613830633263326663623239363036373066353835323932643937 Jul 12 00:37:21.298000 audit: BPF prog-id=207 op=UNLOAD Jul 12 00:37:21.298000 audit: BPF prog-id=206 op=UNLOAD Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { perfmon } for pid=4471 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit[4471]: AVC avc: denied { bpf } for pid=4471 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.298000 audit: BPF prog-id=208 op=LOAD Jul 12 00:37:21.298000 audit[4471]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4158 pid=4471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466613830633263326663623239363036373066353835323932643937 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.300000 audit: BPF prog-id=209 op=LOAD Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4470 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635303032623039636261393961656338383462643233346236383434 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4470 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635303032623039636261393961656338383462643233346236383434 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.301000 audit: BPF prog-id=210 op=LOAD Jul 12 00:37:21.301000 audit[4490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4470 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635303032623039636261393961656338383462643233346236383434 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit: BPF prog-id=211 op=LOAD Jul 12 00:37:21.302000 audit[4490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4470 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635303032623039636261393961656338383462643233346236383434 Jul 12 00:37:21.302000 audit: BPF prog-id=211 op=UNLOAD Jul 12 00:37:21.302000 audit: BPF prog-id=210 op=UNLOAD Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { perfmon } for pid=4490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit[4490]: AVC avc: denied { bpf } for pid=4490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:21.302000 audit: BPF prog-id=212 op=LOAD Jul 12 00:37:21.302000 audit[4490]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4470 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:21.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635303032623039636261393961656338383462643233346236383434 Jul 12 00:37:21.303647 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:21.323442 env[1225]: time="2025-07-12T00:37:21.323404357Z" level=info msg="StartContainer for \"dfa80c2c2fcb2960670f585292d975c69c12f9e44913d14105a458917acd7b34\" returns successfully" Jul 12 00:37:21.324625 env[1225]: time="2025-07-12T00:37:21.324589080Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-qd6zx,Uid:ab89e077-9e27-42c7-85ee-0fd8db11d2e2,Namespace:calico-system,Attempt:1,} returns sandbox id \"65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350\"" Jul 12 00:37:21.812320 env[1225]: time="2025-07-12T00:37:21.812264339Z" level=info msg="StopPodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\"" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.856 [INFO][4551] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.856 [INFO][4551] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" iface="eth0" netns="/var/run/netns/cni-23d5b80b-6aeb-a1bb-635c-851dae7721d3" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.857 [INFO][4551] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" iface="eth0" netns="/var/run/netns/cni-23d5b80b-6aeb-a1bb-635c-851dae7721d3" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.857 [INFO][4551] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" iface="eth0" netns="/var/run/netns/cni-23d5b80b-6aeb-a1bb-635c-851dae7721d3" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.857 [INFO][4551] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.857 [INFO][4551] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.875 [INFO][4560] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.875 [INFO][4560] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.875 [INFO][4560] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.885 [WARNING][4560] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.885 [INFO][4560] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.887 [INFO][4560] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:21.890631 env[1225]: 2025-07-12 00:37:21.888 [INFO][4551] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:21.891211 env[1225]: time="2025-07-12T00:37:21.890755815Z" level=info msg="TearDown network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" successfully" Jul 12 00:37:21.891211 env[1225]: time="2025-07-12T00:37:21.890788455Z" level=info msg="StopPodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" returns successfully" Jul 12 00:37:21.891448 env[1225]: time="2025-07-12T00:37:21.891412096Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-h6rg8,Uid:333c2284-4856-4b96-ae71-299989a675c9,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:37:21.921664 systemd[1]: run-netns-cni\x2d23d5b80b\x2d6aeb\x2da1bb\x2d635c\x2d851dae7721d3.mount: Deactivated successfully. Jul 12 00:37:22.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.113:22-10.0.0.1:59150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:22.021672 systemd[1]: Started sshd@8-10.0.0.113:22-10.0.0.1:59150.service. Jul 12 00:37:22.032576 kubelet[1948]: E0712 00:37:22.032123 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:22.036060 systemd-networkd[1058]: cali677656479d2: Link UP Jul 12 00:37:22.037774 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali677656479d2: link becomes ready Jul 12 00:37:22.037319 systemd-networkd[1058]: cali677656479d2: Gained carrier Jul 12 00:37:22.040788 kubelet[1948]: I0712 00:37:22.040726 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5b66657499-knnn4" podStartSLOduration=26.066760789 podStartE2EDuration="28.040710463s" podCreationTimestamp="2025-07-12 00:36:54 +0000 UTC" firstStartedPulling="2025-07-12 00:37:19.258885697 +0000 UTC m=+39.537068958" lastFinishedPulling="2025-07-12 00:37:21.232835171 +0000 UTC m=+41.511018632" observedRunningTime="2025-07-12 00:37:22.040633743 +0000 UTC m=+42.318816964" watchObservedRunningTime="2025-07-12 00:37:22.040710463 +0000 UTC m=+42.318893724" Jul 12 00:37:22.057000 audit[4598]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=4598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:22.057000 audit[4598]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe66aaa80 a2=0 a3=1 items=0 ppid=2057 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.949 [INFO][4569] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0 calico-apiserver-5b66657499- calico-apiserver 333c2284-4856-4b96-ae71-299989a675c9 1111 0 2025-07-12 00:36:54 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5b66657499 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5b66657499-h6rg8 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali677656479d2 [] [] }} ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.949 [INFO][4569] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.973 [INFO][4584] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" HandleID="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.974 [INFO][4584] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" HandleID="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a3670), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5b66657499-h6rg8", "timestamp":"2025-07-12 00:37:21.973776062 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.974 [INFO][4584] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.974 [INFO][4584] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.974 [INFO][4584] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.983 [INFO][4584] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.988 [INFO][4584] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.992 [INFO][4584] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.994 [INFO][4584] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.998 [INFO][4584] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.998 [INFO][4584] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:21.999 [INFO][4584] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7 Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:22.009 [INFO][4584] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:22.016 [INFO][4584] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:22.016 [INFO][4584] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" host="localhost" Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:22.016 [INFO][4584] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:22.058476 env[1225]: 2025-07-12 00:37:22.016 [INFO][4584] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" HandleID="k8s-pod-network.e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.059018 env[1225]: 2025-07-12 00:37:22.029 [INFO][4569] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"333c2284-4856-4b96-ae71-299989a675c9", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5b66657499-h6rg8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali677656479d2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:22.059018 env[1225]: 2025-07-12 00:37:22.029 [INFO][4569] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.059018 env[1225]: 2025-07-12 00:37:22.029 [INFO][4569] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali677656479d2 ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.059018 env[1225]: 2025-07-12 00:37:22.037 [INFO][4569] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.059018 env[1225]: 2025-07-12 00:37:22.041 [INFO][4569] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"333c2284-4856-4b96-ae71-299989a675c9", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7", Pod:"calico-apiserver-5b66657499-h6rg8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali677656479d2", MAC:"12:b4:1a:78:2d:e1", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:22.059018 env[1225]: 2025-07-12 00:37:22.055 [INFO][4569] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7" Namespace="calico-apiserver" Pod="calico-apiserver-5b66657499-h6rg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:22.063000 audit[4598]: NETFILTER_CFG table=nat:122 family=2 entries=22 op=nft_register_rule pid=4598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:22.063000 audit[4598]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe66aaa80 a2=0 a3=1 items=0 ppid=2057 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.063000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:22.075000 audit[4605]: NETFILTER_CFG table=filter:123 family=2 entries=41 op=nft_register_chain pid=4605 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:37:22.075000 audit[4605]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23096 a0=3 a1=ffffc1cc8a50 a2=0 a3=ffffa7c31fa8 items=0 ppid=3544 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.075000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:37:22.084273 env[1225]: time="2025-07-12T00:37:22.084194365Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:37:22.084273 env[1225]: time="2025-07-12T00:37:22.084234045Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:37:22.084273 env[1225]: time="2025-07-12T00:37:22.084244325Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:37:22.084982 env[1225]: time="2025-07-12T00:37:22.084431246Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7 pid=4611 runtime=io.containerd.runc.v2 Jul 12 00:37:22.089000 audit[4593]: USER_ACCT pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:22.093047 sshd[4593]: Accepted publickey for core from 10.0.0.1 port 59150 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:22.094000 audit[4593]: CRED_ACQ pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:22.094000 audit[4593]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea13fec0 a2=3 a3=1 items=0 ppid=1 pid=4593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.094000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:22.095276 sshd[4593]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:22.100326 systemd[1]: Started session-9.scope. Jul 12 00:37:22.100843 systemd-logind[1210]: New session 9 of user core. Jul 12 00:37:22.106000 audit[4593]: USER_START pid=4593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:22.111000 audit[4629]: CRED_ACQ pid=4629 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:22.115817 systemd[1]: run-containerd-runc-k8s.io-e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7-runc.cpXq72.mount: Deactivated successfully. Jul 12 00:37:22.125114 systemd[1]: Started cri-containerd-e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7.scope. Jul 12 00:37:22.148004 env[1225]: time="2025-07-12T00:37:22.147955234Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:22.149272 env[1225]: time="2025-07-12T00:37:22.149234197Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:22.150799 env[1225]: time="2025-07-12T00:37:22.150760721Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.152000 audit: BPF prog-id=213 op=LOAD Jul 12 00:37:22.153807 env[1225]: time="2025-07-12T00:37:22.153675248Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:22.154580 env[1225]: time="2025-07-12T00:37:22.154549290Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4611 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373762663030356530316338336364646439656663656466393132 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4611 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373762663030356530316338336364646439656663656466393132 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit: BPF prog-id=214 op=LOAD Jul 12 00:37:22.153000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4611 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373762663030356530316338336364646439656663656466393132 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.153000 audit: BPF prog-id=215 op=LOAD Jul 12 00:37:22.153000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4611 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373762663030356530316338336364646439656663656466393132 Jul 12 00:37:22.154000 audit: BPF prog-id=215 op=UNLOAD Jul 12 00:37:22.154000 audit: BPF prog-id=214 op=UNLOAD Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { perfmon } for pid=4621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit[4621]: AVC avc: denied { bpf } for pid=4621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.154000 audit: BPF prog-id=216 op=LOAD Jul 12 00:37:22.154000 audit[4621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4611 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373762663030356530316338336364646439656663656466393132 Jul 12 00:37:22.158710 systemd-resolved[1163]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:37:22.159135 env[1225]: time="2025-07-12T00:37:22.158839820Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 12 00:37:22.159135 env[1225]: time="2025-07-12T00:37:22.158978820Z" level=info msg="CreateContainer within sandbox \"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 12 00:37:22.179459 env[1225]: time="2025-07-12T00:37:22.179374188Z" level=info msg="CreateContainer within sandbox \"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"a447706b8cad20b7363bece2554b7afdbd801d2b63270dd70904b708b641334c\"" Jul 12 00:37:22.180425 env[1225]: time="2025-07-12T00:37:22.180275510Z" level=info msg="StartContainer for \"a447706b8cad20b7363bece2554b7afdbd801d2b63270dd70904b708b641334c\"" Jul 12 00:37:22.194661 env[1225]: time="2025-07-12T00:37:22.194584544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5b66657499-h6rg8,Uid:333c2284-4856-4b96-ae71-299989a675c9,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7\"" Jul 12 00:37:22.206666 systemd[1]: Started cri-containerd-a447706b8cad20b7363bece2554b7afdbd801d2b63270dd70904b708b641334c.scope. Jul 12 00:37:22.212487 env[1225]: time="2025-07-12T00:37:22.211083102Z" level=info msg="CreateContainer within sandbox \"e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:37:22.221551 systemd-networkd[1058]: calid7a40b89bac: Gained IPv6LL Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4412 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134343737303662386361643230623733363362656365323535346237 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit: BPF prog-id=217 op=LOAD Jul 12 00:37:22.235000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4412 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134343737303662386361643230623733363362656365323535346237 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit: BPF prog-id=218 op=LOAD Jul 12 00:37:22.235000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4412 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134343737303662386361643230623733363362656365323535346237 Jul 12 00:37:22.235000 audit: BPF prog-id=218 op=UNLOAD Jul 12 00:37:22.235000 audit: BPF prog-id=217 op=UNLOAD Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { perfmon } for pid=4658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit[4658]: AVC avc: denied { bpf } for pid=4658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.235000 audit: BPF prog-id=219 op=LOAD Jul 12 00:37:22.235000 audit[4658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4412 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134343737303662386361643230623733363362656365323535346237 Jul 12 00:37:22.247416 env[1225]: time="2025-07-12T00:37:22.246697706Z" level=info msg="CreateContainer within sandbox \"e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"7cb9c2db1e8747a87714d5a436e1287f16511cb52bda959979edac053382a242\"" Jul 12 00:37:22.247416 env[1225]: time="2025-07-12T00:37:22.247259787Z" level=info msg="StartContainer for \"7cb9c2db1e8747a87714d5a436e1287f16511cb52bda959979edac053382a242\"" Jul 12 00:37:22.264442 env[1225]: time="2025-07-12T00:37:22.264349307Z" level=info msg="StartContainer for \"a447706b8cad20b7363bece2554b7afdbd801d2b63270dd70904b708b641334c\" returns successfully" Jul 12 00:37:22.290701 systemd[1]: Started cri-containerd-7cb9c2db1e8747a87714d5a436e1287f16511cb52bda959979edac053382a242.scope. Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit: BPF prog-id=220 op=LOAD Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4611 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623963326462316538373437613837373134643561343336653132 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4611 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623963326462316538373437613837373134643561343336653132 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit: BPF prog-id=221 op=LOAD Jul 12 00:37:22.312000 audit[4693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4611 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623963326462316538373437613837373134643561343336653132 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit: BPF prog-id=222 op=LOAD Jul 12 00:37:22.312000 audit[4693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4611 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623963326462316538373437613837373134643561343336653132 Jul 12 00:37:22.312000 audit: BPF prog-id=222 op=UNLOAD Jul 12 00:37:22.312000 audit: BPF prog-id=221 op=UNLOAD Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { perfmon } for pid=4693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit[4693]: AVC avc: denied { bpf } for pid=4693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:22.312000 audit: BPF prog-id=223 op=LOAD Jul 12 00:37:22.312000 audit[4693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4611 pid=4693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:22.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763623963326462316538373437613837373134643561343336653132 Jul 12 00:37:22.340185 env[1225]: time="2025-07-12T00:37:22.340078364Z" level=info msg="StartContainer for \"7cb9c2db1e8747a87714d5a436e1287f16511cb52bda959979edac053382a242\" returns successfully" Jul 12 00:37:22.350522 systemd-networkd[1058]: cali6a6028c0dcc: Gained IPv6LL Jul 12 00:37:22.410316 sshd[4593]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:22.410000 audit[4593]: USER_END pid=4593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:22.410000 audit[4593]: CRED_DISP pid=4593 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:22.412940 systemd-logind[1210]: Session 9 logged out. Waiting for processes to exit. Jul 12 00:37:22.414076 systemd[1]: sshd@8-10.0.0.113:22-10.0.0.1:59150.service: Deactivated successfully. Jul 12 00:37:22.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.113:22-10.0.0.1:59150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:22.414820 systemd[1]: session-9.scope: Deactivated successfully. Jul 12 00:37:22.415894 systemd-logind[1210]: Removed session 9. Jul 12 00:37:22.553000 audit[4500]: AVC avc: denied { watch } for pid=4500 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_37_04.2698709335/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c643,c985 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c643,c985 tclass=file permissive=0 Jul 12 00:37:22.553000 audit[4500]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000ff1d80 a2=fc6 a3=0 items=0 ppid=4158 pid=4500 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c643,c985 key=(null) Jul 12 00:37:22.553000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:37:23.054138 kubelet[1948]: I0712 00:37:23.053830 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5b66657499-h6rg8" podStartSLOduration=29.053813428 podStartE2EDuration="29.053813428s" podCreationTimestamp="2025-07-12 00:36:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:37:23.046830733 +0000 UTC m=+43.325013994" watchObservedRunningTime="2025-07-12 00:37:23.053813428 +0000 UTC m=+43.331996689" Jul 12 00:37:23.058944 kubelet[1948]: I0712 00:37:23.058910 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:23.090000 audit[4731]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:23.090000 audit[4731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc44f3830 a2=0 a3=1 items=0 ppid=2057 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:23.090000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:23.100000 audit[4731]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:23.100000 audit[4731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc44f3830 a2=0 a3=1 items=0 ppid=2057 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:23.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:23.119425 systemd-networkd[1058]: cali677656479d2: Gained IPv6LL Jul 12 00:37:23.749373 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1099716238.mount: Deactivated successfully. Jul 12 00:37:24.063544 kubelet[1948]: I0712 00:37:24.063189 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:24.098000 audit[4705]: AVC avc: denied { watch } for pid=4705 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_37_04.2752575453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c432 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c432 tclass=file permissive=0 Jul 12 00:37:24.098000 audit[4705]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4001b5f000 a2=fc6 a3=0 items=0 ppid=4611 pid=4705 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c432 key=(null) Jul 12 00:37:24.098000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:37:24.334445 kubelet[1948]: I0712 00:37:24.334330 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:24.416092 env[1225]: time="2025-07-12T00:37:24.416037723Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:24.417530 env[1225]: time="2025-07-12T00:37:24.417505166Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:24.418911 env[1225]: time="2025-07-12T00:37:24.418882889Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:24.420752 env[1225]: time="2025-07-12T00:37:24.420726772Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:24.421328 env[1225]: time="2025-07-12T00:37:24.421258694Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 12 00:37:24.422984 env[1225]: time="2025-07-12T00:37:24.422949417Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 12 00:37:24.425932 env[1225]: time="2025-07-12T00:37:24.425898903Z" level=info msg="CreateContainer within sandbox \"65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 12 00:37:24.446051 env[1225]: time="2025-07-12T00:37:24.445998864Z" level=info msg="CreateContainer within sandbox \"65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"0121fa2324ff64cf4ddfece0a6ee3f33b9162e962612e3d8d3d6e43d7138daeb\"" Jul 12 00:37:24.446770 env[1225]: time="2025-07-12T00:37:24.446741306Z" level=info msg="StartContainer for \"0121fa2324ff64cf4ddfece0a6ee3f33b9162e962612e3d8d3d6e43d7138daeb\"" Jul 12 00:37:24.471957 systemd[1]: Started cri-containerd-0121fa2324ff64cf4ddfece0a6ee3f33b9162e962612e3d8d3d6e43d7138daeb.scope. Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.503000 audit: BPF prog-id=224 op=LOAD Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4470 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:24.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323166613233323466663634636634646466656365306136656533 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4470 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:24.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323166613233323466663634636634646466656365306136656533 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit: BPF prog-id=225 op=LOAD Jul 12 00:37:24.504000 audit[4769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4470 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:24.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323166613233323466663634636634646466656365306136656533 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit: BPF prog-id=226 op=LOAD Jul 12 00:37:24.504000 audit[4769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4470 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:24.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323166613233323466663634636634646466656365306136656533 Jul 12 00:37:24.504000 audit: BPF prog-id=226 op=UNLOAD Jul 12 00:37:24.504000 audit: BPF prog-id=225 op=UNLOAD Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:24.504000 audit: BPF prog-id=227 op=LOAD Jul 12 00:37:24.504000 audit[4769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4470 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:24.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323166613233323466663634636634646466656365306136656533 Jul 12 00:37:24.527017 env[1225]: time="2025-07-12T00:37:24.526974151Z" level=info msg="StartContainer for \"0121fa2324ff64cf4ddfece0a6ee3f33b9162e962612e3d8d3d6e43d7138daeb\" returns successfully" Jul 12 00:37:25.080875 kubelet[1948]: I0712 00:37:25.080674 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-qd6zx" podStartSLOduration=24.985523592 podStartE2EDuration="28.080655481s" podCreationTimestamp="2025-07-12 00:36:57 +0000 UTC" firstStartedPulling="2025-07-12 00:37:21.327438567 +0000 UTC m=+41.605621828" lastFinishedPulling="2025-07-12 00:37:24.422570496 +0000 UTC m=+44.700753717" observedRunningTime="2025-07-12 00:37:25.079655599 +0000 UTC m=+45.357838860" watchObservedRunningTime="2025-07-12 00:37:25.080655481 +0000 UTC m=+45.358838742" Jul 12 00:37:25.090000 audit[4823]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=4823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:25.090000 audit[4823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff9dba9b0 a2=0 a3=1 items=0 ppid=2057 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:25.090000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:25.097000 audit[4823]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=4823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:25.097000 audit[4823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff9dba9b0 a2=0 a3=1 items=0 ppid=2057 pid=4823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:25.097000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:25.469068 env[1225]: time="2025-07-12T00:37:25.469014190Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:25.470593 env[1225]: time="2025-07-12T00:37:25.470563113Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:25.472468 env[1225]: time="2025-07-12T00:37:25.472438957Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:25.473977 env[1225]: time="2025-07-12T00:37:25.473933520Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:37:25.474778 env[1225]: time="2025-07-12T00:37:25.474731641Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 12 00:37:25.477838 env[1225]: time="2025-07-12T00:37:25.477798287Z" level=info msg="CreateContainer within sandbox \"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 12 00:37:25.499762 env[1225]: time="2025-07-12T00:37:25.499710770Z" level=info msg="CreateContainer within sandbox \"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"efd71b720b22b141f4a88a36b1add714b4800f04c662fb2c778580ebbe5be5e2\"" Jul 12 00:37:25.500696 env[1225]: time="2025-07-12T00:37:25.500652571Z" level=info msg="StartContainer for \"efd71b720b22b141f4a88a36b1add714b4800f04c662fb2c778580ebbe5be5e2\"" Jul 12 00:37:25.539084 systemd[1]: Started cri-containerd-efd71b720b22b141f4a88a36b1add714b4800f04c662fb2c778580ebbe5be5e2.scope. Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4412 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643731623732306232326231343166346138386133366231616464 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit: BPF prog-id=228 op=LOAD Jul 12 00:37:25.560000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4412 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643731623732306232326231343166346138386133366231616464 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit: BPF prog-id=229 op=LOAD Jul 12 00:37:25.560000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4412 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643731623732306232326231343166346138386133366231616464 Jul 12 00:37:25.560000 audit: BPF prog-id=229 op=UNLOAD Jul 12 00:37:25.560000 audit: BPF prog-id=228 op=UNLOAD Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:37:25.560000 audit: BPF prog-id=230 op=LOAD Jul 12 00:37:25.560000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4412 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:25.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643731623732306232326231343166346138386133366231616464 Jul 12 00:37:25.591680 env[1225]: time="2025-07-12T00:37:25.591632507Z" level=info msg="StartContainer for \"efd71b720b22b141f4a88a36b1add714b4800f04c662fb2c778580ebbe5be5e2\" returns successfully" Jul 12 00:37:25.881066 kubelet[1948]: I0712 00:37:25.880928 1948 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 12 00:37:25.881066 kubelet[1948]: I0712 00:37:25.881024 1948 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 12 00:37:26.089977 kubelet[1948]: I0712 00:37:26.088439 1948 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-lmhhb" podStartSLOduration=23.839297207 podStartE2EDuration="28.088423175s" podCreationTimestamp="2025-07-12 00:36:58 +0000 UTC" firstStartedPulling="2025-07-12 00:37:21.226803436 +0000 UTC m=+41.504986657" lastFinishedPulling="2025-07-12 00:37:25.475929364 +0000 UTC m=+45.754112625" observedRunningTime="2025-07-12 00:37:26.088146415 +0000 UTC m=+46.366329716" watchObservedRunningTime="2025-07-12 00:37:26.088423175 +0000 UTC m=+46.366606476" Jul 12 00:37:26.400116 systemd[1]: run-containerd-runc-k8s.io-efd71b720b22b141f4a88a36b1add714b4800f04c662fb2c778580ebbe5be5e2-runc.svniu5.mount: Deactivated successfully. Jul 12 00:37:27.415483 systemd[1]: Started sshd@9-10.0.0.113:22-10.0.0.1:52628.service. Jul 12 00:37:27.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.113:22-10.0.0.1:52628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.416464 kernel: kauditd_printk_skb: 462 callbacks suppressed Jul 12 00:37:27.416518 kernel: audit: type=1130 audit(1752280647.415:1471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.113:22-10.0.0.1:52628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.465000 audit[4926]: USER_ACCT pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.465839 sshd[4926]: Accepted publickey for core from 10.0.0.1 port 52628 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:27.466000 audit[4926]: CRED_ACQ pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.469181 sshd[4926]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:27.471342 kernel: audit: type=1101 audit(1752280647.465:1472): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.471433 kernel: audit: type=1103 audit(1752280647.466:1473): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.471457 kernel: audit: type=1006 audit(1752280647.466:1474): pid=4926 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 12 00:37:27.466000 audit[4926]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7fe4f80 a2=3 a3=1 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:27.475035 systemd[1]: Started session-10.scope. Jul 12 00:37:27.475174 kernel: audit: type=1300 audit(1752280647.466:1474): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7fe4f80 a2=3 a3=1 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:27.475222 kernel: audit: type=1327 audit(1752280647.466:1474): proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:27.466000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:27.475896 systemd-logind[1210]: New session 10 of user core. Jul 12 00:37:27.479000 audit[4926]: USER_START pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.480000 audit[4928]: CRED_ACQ pid=4928 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.484052 kernel: audit: type=1105 audit(1752280647.479:1475): pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.484097 kernel: audit: type=1103 audit(1752280647.480:1476): pid=4928 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.692411 sshd[4926]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:27.694000 audit[4926]: USER_END pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.695771 systemd[1]: Started sshd@10-10.0.0.113:22-10.0.0.1:52636.service. Jul 12 00:37:27.697598 kernel: audit: type=1106 audit(1752280647.694:1477): pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.113:22-10.0.0.1:52636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.699000 audit[4926]: CRED_DISP pid=4926 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.700421 kernel: audit: type=1130 audit(1752280647.697:1478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.113:22-10.0.0.1:52636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.701856 systemd[1]: sshd@9-10.0.0.113:22-10.0.0.1:52628.service: Deactivated successfully. Jul 12 00:37:27.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.113:22-10.0.0.1:52628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.702575 systemd[1]: session-10.scope: Deactivated successfully. Jul 12 00:37:27.703082 systemd-logind[1210]: Session 10 logged out. Waiting for processes to exit. Jul 12 00:37:27.703837 systemd-logind[1210]: Removed session 10. Jul 12 00:37:27.738000 audit[4940]: USER_ACCT pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.739076 sshd[4940]: Accepted publickey for core from 10.0.0.1 port 52636 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:27.739000 audit[4940]: CRED_ACQ pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.739000 audit[4940]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff19fcb50 a2=3 a3=1 items=0 ppid=1 pid=4940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:27.739000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:27.740155 sshd[4940]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:27.745053 systemd-logind[1210]: New session 11 of user core. Jul 12 00:37:27.745884 systemd[1]: Started session-11.scope. Jul 12 00:37:27.753000 audit[4940]: USER_START pid=4940 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.755000 audit[4943]: CRED_ACQ pid=4943 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.956666 sshd[4940]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:27.958223 systemd[1]: Started sshd@11-10.0.0.113:22-10.0.0.1:52642.service. Jul 12 00:37:27.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.113:22-10.0.0.1:52642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.959000 audit[4940]: USER_END pid=4940 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.959000 audit[4940]: CRED_DISP pid=4940 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:27.971243 systemd[1]: sshd@10-10.0.0.113:22-10.0.0.1:52636.service: Deactivated successfully. Jul 12 00:37:27.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.113:22-10.0.0.1:52636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:27.972145 systemd[1]: session-11.scope: Deactivated successfully. Jul 12 00:37:27.973158 systemd-logind[1210]: Session 11 logged out. Waiting for processes to exit. Jul 12 00:37:27.974876 systemd-logind[1210]: Removed session 11. Jul 12 00:37:28.004000 audit[4951]: USER_ACCT pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:28.004878 sshd[4951]: Accepted publickey for core from 10.0.0.1 port 52642 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:28.005000 audit[4951]: CRED_ACQ pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:28.005000 audit[4951]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc609f750 a2=3 a3=1 items=0 ppid=1 pid=4951 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:28.005000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:28.006137 sshd[4951]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:28.009895 systemd-logind[1210]: New session 12 of user core. Jul 12 00:37:28.010923 systemd[1]: Started session-12.scope. Jul 12 00:37:28.014000 audit[4951]: USER_START pid=4951 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:28.016000 audit[4954]: CRED_ACQ pid=4954 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:28.149222 sshd[4951]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:28.149000 audit[4951]: USER_END pid=4951 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:28.149000 audit[4951]: CRED_DISP pid=4951 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:28.152282 systemd[1]: sshd@11-10.0.0.113:22-10.0.0.1:52642.service: Deactivated successfully. Jul 12 00:37:28.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.113:22-10.0.0.1:52642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:28.153203 systemd[1]: session-12.scope: Deactivated successfully. Jul 12 00:37:28.153872 systemd-logind[1210]: Session 12 logged out. Waiting for processes to exit. Jul 12 00:37:28.154707 systemd-logind[1210]: Removed session 12. Jul 12 00:37:33.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.113:22-10.0.0.1:33876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:33.155245 systemd[1]: Started sshd@12-10.0.0.113:22-10.0.0.1:33876.service. Jul 12 00:37:33.158040 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 12 00:37:33.158137 kernel: audit: type=1130 audit(1752280653.155:1498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.113:22-10.0.0.1:33876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:33.203000 audit[4972]: USER_ACCT pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.204030 sshd[4972]: Accepted publickey for core from 10.0.0.1 port 33876 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:33.205681 sshd[4972]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:33.204000 audit[4972]: CRED_ACQ pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.209091 kernel: audit: type=1101 audit(1752280653.203:1499): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.209183 kernel: audit: type=1103 audit(1752280653.204:1500): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.209213 kernel: audit: type=1006 audit(1752280653.204:1501): pid=4972 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 12 00:37:33.211674 kernel: audit: type=1300 audit(1752280653.204:1501): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd6ed3d0 a2=3 a3=1 items=0 ppid=1 pid=4972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:33.204000 audit[4972]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd6ed3d0 a2=3 a3=1 items=0 ppid=1 pid=4972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:33.212832 kernel: audit: type=1327 audit(1752280653.204:1501): proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:33.204000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:33.213680 systemd-logind[1210]: New session 13 of user core. Jul 12 00:37:33.214288 systemd[1]: Started session-13.scope. Jul 12 00:37:33.219000 audit[4972]: USER_START pid=4972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.221000 audit[4974]: CRED_ACQ pid=4974 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.226045 kernel: audit: type=1105 audit(1752280653.219:1502): pid=4972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.226143 kernel: audit: type=1103 audit(1752280653.221:1503): pid=4974 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.350618 sshd[4972]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:33.351000 audit[4972]: USER_END pid=4972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.354176 systemd[1]: sshd@12-10.0.0.113:22-10.0.0.1:33876.service: Deactivated successfully. Jul 12 00:37:33.351000 audit[4972]: CRED_DISP pid=4972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.355170 systemd[1]: session-13.scope: Deactivated successfully. Jul 12 00:37:33.357348 kernel: audit: type=1106 audit(1752280653.351:1504): pid=4972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.357454 kernel: audit: type=1104 audit(1752280653.351:1505): pid=4972 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:33.357401 systemd-logind[1210]: Session 13 logged out. Waiting for processes to exit. Jul 12 00:37:33.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.113:22-10.0.0.1:33876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:33.358175 systemd-logind[1210]: Removed session 13. Jul 12 00:37:33.514963 systemd[1]: run-containerd-runc-k8s.io-0121fa2324ff64cf4ddfece0a6ee3f33b9162e962612e3d8d3d6e43d7138daeb-runc.63qqYk.mount: Deactivated successfully. Jul 12 00:37:37.042000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:37.042000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:37.042000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=400f580700 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:37:37.042000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:37:37.042000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=400f4440c0 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:37:37.042000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:37:37.044000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:37.044000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=400f411bf0 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:37:37.044000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:37:37.048000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7312 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:37.048000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=400f83ef30 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:37:37.048000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:37:37.060000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:37.060000 audit[1820]: AVC avc: denied { watch } for pid=1820 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:37.060000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=400f95e8a0 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:37:37.060000 audit[1820]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=400e573740 a2=fc6 a3=0 items=0 ppid=1665 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c64,c151 key=(null) Jul 12 00:37:37.060000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:37:37.060000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:37:38.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.113:22-10.0.0.1:33890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:38.355784 systemd[1]: Started sshd@13-10.0.0.113:22-10.0.0.1:33890.service. Jul 12 00:37:38.356529 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 12 00:37:38.356567 kernel: audit: type=1130 audit(1752280658.355:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.113:22-10.0.0.1:33890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:38.402000 audit[5014]: USER_ACCT pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.403268 sshd[5014]: Accepted publickey for core from 10.0.0.1 port 33890 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:38.404781 sshd[5014]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:38.404000 audit[5014]: CRED_ACQ pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.407819 kernel: audit: type=1101 audit(1752280658.402:1514): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.407897 kernel: audit: type=1103 audit(1752280658.404:1515): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.407926 kernel: audit: type=1006 audit(1752280658.404:1516): pid=5014 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 12 00:37:38.408419 systemd-logind[1210]: New session 14 of user core. Jul 12 00:37:38.404000 audit[5014]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1c16a00 a2=3 a3=1 items=0 ppid=1 pid=5014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:38.409548 systemd[1]: Started session-14.scope. Jul 12 00:37:38.411851 kernel: audit: type=1300 audit(1752280658.404:1516): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1c16a00 a2=3 a3=1 items=0 ppid=1 pid=5014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:38.411922 kernel: audit: type=1327 audit(1752280658.404:1516): proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:38.404000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:38.412000 audit[5014]: USER_START pid=5014 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.416049 kernel: audit: type=1105 audit(1752280658.412:1517): pid=5014 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.416108 kernel: audit: type=1103 audit(1752280658.414:1518): pid=5016 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.414000 audit[5016]: CRED_ACQ pid=5016 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.446000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:38.446000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014dd380 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:38.453483 kernel: audit: type=1400 audit(1752280658.446:1519): avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:38.453555 kernel: audit: type=1300 audit(1752280658.446:1519): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014dd380 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:38.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:37:38.446000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:38.446000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001337980 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:38.446000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:37:38.547660 sshd[5014]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:38.548000 audit[5014]: USER_END pid=5014 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.548000 audit[5014]: CRED_DISP pid=5014 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.113:22-10.0.0.1:33894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:38.551948 systemd[1]: Started sshd@14-10.0.0.113:22-10.0.0.1:33894.service. Jul 12 00:37:38.553014 systemd[1]: sshd@13-10.0.0.113:22-10.0.0.1:33890.service: Deactivated successfully. Jul 12 00:37:38.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.113:22-10.0.0.1:33890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:38.553933 systemd[1]: session-14.scope: Deactivated successfully. Jul 12 00:37:38.554487 systemd-logind[1210]: Session 14 logged out. Waiting for processes to exit. Jul 12 00:37:38.555142 systemd-logind[1210]: Removed session 14. Jul 12 00:37:38.603000 audit[5026]: USER_ACCT pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.603955 sshd[5026]: Accepted publickey for core from 10.0.0.1 port 33894 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:38.604000 audit[5026]: CRED_ACQ pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.604000 audit[5026]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffac6110 a2=3 a3=1 items=0 ppid=1 pid=5026 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:38.604000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:38.605823 sshd[5026]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:38.610102 systemd-logind[1210]: New session 15 of user core. Jul 12 00:37:38.611083 systemd[1]: Started session-15.scope. Jul 12 00:37:38.615000 audit[5026]: USER_START pid=5026 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.616000 audit[5029]: CRED_ACQ pid=5029 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.825817 sshd[5026]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:38.827000 audit[5026]: USER_END pid=5026 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.828000 audit[5026]: CRED_DISP pid=5026 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.113:22-10.0.0.1:33910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:38.829953 systemd[1]: Started sshd@15-10.0.0.113:22-10.0.0.1:33910.service. Jul 12 00:37:38.831433 systemd[1]: sshd@14-10.0.0.113:22-10.0.0.1:33894.service: Deactivated successfully. Jul 12 00:37:38.831578 systemd-logind[1210]: Session 15 logged out. Waiting for processes to exit. Jul 12 00:37:38.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.113:22-10.0.0.1:33894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:38.832152 systemd[1]: session-15.scope: Deactivated successfully. Jul 12 00:37:38.832961 systemd-logind[1210]: Removed session 15. Jul 12 00:37:38.876000 audit[5038]: USER_ACCT pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.876971 sshd[5038]: Accepted publickey for core from 10.0.0.1 port 33910 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:38.878000 audit[5038]: CRED_ACQ pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.878000 audit[5038]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7d5abd0 a2=3 a3=1 items=0 ppid=1 pid=5038 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:38.878000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:38.879435 sshd[5038]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:38.882847 systemd-logind[1210]: New session 16 of user core. Jul 12 00:37:38.883781 systemd[1]: Started session-16.scope. Jul 12 00:37:38.886000 audit[5038]: USER_START pid=5038 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:38.887000 audit[5041]: CRED_ACQ pid=5041 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:39.800957 env[1225]: time="2025-07-12T00:37:39.800918282Z" level=info msg="StopPodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\"" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.860 [WARNING][5065] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--lmhhb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2661cac-2427-4630-8294-055c230ed79c", ResourceVersion:"1160", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c", Pod:"csi-node-driver-lmhhb", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid7a40b89bac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.861 [INFO][5065] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.861 [INFO][5065] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" iface="eth0" netns="" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.861 [INFO][5065] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.861 [INFO][5065] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.905 [INFO][5076] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.906 [INFO][5076] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.906 [INFO][5076] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.916 [WARNING][5076] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.916 [INFO][5076] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.918 [INFO][5076] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:39.922924 env[1225]: 2025-07-12 00:37:39.921 [INFO][5065] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:39.923602 env[1225]: time="2025-07-12T00:37:39.923564218Z" level=info msg="TearDown network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" successfully" Jul 12 00:37:39.923671 env[1225]: time="2025-07-12T00:37:39.923654778Z" level=info msg="StopPodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" returns successfully" Jul 12 00:37:39.924312 env[1225]: time="2025-07-12T00:37:39.924276899Z" level=info msg="RemovePodSandbox for \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\"" Jul 12 00:37:39.924375 env[1225]: time="2025-07-12T00:37:39.924320579Z" level=info msg="Forcibly stopping sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\"" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:39.988 [WARNING][5094] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--lmhhb-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b2661cac-2427-4630-8294-055c230ed79c", ResourceVersion:"1160", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"def9461350799018d0e5ba8d5b600b30471a8a253f353c845d5317040d3ffa5c", Pod:"csi-node-driver-lmhhb", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid7a40b89bac", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:39.989 [INFO][5094] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:39.989 [INFO][5094] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" iface="eth0" netns="" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:39.989 [INFO][5094] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:39.989 [INFO][5094] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.055 [INFO][5102] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.056 [INFO][5102] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.056 [INFO][5102] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.065 [WARNING][5102] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.065 [INFO][5102] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" HandleID="k8s-pod-network.d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Workload="localhost-k8s-csi--node--driver--lmhhb-eth0" Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.069 [INFO][5102] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.078095 env[1225]: 2025-07-12 00:37:40.071 [INFO][5094] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb" Jul 12 00:37:40.078095 env[1225]: time="2025-07-12T00:37:40.078056095Z" level=info msg="TearDown network for sandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" successfully" Jul 12 00:37:40.087200 env[1225]: time="2025-07-12T00:37:40.087130462Z" level=info msg="RemovePodSandbox \"d059a4d3716473f8cc782d35185db9aba09216f3f1fa52331d2334472cb60cdb\" returns successfully" Jul 12 00:37:40.087760 env[1225]: time="2025-07-12T00:37:40.087720382Z" level=info msg="StopPodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\"" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.129 [WARNING][5121] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"90be7b23-6894-474b-b81f-606de468c5af", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50", Pod:"coredns-7c65d6cfc9-jzsjt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali198b604ec9b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.129 [INFO][5121] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.129 [INFO][5121] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" iface="eth0" netns="" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.129 [INFO][5121] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.129 [INFO][5121] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.160 [INFO][5129] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.160 [INFO][5129] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.160 [INFO][5129] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.169 [WARNING][5129] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.169 [INFO][5129] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.171 [INFO][5129] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.179681 env[1225]: 2025-07-12 00:37:40.175 [INFO][5121] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.179681 env[1225]: time="2025-07-12T00:37:40.179598130Z" level=info msg="TearDown network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" successfully" Jul 12 00:37:40.179681 env[1225]: time="2025-07-12T00:37:40.179631370Z" level=info msg="StopPodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" returns successfully" Jul 12 00:37:40.180312 env[1225]: time="2025-07-12T00:37:40.180054770Z" level=info msg="RemovePodSandbox for \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\"" Jul 12 00:37:40.180312 env[1225]: time="2025-07-12T00:37:40.180088850Z" level=info msg="Forcibly stopping sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\"" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.230 [WARNING][5146] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"90be7b23-6894-474b-b81f-606de468c5af", ResourceVersion:"1073", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aa2d3a35dd74fcd5ae3060cbd215b10dd92b05856b23f31da085ed439ac53d50", Pod:"coredns-7c65d6cfc9-jzsjt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali198b604ec9b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.230 [INFO][5146] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.230 [INFO][5146] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" iface="eth0" netns="" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.230 [INFO][5146] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.230 [INFO][5146] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.258 [INFO][5155] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.258 [INFO][5155] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.258 [INFO][5155] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.266 [WARNING][5155] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.267 [INFO][5155] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" HandleID="k8s-pod-network.cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Workload="localhost-k8s-coredns--7c65d6cfc9--jzsjt-eth0" Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.268 [INFO][5155] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.272366 env[1225]: 2025-07-12 00:37:40.270 [INFO][5146] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb" Jul 12 00:37:40.272826 env[1225]: time="2025-07-12T00:37:40.272420238Z" level=info msg="TearDown network for sandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" successfully" Jul 12 00:37:40.277949 env[1225]: time="2025-07-12T00:37:40.277894762Z" level=info msg="RemovePodSandbox \"cf131eb65d65d6b2cd67b9f743349dcfed2247a46faa5d73569cd104cd97babb\" returns successfully" Jul 12 00:37:40.278676 env[1225]: time="2025-07-12T00:37:40.278647362Z" level=info msg="StopPodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\"" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.322 [WARNING][5172] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"fce8ecab-7388-48d6-ad03-2056d4c42692", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312", Pod:"coredns-7c65d6cfc9-gswv7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5d7916ec8a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.323 [INFO][5172] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.323 [INFO][5172] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" iface="eth0" netns="" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.323 [INFO][5172] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.323 [INFO][5172] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.354 [INFO][5181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.354 [INFO][5181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.354 [INFO][5181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.370 [WARNING][5181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.370 [INFO][5181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.373 [INFO][5181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.377789 env[1225]: 2025-07-12 00:37:40.375 [INFO][5172] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.377789 env[1225]: time="2025-07-12T00:37:40.377743355Z" level=info msg="TearDown network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" successfully" Jul 12 00:37:40.377789 env[1225]: time="2025-07-12T00:37:40.377772915Z" level=info msg="StopPodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" returns successfully" Jul 12 00:37:40.378735 env[1225]: time="2025-07-12T00:37:40.378693875Z" level=info msg="RemovePodSandbox for \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\"" Jul 12 00:37:40.378995 env[1225]: time="2025-07-12T00:37:40.378893556Z" level=info msg="Forcibly stopping sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\"" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.428 [WARNING][5199] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"fce8ecab-7388-48d6-ad03-2056d4c42692", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d6131186d515cc4434deb0ffb779339d8d9b6181297bc721c988ecd033434312", Pod:"coredns-7c65d6cfc9-gswv7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic5d7916ec8a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.428 [INFO][5199] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.428 [INFO][5199] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" iface="eth0" netns="" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.428 [INFO][5199] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.428 [INFO][5199] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.454 [INFO][5208] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.455 [INFO][5208] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.455 [INFO][5208] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.463 [WARNING][5208] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.463 [INFO][5208] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" HandleID="k8s-pod-network.84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Workload="localhost-k8s-coredns--7c65d6cfc9--gswv7-eth0" Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.465 [INFO][5208] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.469656 env[1225]: 2025-07-12 00:37:40.467 [INFO][5199] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a" Jul 12 00:37:40.470096 env[1225]: time="2025-07-12T00:37:40.469685702Z" level=info msg="TearDown network for sandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" successfully" Jul 12 00:37:40.473069 env[1225]: time="2025-07-12T00:37:40.473028465Z" level=info msg="RemovePodSandbox \"84c5777a61d97e84e4073f3002d323bed5a689245f30408239e6c224124aba4a\" returns successfully" Jul 12 00:37:40.473660 env[1225]: time="2025-07-12T00:37:40.473630025Z" level=info msg="StopPodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\"" Jul 12 00:37:40.554863 sshd[5038]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:40.556000 audit[5038]: USER_END pid=5038 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:40.556000 audit[5038]: CRED_DISP pid=5038 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:40.556000 audit[5242]: NETFILTER_CFG table=filter:128 family=2 entries=12 op=nft_register_rule pid=5242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:40.556000 audit[5242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe631b920 a2=0 a3=1 items=0 ppid=2057 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:40.556000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:40.559952 systemd[1]: sshd@15-10.0.0.113:22-10.0.0.1:33910.service: Deactivated successfully. Jul 12 00:37:40.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.113:22-10.0.0.1:33910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:40.560633 systemd[1]: session-16.scope: Deactivated successfully. Jul 12 00:37:40.561000 audit[5242]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:40.561000 audit[5242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe631b920 a2=0 a3=1 items=0 ppid=2057 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:40.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:40.565324 systemd-logind[1210]: Session 16 logged out. Waiting for processes to exit. Jul 12 00:37:40.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.113:22-10.0.0.1:33926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:40.566372 systemd[1]: Started sshd@16-10.0.0.113:22-10.0.0.1:33926.service. Jul 12 00:37:40.568482 systemd-logind[1210]: Removed session 16. Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.524 [WARNING][5225] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"ab89e077-9e27-42c7-85ee-0fd8db11d2e2", ResourceVersion:"1149", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350", Pod:"goldmane-58fd7646b9-qd6zx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6a6028c0dcc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.526 [INFO][5225] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.526 [INFO][5225] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" iface="eth0" netns="" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.526 [INFO][5225] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.526 [INFO][5225] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.553 [INFO][5234] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.553 [INFO][5234] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.553 [INFO][5234] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.569 [WARNING][5234] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.569 [INFO][5234] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.574 [INFO][5234] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.586073 env[1225]: 2025-07-12 00:37:40.578 [INFO][5225] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.586073 env[1225]: time="2025-07-12T00:37:40.584828907Z" level=info msg="TearDown network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" successfully" Jul 12 00:37:40.586073 env[1225]: time="2025-07-12T00:37:40.584860467Z" level=info msg="StopPodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" returns successfully" Jul 12 00:37:40.586828 env[1225]: time="2025-07-12T00:37:40.586787828Z" level=info msg="RemovePodSandbox for \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\"" Jul 12 00:37:40.586859 env[1225]: time="2025-07-12T00:37:40.586824988Z" level=info msg="Forcibly stopping sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\"" Jul 12 00:37:40.587000 audit[5248]: NETFILTER_CFG table=filter:130 family=2 entries=24 op=nft_register_rule pid=5248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:40.587000 audit[5248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13432 a0=3 a1=fffff54c7760 a2=0 a3=1 items=0 ppid=2057 pid=5248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:40.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:40.593000 audit[5248]: NETFILTER_CFG table=nat:131 family=2 entries=22 op=nft_register_rule pid=5248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:40.593000 audit[5248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff54c7760 a2=0 a3=1 items=0 ppid=2057 pid=5248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:40.593000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:40.619000 audit[5245]: USER_ACCT pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:40.620551 sshd[5245]: Accepted publickey for core from 10.0.0.1 port 33926 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:40.621000 audit[5245]: CRED_ACQ pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:40.621000 audit[5245]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffefc84770 a2=3 a3=1 items=0 ppid=1 pid=5245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:40.621000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:40.621996 sshd[5245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:40.626470 systemd-logind[1210]: New session 17 of user core. Jul 12 00:37:40.626572 systemd[1]: Started session-17.scope. Jul 12 00:37:40.630000 audit[5245]: USER_START pid=5245 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:40.631000 audit[5267]: CRED_ACQ pid=5267 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.646 [WARNING][5259] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"ab89e077-9e27-42c7-85ee-0fd8db11d2e2", ResourceVersion:"1149", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"65002b09cba99aec884bd234b68446d9502856f136b276fd73ee07b5cbc99350", Pod:"goldmane-58fd7646b9-qd6zx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6a6028c0dcc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.647 [INFO][5259] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.647 [INFO][5259] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" iface="eth0" netns="" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.647 [INFO][5259] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.647 [INFO][5259] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.667 [INFO][5269] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.667 [INFO][5269] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.667 [INFO][5269] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.677 [WARNING][5269] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.677 [INFO][5269] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" HandleID="k8s-pod-network.7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Workload="localhost-k8s-goldmane--58fd7646b9--qd6zx-eth0" Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.681 [INFO][5269] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.691500 env[1225]: 2025-07-12 00:37:40.689 [INFO][5259] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7" Jul 12 00:37:40.691928 env[1225]: time="2025-07-12T00:37:40.691520505Z" level=info msg="TearDown network for sandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" successfully" Jul 12 00:37:40.694507 env[1225]: time="2025-07-12T00:37:40.694464347Z" level=info msg="RemovePodSandbox \"7921b18faabea0208d53d8d587ae749bcef36061d318108f4633c1a6041098d7\" returns successfully" Jul 12 00:37:40.695050 env[1225]: time="2025-07-12T00:37:40.695026227Z" level=info msg="StopPodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\"" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.728 [WARNING][5289] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" WorkloadEndpoint="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.729 [INFO][5289] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.729 [INFO][5289] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" iface="eth0" netns="" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.729 [INFO][5289] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.729 [INFO][5289] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.750 [INFO][5302] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.750 [INFO][5302] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.750 [INFO][5302] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.760 [WARNING][5302] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.760 [INFO][5302] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.762 [INFO][5302] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.765968 env[1225]: 2025-07-12 00:37:40.764 [INFO][5289] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.766426 env[1225]: time="2025-07-12T00:37:40.765990719Z" level=info msg="TearDown network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" successfully" Jul 12 00:37:40.766426 env[1225]: time="2025-07-12T00:37:40.766023959Z" level=info msg="StopPodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" returns successfully" Jul 12 00:37:40.766695 env[1225]: time="2025-07-12T00:37:40.766668000Z" level=info msg="RemovePodSandbox for \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\"" Jul 12 00:37:40.766825 env[1225]: time="2025-07-12T00:37:40.766786320Z" level=info msg="Forcibly stopping sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\"" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.802 [WARNING][5321] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" WorkloadEndpoint="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.802 [INFO][5321] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.802 [INFO][5321] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" iface="eth0" netns="" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.802 [INFO][5321] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.802 [INFO][5321] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.824 [INFO][5330] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.824 [INFO][5330] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.824 [INFO][5330] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.833 [WARNING][5330] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.833 [INFO][5330] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" HandleID="k8s-pod-network.d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Workload="localhost-k8s-whisker--7dc57d494d--5mv8g-eth0" Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.834 [INFO][5330] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.838494 env[1225]: 2025-07-12 00:37:40.836 [INFO][5321] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916" Jul 12 00:37:40.839263 env[1225]: time="2025-07-12T00:37:40.838526613Z" level=info msg="TearDown network for sandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" successfully" Jul 12 00:37:40.841943 env[1225]: time="2025-07-12T00:37:40.841906055Z" level=info msg="RemovePodSandbox \"d7a3f78a36fea5a9b2701f74f0b56a4a9eb72d0a5ae2e053b6619064d80bd916\" returns successfully" Jul 12 00:37:40.842543 env[1225]: time="2025-07-12T00:37:40.842504855Z" level=info msg="StopPodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\"" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.885 [WARNING][5348] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0", GenerateName:"calico-kube-controllers-7c9584d98d-", Namespace:"calico-system", SelfLink:"", UID:"959bd649-cd6f-4cca-bb3b-7522130f9a6e", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c9584d98d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632", Pod:"calico-kube-controllers-7c9584d98d-54sbn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali68e8933f051", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.886 [INFO][5348] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.886 [INFO][5348] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" iface="eth0" netns="" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.886 [INFO][5348] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.886 [INFO][5348] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.915 [INFO][5359] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.915 [INFO][5359] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.915 [INFO][5359] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.924 [WARNING][5359] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.924 [INFO][5359] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.925 [INFO][5359] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:40.929037 env[1225]: 2025-07-12 00:37:40.927 [INFO][5348] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:40.930826 env[1225]: time="2025-07-12T00:37:40.929009079Z" level=info msg="TearDown network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" successfully" Jul 12 00:37:40.930876 env[1225]: time="2025-07-12T00:37:40.930823520Z" level=info msg="StopPodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" returns successfully" Jul 12 00:37:40.931311 env[1225]: time="2025-07-12T00:37:40.931285721Z" level=info msg="RemovePodSandbox for \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\"" Jul 12 00:37:40.931370 env[1225]: time="2025-07-12T00:37:40.931319121Z" level=info msg="Forcibly stopping sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\"" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:40.975 [WARNING][5376] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0", GenerateName:"calico-kube-controllers-7c9584d98d-", Namespace:"calico-system", SelfLink:"", UID:"959bd649-cd6f-4cca-bb3b-7522130f9a6e", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c9584d98d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cde14dcf35855e7525cd0e378af9daaf2560b5579155eebbfede423adf5ef632", Pod:"calico-kube-controllers-7c9584d98d-54sbn", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali68e8933f051", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:40.975 [INFO][5376] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:40.975 [INFO][5376] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" iface="eth0" netns="" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:40.975 [INFO][5376] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:40.975 [INFO][5376] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.014 [INFO][5385] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.014 [INFO][5385] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.014 [INFO][5385] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.028 [WARNING][5385] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.028 [INFO][5385] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" HandleID="k8s-pod-network.f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Workload="localhost-k8s-calico--kube--controllers--7c9584d98d--54sbn-eth0" Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.030 [INFO][5385] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:41.033832 env[1225]: 2025-07-12 00:37:41.032 [INFO][5376] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced" Jul 12 00:37:41.034479 env[1225]: time="2025-07-12T00:37:41.034438755Z" level=info msg="TearDown network for sandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" successfully" Jul 12 00:37:41.037726 env[1225]: time="2025-07-12T00:37:41.037687437Z" level=info msg="RemovePodSandbox \"f1109f970ec923070a954218b7595357f0cc765aad7e228a6b2b27b509a8cced\" returns successfully" Jul 12 00:37:41.038481 env[1225]: time="2025-07-12T00:37:41.038439917Z" level=info msg="StopPodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\"" Jul 12 00:37:41.061543 sshd[5245]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:41.063000 audit[5245]: USER_END pid=5245 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.063000 audit[5245]: CRED_DISP pid=5245 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.066635 systemd[1]: Started sshd@17-10.0.0.113:22-10.0.0.1:33930.service. Jul 12 00:37:41.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.113:22-10.0.0.1:33930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:41.068734 systemd[1]: session-17.scope: Deactivated successfully. Jul 12 00:37:41.069717 systemd[1]: sshd@16-10.0.0.113:22-10.0.0.1:33926.service: Deactivated successfully. Jul 12 00:37:41.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.113:22-10.0.0.1:33926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:41.070587 systemd-logind[1210]: Session 17 logged out. Waiting for processes to exit. Jul 12 00:37:41.071257 systemd-logind[1210]: Removed session 17. Jul 12 00:37:41.119000 audit[5411]: USER_ACCT pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.120000 audit[5411]: CRED_ACQ pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.120000 audit[5411]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff48daea0 a2=3 a3=1 items=0 ppid=1 pid=5411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:41.120000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:41.123619 sshd[5411]: Accepted publickey for core from 10.0.0.1 port 33930 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:41.121715 sshd[5411]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:41.128406 systemd[1]: Started session-18.scope. Jul 12 00:37:41.128733 systemd-logind[1210]: New session 18 of user core. Jul 12 00:37:41.132000 audit[5411]: USER_START pid=5411 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.138000 audit[5423]: CRED_ACQ pid=5423 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.095 [WARNING][5403] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"333c2284-4856-4b96-ae71-299989a675c9", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7", Pod:"calico-apiserver-5b66657499-h6rg8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali677656479d2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.096 [INFO][5403] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.096 [INFO][5403] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" iface="eth0" netns="" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.096 [INFO][5403] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.096 [INFO][5403] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.131 [INFO][5416] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.131 [INFO][5416] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.131 [INFO][5416] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.141 [WARNING][5416] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.141 [INFO][5416] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.142 [INFO][5416] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:41.146132 env[1225]: 2025-07-12 00:37:41.144 [INFO][5403] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.146554 env[1225]: time="2025-07-12T00:37:41.146144351Z" level=info msg="TearDown network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" successfully" Jul 12 00:37:41.146554 env[1225]: time="2025-07-12T00:37:41.146174271Z" level=info msg="StopPodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" returns successfully" Jul 12 00:37:41.146862 env[1225]: time="2025-07-12T00:37:41.146823832Z" level=info msg="RemovePodSandbox for \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\"" Jul 12 00:37:41.146925 env[1225]: time="2025-07-12T00:37:41.146859872Z" level=info msg="Forcibly stopping sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\"" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.179 [WARNING][5434] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"333c2284-4856-4b96-ae71-299989a675c9", ResourceVersion:"1128", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e977bf005e01c83cddd9efcedf912aaf5315a7fe78f527a8a3bb9c80aa2110f7", Pod:"calico-apiserver-5b66657499-h6rg8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali677656479d2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.179 [INFO][5434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.179 [INFO][5434] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" iface="eth0" netns="" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.179 [INFO][5434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.179 [INFO][5434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.205 [INFO][5443] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.206 [INFO][5443] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.206 [INFO][5443] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.214 [WARNING][5443] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.214 [INFO][5443] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" HandleID="k8s-pod-network.c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Workload="localhost-k8s-calico--apiserver--5b66657499--h6rg8-eth0" Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.216 [INFO][5443] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:41.221038 env[1225]: 2025-07-12 00:37:41.217 [INFO][5434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b" Jul 12 00:37:41.221497 env[1225]: time="2025-07-12T00:37:41.221080923Z" level=info msg="TearDown network for sandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" successfully" Jul 12 00:37:41.224216 env[1225]: time="2025-07-12T00:37:41.224185085Z" level=info msg="RemovePodSandbox \"c3a60500b32e1fe6250b5b02327dc684c9e64cf0e8cdd6e58dce8e838143093b\" returns successfully" Jul 12 00:37:41.224847 env[1225]: time="2025-07-12T00:37:41.224814365Z" level=info msg="StopPodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\"" Jul 12 00:37:41.261484 sshd[5411]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:41.262000 audit[5411]: USER_END pid=5411 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.263000 audit[5411]: CRED_DISP pid=5411 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:41.266440 systemd[1]: sshd@17-10.0.0.113:22-10.0.0.1:33930.service: Deactivated successfully. Jul 12 00:37:41.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.113:22-10.0.0.1:33930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:41.267206 systemd[1]: session-18.scope: Deactivated successfully. Jul 12 00:37:41.267819 systemd-logind[1210]: Session 18 logged out. Waiting for processes to exit. Jul 12 00:37:41.268537 systemd-logind[1210]: Removed session 18. Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.266 [WARNING][5470] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"a628162b-ce5f-4ca6-8662-fc728afedeff", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461", Pod:"calico-apiserver-5b66657499-knnn4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3456c1d2dd5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.266 [INFO][5470] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.266 [INFO][5470] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" iface="eth0" netns="" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.267 [INFO][5470] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.267 [INFO][5470] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.289 [INFO][5479] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.289 [INFO][5479] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.289 [INFO][5479] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.297 [WARNING][5479] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.297 [INFO][5479] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.299 [INFO][5479] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:41.303810 env[1225]: 2025-07-12 00:37:41.302 [INFO][5470] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.304392 env[1225]: time="2025-07-12T00:37:41.304339180Z" level=info msg="TearDown network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" successfully" Jul 12 00:37:41.304470 env[1225]: time="2025-07-12T00:37:41.304451860Z" level=info msg="StopPodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" returns successfully" Jul 12 00:37:41.304983 env[1225]: time="2025-07-12T00:37:41.304944141Z" level=info msg="RemovePodSandbox for \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\"" Jul 12 00:37:41.305064 env[1225]: time="2025-07-12T00:37:41.304985461Z" level=info msg="Forcibly stopping sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\"" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.338 [WARNING][5496] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0", GenerateName:"calico-apiserver-5b66657499-", Namespace:"calico-apiserver", SelfLink:"", UID:"a628162b-ce5f-4ca6-8662-fc728afedeff", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5b66657499", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c7f3ff886269e013af6363ec80778e1bbe575c32e76441775bbcf61103ebe461", Pod:"calico-apiserver-5b66657499-knnn4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3456c1d2dd5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.339 [INFO][5496] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.339 [INFO][5496] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" iface="eth0" netns="" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.339 [INFO][5496] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.339 [INFO][5496] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.358 [INFO][5505] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.358 [INFO][5505] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.358 [INFO][5505] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.369 [WARNING][5505] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.369 [INFO][5505] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" HandleID="k8s-pod-network.57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Workload="localhost-k8s-calico--apiserver--5b66657499--knnn4-eth0" Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.370 [INFO][5505] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:37:41.374658 env[1225]: 2025-07-12 00:37:41.373 [INFO][5496] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234" Jul 12 00:37:41.375128 env[1225]: time="2025-07-12T00:37:41.374688228Z" level=info msg="TearDown network for sandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" successfully" Jul 12 00:37:41.377651 env[1225]: time="2025-07-12T00:37:41.377610910Z" level=info msg="RemovePodSandbox \"57455eaeb11079a121f492ff8ecb2e9201a4a6c846e93d71143f3484af332234\" returns successfully" Jul 12 00:37:43.078000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:43.078000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002773700 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:43.078000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:37:43.080000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:43.080000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002d92d20 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:43.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:37:43.081000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:43.081000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002773720 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:43.081000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:37:43.082000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:37:43.082000 audit[1836]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002773740 a2=fc6 a3=0 items=0 ppid=1664 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c117 key=(null) Jul 12 00:37:43.082000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:37:45.485412 kernel: kauditd_printk_skb: 75 callbacks suppressed Jul 12 00:37:45.485600 kernel: audit: type=1325 audit(1752280665.480:1568): table=filter:132 family=2 entries=24 op=nft_register_rule pid=5516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:45.485639 kernel: audit: type=1300 audit(1752280665.480:1568): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6e055b0 a2=0 a3=1 items=0 ppid=2057 pid=5516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:45.485663 kernel: audit: type=1327 audit(1752280665.480:1568): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:45.480000 audit[5516]: NETFILTER_CFG table=filter:132 family=2 entries=24 op=nft_register_rule pid=5516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:45.480000 audit[5516]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6e055b0 a2=0 a3=1 items=0 ppid=2057 pid=5516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:45.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:45.489000 audit[5516]: NETFILTER_CFG table=nat:133 family=2 entries=106 op=nft_register_chain pid=5516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:45.489000 audit[5516]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=ffffd6e055b0 a2=0 a3=1 items=0 ppid=2057 pid=5516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:45.494571 kernel: audit: type=1325 audit(1752280665.489:1569): table=nat:133 family=2 entries=106 op=nft_register_chain pid=5516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:45.494632 kernel: audit: type=1300 audit(1752280665.489:1569): arch=c00000b7 syscall=211 success=yes exit=49452 a0=3 a1=ffffd6e055b0 a2=0 a3=1 items=0 ppid=2057 pid=5516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:45.494663 kernel: audit: type=1327 audit(1752280665.489:1569): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:45.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:46.264652 systemd[1]: Started sshd@18-10.0.0.113:22-10.0.0.1:35590.service. Jul 12 00:37:46.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.113:22-10.0.0.1:35590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:46.267411 kernel: audit: type=1130 audit(1752280666.264:1570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.113:22-10.0.0.1:35590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:46.316000 audit[5521]: USER_ACCT pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.318601 sshd[5521]: Accepted publickey for core from 10.0.0.1 port 35590 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:46.320650 sshd[5521]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:46.321690 kernel: audit: type=1101 audit(1752280666.316:1571): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.321752 kernel: audit: type=1103 audit(1752280666.318:1572): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.318000 audit[5521]: CRED_ACQ pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.326625 kernel: audit: type=1006 audit(1752280666.318:1573): pid=5521 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 12 00:37:46.318000 audit[5521]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee6fb040 a2=3 a3=1 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:46.318000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:46.329127 systemd[1]: Started session-19.scope. Jul 12 00:37:46.329513 systemd-logind[1210]: New session 19 of user core. Jul 12 00:37:46.333000 audit[5521]: USER_START pid=5521 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.334000 audit[5523]: CRED_ACQ pid=5523 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.501693 sshd[5521]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:46.502000 audit[5521]: USER_END pid=5521 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.502000 audit[5521]: CRED_DISP pid=5521 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:46.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.113:22-10.0.0.1:35590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:46.504169 systemd[1]: sshd@18-10.0.0.113:22-10.0.0.1:35590.service: Deactivated successfully. Jul 12 00:37:46.504965 systemd[1]: session-19.scope: Deactivated successfully. Jul 12 00:37:46.505537 systemd-logind[1210]: Session 19 logged out. Waiting for processes to exit. Jul 12 00:37:46.506329 systemd-logind[1210]: Removed session 19. Jul 12 00:37:47.811893 kubelet[1948]: E0712 00:37:47.811857 1948 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:37:51.507296 systemd[1]: Started sshd@19-10.0.0.113:22-10.0.0.1:35600.service. Jul 12 00:37:51.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.113:22-10.0.0.1:35600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:51.508543 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 12 00:37:51.508632 kernel: audit: type=1130 audit(1752280671.507:1579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.113:22-10.0.0.1:35600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:51.560987 sshd[5556]: Accepted publickey for core from 10.0.0.1 port 35600 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:51.560000 audit[5556]: USER_ACCT pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.564411 kernel: audit: type=1101 audit(1752280671.560:1580): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.564000 audit[5556]: CRED_ACQ pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.567193 sshd[5556]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:51.568888 kernel: audit: type=1103 audit(1752280671.564:1581): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.569002 kernel: audit: type=1006 audit(1752280671.564:1582): pid=5556 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 12 00:37:51.564000 audit[5556]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff11ba210 a2=3 a3=1 items=0 ppid=1 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:51.571807 kernel: audit: type=1300 audit(1752280671.564:1582): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff11ba210 a2=3 a3=1 items=0 ppid=1 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:51.564000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:51.573090 kernel: audit: type=1327 audit(1752280671.564:1582): proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:51.576003 systemd-logind[1210]: New session 20 of user core. Jul 12 00:37:51.576892 systemd[1]: Started session-20.scope. Jul 12 00:37:51.580000 audit[5556]: USER_START pid=5556 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.580000 audit[5558]: CRED_ACQ pid=5558 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.586637 kernel: audit: type=1105 audit(1752280671.580:1583): pid=5556 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.586699 kernel: audit: type=1103 audit(1752280671.580:1584): pid=5558 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.754281 sshd[5556]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:51.754000 audit[5556]: USER_END pid=5556 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.757000 audit[5556]: CRED_DISP pid=5556 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.761228 kernel: audit: type=1106 audit(1752280671.754:1585): pid=5556 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.761322 kernel: audit: type=1104 audit(1752280671.757:1586): pid=5556 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:51.762875 systemd[1]: sshd@19-10.0.0.113:22-10.0.0.1:35600.service: Deactivated successfully. Jul 12 00:37:51.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.113:22-10.0.0.1:35600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:51.763688 systemd[1]: session-20.scope: Deactivated successfully. Jul 12 00:37:51.764194 systemd-logind[1210]: Session 20 logged out. Waiting for processes to exit. Jul 12 00:37:51.765027 systemd-logind[1210]: Removed session 20. Jul 12 00:37:53.900000 audit[5590]: NETFILTER_CFG table=filter:134 family=2 entries=11 op=nft_register_rule pid=5590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:53.900000 audit[5590]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc624dd50 a2=0 a3=1 items=0 ppid=2057 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:53.900000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:53.911000 audit[5590]: NETFILTER_CFG table=nat:135 family=2 entries=53 op=nft_register_chain pid=5590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:53.911000 audit[5590]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19332 a0=3 a1=ffffc624dd50 a2=0 a3=1 items=0 ppid=2057 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:53.911000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:54.751853 kubelet[1948]: I0712 00:37:54.751806 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:54.792000 audit[5612]: NETFILTER_CFG table=filter:136 family=2 entries=9 op=nft_register_rule pid=5612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:54.792000 audit[5612]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff7470bb0 a2=0 a3=1 items=0 ppid=2057 pid=5612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:54.792000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:54.803000 audit[5612]: NETFILTER_CFG table=nat:137 family=2 entries=55 op=nft_register_chain pid=5612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:54.803000 audit[5612]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=fffff7470bb0 a2=0 a3=1 items=0 ppid=2057 pid=5612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:54.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:56.304937 kubelet[1948]: I0712 00:37:56.304896 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:37:56.340000 audit[5620]: NETFILTER_CFG table=filter:138 family=2 entries=8 op=nft_register_rule pid=5620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:56.340000 audit[5620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe0b7aa00 a2=0 a3=1 items=0 ppid=2057 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:56.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:56.348000 audit[5620]: NETFILTER_CFG table=nat:139 family=2 entries=62 op=nft_register_chain pid=5620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:37:56.348000 audit[5620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffe0b7aa00 a2=0 a3=1 items=0 ppid=2057 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:56.348000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:37:56.759333 systemd[1]: Started sshd@20-10.0.0.113:22-10.0.0.1:48700.service. Jul 12 00:37:56.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.113:22-10.0.0.1:48700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:56.762707 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 12 00:37:56.762804 kernel: audit: type=1130 audit(1752280676.758:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.113:22-10.0.0.1:48700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:37:56.803000 audit[5622]: USER_ACCT pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.804986 sshd[5622]: Accepted publickey for core from 10.0.0.1 port 48700 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:37:56.806700 sshd[5622]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:37:56.804000 audit[5622]: CRED_ACQ pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.809545 kernel: audit: type=1101 audit(1752280676.803:1595): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.809616 kernel: audit: type=1103 audit(1752280676.804:1596): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.809645 kernel: audit: type=1006 audit(1752280676.804:1597): pid=5622 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 12 00:37:56.810359 systemd-logind[1210]: New session 21 of user core. Jul 12 00:37:56.804000 audit[5622]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff863c910 a2=3 a3=1 items=0 ppid=1 pid=5622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:56.811398 systemd[1]: Started session-21.scope. Jul 12 00:37:56.813505 kernel: audit: type=1300 audit(1752280676.804:1597): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff863c910 a2=3 a3=1 items=0 ppid=1 pid=5622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:37:56.813570 kernel: audit: type=1327 audit(1752280676.804:1597): proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:56.804000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:37:56.813000 audit[5622]: USER_START pid=5622 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.816000 audit[5624]: CRED_ACQ pid=5624 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.821824 kernel: audit: type=1105 audit(1752280676.813:1598): pid=5622 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.821887 kernel: audit: type=1103 audit(1752280676.816:1599): pid=5624 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.939813 sshd[5622]: pam_unix(sshd:session): session closed for user core Jul 12 00:37:56.939000 audit[5622]: USER_END pid=5622 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.944090 systemd[1]: session-21.scope: Deactivated successfully. Jul 12 00:37:56.944642 systemd-logind[1210]: Session 21 logged out. Waiting for processes to exit. Jul 12 00:37:56.944775 systemd[1]: sshd@20-10.0.0.113:22-10.0.0.1:48700.service: Deactivated successfully. Jul 12 00:37:56.945736 systemd-logind[1210]: Removed session 21. Jul 12 00:37:56.939000 audit[5622]: CRED_DISP pid=5622 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.949066 kernel: audit: type=1106 audit(1752280676.939:1600): pid=5622 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.949109 kernel: audit: type=1104 audit(1752280676.939:1601): pid=5622 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:37:56.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.113:22-10.0.0.1:48700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:01.945553 systemd[1]: Started sshd@21-10.0.0.113:22-10.0.0.1:48702.service. Jul 12 00:38:01.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.113:22-10.0.0.1:48702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:01.946783 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:38:01.946848 kernel: audit: type=1130 audit(1752280681.944:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.113:22-10.0.0.1:48702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:01.993372 sshd[5635]: Accepted publickey for core from 10.0.0.1 port 48702 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:38:01.991000 audit[5635]: USER_ACCT pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:01.997208 sshd[5635]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:38:01.996000 audit[5635]: CRED_ACQ pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:01.999560 kernel: audit: type=1101 audit(1752280681.991:1604): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:01.999640 kernel: audit: type=1103 audit(1752280681.996:1605): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:01.999669 kernel: audit: type=1006 audit(1752280681.996:1606): pid=5635 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 12 00:38:01.996000 audit[5635]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb6c1440 a2=3 a3=1 items=0 ppid=1 pid=5635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:38:02.003961 kernel: audit: type=1300 audit(1752280681.996:1606): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb6c1440 a2=3 a3=1 items=0 ppid=1 pid=5635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:38:01.996000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:38:02.004982 kernel: audit: type=1327 audit(1752280681.996:1606): proctitle=737368643A20636F7265205B707269765D Jul 12 00:38:02.006583 systemd-logind[1210]: New session 22 of user core. Jul 12 00:38:02.007480 systemd[1]: Started session-22.scope. Jul 12 00:38:02.009000 audit[5635]: USER_START pid=5635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.010000 audit[5637]: CRED_ACQ pid=5637 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.016241 kernel: audit: type=1105 audit(1752280682.009:1607): pid=5635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.016342 kernel: audit: type=1103 audit(1752280682.010:1608): pid=5637 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.159110 sshd[5635]: pam_unix(sshd:session): session closed for user core Jul 12 00:38:02.158000 audit[5635]: USER_END pid=5635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.161640 systemd[1]: sshd@21-10.0.0.113:22-10.0.0.1:48702.service: Deactivated successfully. Jul 12 00:38:02.162514 systemd[1]: session-22.scope: Deactivated successfully. Jul 12 00:38:02.158000 audit[5635]: CRED_DISP pid=5635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.164773 systemd-logind[1210]: Session 22 logged out. Waiting for processes to exit. Jul 12 00:38:02.165107 kernel: audit: type=1106 audit(1752280682.158:1609): pid=5635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.165143 kernel: audit: type=1104 audit(1752280682.158:1610): pid=5635 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:38:02.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.113:22-10.0.0.1:48702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:02.165669 systemd-logind[1210]: Removed session 22.