Jul 12 00:38:47.715906 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 12 00:38:47.715924 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Jul 11 23:15:18 -00 2025 Jul 12 00:38:47.715932 kernel: efi: EFI v2.70 by EDK II Jul 12 00:38:47.715938 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 12 00:38:47.715943 kernel: random: crng init done Jul 12 00:38:47.715948 kernel: ACPI: Early table checksum verification disabled Jul 12 00:38:47.715955 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 12 00:38:47.715961 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 12 00:38:47.715967 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.715972 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.715978 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.715983 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.715988 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.715994 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.716002 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.716008 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.716014 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 12 00:38:47.716019 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 12 00:38:47.716025 kernel: NUMA: Failed to initialise from firmware Jul 12 00:38:47.716031 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 12 00:38:47.716037 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 12 00:38:47.716043 kernel: Zone ranges: Jul 12 00:38:47.716049 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 12 00:38:47.716056 kernel: DMA32 empty Jul 12 00:38:47.716061 kernel: Normal empty Jul 12 00:38:47.716067 kernel: Movable zone start for each node Jul 12 00:38:47.716073 kernel: Early memory node ranges Jul 12 00:38:47.716079 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 12 00:38:47.716084 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 12 00:38:47.716090 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 12 00:38:47.716096 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 12 00:38:47.716102 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 12 00:38:47.716108 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 12 00:38:47.716114 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 12 00:38:47.716120 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 12 00:38:47.716127 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 12 00:38:47.716133 kernel: psci: probing for conduit method from ACPI. Jul 12 00:38:47.716139 kernel: psci: PSCIv1.1 detected in firmware. Jul 12 00:38:47.716145 kernel: psci: Using standard PSCI v0.2 function IDs Jul 12 00:38:47.716151 kernel: psci: Trusted OS migration not required Jul 12 00:38:47.716159 kernel: psci: SMC Calling Convention v1.1 Jul 12 00:38:47.716165 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 12 00:38:47.716173 kernel: ACPI: SRAT not present Jul 12 00:38:47.716180 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 12 00:38:47.716186 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 12 00:38:47.716192 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 12 00:38:47.716199 kernel: Detected PIPT I-cache on CPU0 Jul 12 00:38:47.716205 kernel: CPU features: detected: GIC system register CPU interface Jul 12 00:38:47.716216 kernel: CPU features: detected: Hardware dirty bit management Jul 12 00:38:47.716222 kernel: CPU features: detected: Spectre-v4 Jul 12 00:38:47.716228 kernel: CPU features: detected: Spectre-BHB Jul 12 00:38:47.716236 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 12 00:38:47.716242 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 12 00:38:47.716249 kernel: CPU features: detected: ARM erratum 1418040 Jul 12 00:38:47.716255 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 12 00:38:47.716261 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 12 00:38:47.716267 kernel: Policy zone: DMA Jul 12 00:38:47.716275 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:38:47.716281 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 12 00:38:47.716288 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 12 00:38:47.716294 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 12 00:38:47.716300 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 12 00:38:47.716308 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 12 00:38:47.716315 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 12 00:38:47.716321 kernel: trace event string verifier disabled Jul 12 00:38:47.716327 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 12 00:38:47.716335 kernel: rcu: RCU event tracing is enabled. Jul 12 00:38:47.716341 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 12 00:38:47.716348 kernel: Trampoline variant of Tasks RCU enabled. Jul 12 00:38:47.716354 kernel: Tracing variant of Tasks RCU enabled. Jul 12 00:38:47.716360 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 12 00:38:47.716367 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 12 00:38:47.716373 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 12 00:38:47.716380 kernel: GICv3: 256 SPIs implemented Jul 12 00:38:47.716386 kernel: GICv3: 0 Extended SPIs implemented Jul 12 00:38:47.716393 kernel: GICv3: Distributor has no Range Selector support Jul 12 00:38:47.716399 kernel: Root IRQ handler: gic_handle_irq Jul 12 00:38:47.716405 kernel: GICv3: 16 PPIs implemented Jul 12 00:38:47.716412 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 12 00:38:47.716418 kernel: ACPI: SRAT not present Jul 12 00:38:47.716424 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 12 00:38:47.716430 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 12 00:38:47.716437 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 12 00:38:47.716443 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 12 00:38:47.716450 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 12 00:38:47.716457 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:38:47.716464 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 12 00:38:47.716470 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 12 00:38:47.716476 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 12 00:38:47.716483 kernel: arm-pv: using stolen time PV Jul 12 00:38:47.716489 kernel: Console: colour dummy device 80x25 Jul 12 00:38:47.716496 kernel: ACPI: Core revision 20210730 Jul 12 00:38:47.716509 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 12 00:38:47.716523 kernel: pid_max: default: 32768 minimum: 301 Jul 12 00:38:47.716530 kernel: LSM: Security Framework initializing Jul 12 00:38:47.716538 kernel: SELinux: Initializing. Jul 12 00:38:47.716545 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:38:47.716551 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 12 00:38:47.716558 kernel: rcu: Hierarchical SRCU implementation. Jul 12 00:38:47.716564 kernel: Platform MSI: ITS@0x8080000 domain created Jul 12 00:38:47.716571 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 12 00:38:47.716577 kernel: Remapping and enabling EFI services. Jul 12 00:38:47.716583 kernel: smp: Bringing up secondary CPUs ... Jul 12 00:38:47.716590 kernel: Detected PIPT I-cache on CPU1 Jul 12 00:38:47.716597 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 12 00:38:47.716604 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 12 00:38:47.716610 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:38:47.716617 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 12 00:38:47.716623 kernel: Detected PIPT I-cache on CPU2 Jul 12 00:38:47.716629 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 12 00:38:47.716636 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 12 00:38:47.716643 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:38:47.716649 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 12 00:38:47.716655 kernel: Detected PIPT I-cache on CPU3 Jul 12 00:38:47.716663 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 12 00:38:47.716669 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 12 00:38:47.716676 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 12 00:38:47.716682 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 12 00:38:47.716692 kernel: smp: Brought up 1 node, 4 CPUs Jul 12 00:38:47.716700 kernel: SMP: Total of 4 processors activated. Jul 12 00:38:47.716707 kernel: CPU features: detected: 32-bit EL0 Support Jul 12 00:38:47.716713 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 12 00:38:47.716720 kernel: CPU features: detected: Common not Private translations Jul 12 00:38:47.716727 kernel: CPU features: detected: CRC32 instructions Jul 12 00:38:47.716733 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 12 00:38:47.716740 kernel: CPU features: detected: LSE atomic instructions Jul 12 00:38:47.716748 kernel: CPU features: detected: Privileged Access Never Jul 12 00:38:47.716754 kernel: CPU features: detected: RAS Extension Support Jul 12 00:38:47.716761 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 12 00:38:47.716768 kernel: CPU: All CPU(s) started at EL1 Jul 12 00:38:47.716774 kernel: alternatives: patching kernel code Jul 12 00:38:47.716783 kernel: devtmpfs: initialized Jul 12 00:38:47.716789 kernel: KASLR enabled Jul 12 00:38:47.716797 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 12 00:38:47.716804 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 12 00:38:47.716810 kernel: pinctrl core: initialized pinctrl subsystem Jul 12 00:38:47.716817 kernel: SMBIOS 3.0.0 present. Jul 12 00:38:47.716824 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 12 00:38:47.716830 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 12 00:38:47.716837 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 12 00:38:47.716845 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 12 00:38:47.716852 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 12 00:38:47.716859 kernel: audit: initializing netlink subsys (disabled) Jul 12 00:38:47.716866 kernel: audit: type=2000 audit(0.037:1): state=initialized audit_enabled=0 res=1 Jul 12 00:38:47.716872 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 12 00:38:47.716879 kernel: cpuidle: using governor menu Jul 12 00:38:47.716885 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 12 00:38:47.716892 kernel: ASID allocator initialised with 32768 entries Jul 12 00:38:47.716898 kernel: ACPI: bus type PCI registered Jul 12 00:38:47.716906 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 12 00:38:47.716913 kernel: Serial: AMBA PL011 UART driver Jul 12 00:38:47.716920 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 12 00:38:47.716926 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 12 00:38:47.716933 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 12 00:38:47.716941 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 12 00:38:47.716947 kernel: cryptd: max_cpu_qlen set to 1000 Jul 12 00:38:47.716955 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 12 00:38:47.716963 kernel: ACPI: Added _OSI(Module Device) Jul 12 00:38:47.716986 kernel: ACPI: Added _OSI(Processor Device) Jul 12 00:38:47.716993 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 12 00:38:47.716999 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 12 00:38:47.717006 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 12 00:38:47.717013 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 12 00:38:47.717019 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 12 00:38:47.717026 kernel: ACPI: Interpreter enabled Jul 12 00:38:47.717033 kernel: ACPI: Using GIC for interrupt routing Jul 12 00:38:47.717039 kernel: ACPI: MCFG table detected, 1 entries Jul 12 00:38:47.717047 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 12 00:38:47.717054 kernel: printk: console [ttyAMA0] enabled Jul 12 00:38:47.717061 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 12 00:38:47.717176 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 12 00:38:47.717238 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 12 00:38:47.717294 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 12 00:38:47.717350 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 12 00:38:47.717408 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 12 00:38:47.717416 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 12 00:38:47.717423 kernel: PCI host bridge to bus 0000:00 Jul 12 00:38:47.717489 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 12 00:38:47.717574 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 12 00:38:47.717629 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 12 00:38:47.717680 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 12 00:38:47.717754 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 12 00:38:47.717822 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 12 00:38:47.717880 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 12 00:38:47.717937 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 12 00:38:47.717995 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 12 00:38:47.718053 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 12 00:38:47.718110 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 12 00:38:47.718170 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 12 00:38:47.718221 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 12 00:38:47.718271 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 12 00:38:47.718321 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 12 00:38:47.718330 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 12 00:38:47.718337 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 12 00:38:47.718344 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 12 00:38:47.718352 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 12 00:38:47.718359 kernel: iommu: Default domain type: Translated Jul 12 00:38:47.718366 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 12 00:38:47.718373 kernel: vgaarb: loaded Jul 12 00:38:47.718379 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 12 00:38:47.718386 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 12 00:38:47.718393 kernel: PTP clock support registered Jul 12 00:38:47.718400 kernel: Registered efivars operations Jul 12 00:38:47.718407 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 12 00:38:47.718413 kernel: VFS: Disk quotas dquot_6.6.0 Jul 12 00:38:47.718421 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 12 00:38:47.718428 kernel: pnp: PnP ACPI init Jul 12 00:38:47.718489 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 12 00:38:47.718498 kernel: pnp: PnP ACPI: found 1 devices Jul 12 00:38:47.718520 kernel: NET: Registered PF_INET protocol family Jul 12 00:38:47.718528 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 12 00:38:47.718535 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 12 00:38:47.718541 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 12 00:38:47.718550 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 12 00:38:47.718557 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 12 00:38:47.718564 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 12 00:38:47.718571 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:38:47.718577 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 12 00:38:47.718584 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 12 00:38:47.718591 kernel: PCI: CLS 0 bytes, default 64 Jul 12 00:38:47.718600 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 12 00:38:47.718607 kernel: kvm [1]: HYP mode not available Jul 12 00:38:47.718615 kernel: Initialise system trusted keyrings Jul 12 00:38:47.718621 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 12 00:38:47.718628 kernel: Key type asymmetric registered Jul 12 00:38:47.718634 kernel: Asymmetric key parser 'x509' registered Jul 12 00:38:47.718641 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 12 00:38:47.718648 kernel: io scheduler mq-deadline registered Jul 12 00:38:47.718654 kernel: io scheduler kyber registered Jul 12 00:38:47.718661 kernel: io scheduler bfq registered Jul 12 00:38:47.718668 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 12 00:38:47.718675 kernel: ACPI: button: Power Button [PWRB] Jul 12 00:38:47.718683 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 12 00:38:47.718752 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 12 00:38:47.718762 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 12 00:38:47.718769 kernel: thunder_xcv, ver 1.0 Jul 12 00:38:47.718775 kernel: thunder_bgx, ver 1.0 Jul 12 00:38:47.718782 kernel: nicpf, ver 1.0 Jul 12 00:38:47.718789 kernel: nicvf, ver 1.0 Jul 12 00:38:47.718883 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 12 00:38:47.718942 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-12T00:38:47 UTC (1752280727) Jul 12 00:38:47.718951 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 12 00:38:47.718958 kernel: NET: Registered PF_INET6 protocol family Jul 12 00:38:47.718965 kernel: Segment Routing with IPv6 Jul 12 00:38:47.718971 kernel: In-situ OAM (IOAM) with IPv6 Jul 12 00:38:47.718978 kernel: NET: Registered PF_PACKET protocol family Jul 12 00:38:47.718984 kernel: Key type dns_resolver registered Jul 12 00:38:47.718991 kernel: registered taskstats version 1 Jul 12 00:38:47.718999 kernel: Loading compiled-in X.509 certificates Jul 12 00:38:47.719006 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: de2ee1d04443f96c763927c453375bbe23b5752a' Jul 12 00:38:47.719013 kernel: Key type .fscrypt registered Jul 12 00:38:47.719019 kernel: Key type fscrypt-provisioning registered Jul 12 00:38:47.719026 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 12 00:38:47.719032 kernel: ima: Allocated hash algorithm: sha1 Jul 12 00:38:47.719039 kernel: ima: No architecture policies found Jul 12 00:38:47.719046 kernel: clk: Disabling unused clocks Jul 12 00:38:47.719052 kernel: Freeing unused kernel memory: 36416K Jul 12 00:38:47.719060 kernel: Run /init as init process Jul 12 00:38:47.719067 kernel: with arguments: Jul 12 00:38:47.719073 kernel: /init Jul 12 00:38:47.719079 kernel: with environment: Jul 12 00:38:47.719086 kernel: HOME=/ Jul 12 00:38:47.719092 kernel: TERM=linux Jul 12 00:38:47.719099 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 12 00:38:47.719108 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:38:47.719117 systemd[1]: Detected virtualization kvm. Jul 12 00:38:47.719125 systemd[1]: Detected architecture arm64. Jul 12 00:38:47.719132 systemd[1]: Running in initrd. Jul 12 00:38:47.719138 systemd[1]: No hostname configured, using default hostname. Jul 12 00:38:47.719145 systemd[1]: Hostname set to . Jul 12 00:38:47.719153 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:38:47.719160 systemd[1]: Queued start job for default target initrd.target. Jul 12 00:38:47.719166 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:38:47.719175 systemd[1]: Reached target cryptsetup.target. Jul 12 00:38:47.719182 systemd[1]: Reached target paths.target. Jul 12 00:38:47.719188 systemd[1]: Reached target slices.target. Jul 12 00:38:47.719195 systemd[1]: Reached target swap.target. Jul 12 00:38:47.719202 systemd[1]: Reached target timers.target. Jul 12 00:38:47.719209 systemd[1]: Listening on iscsid.socket. Jul 12 00:38:47.719216 systemd[1]: Listening on iscsiuio.socket. Jul 12 00:38:47.719224 systemd[1]: Listening on systemd-journald-audit.socket. Jul 12 00:38:47.719232 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 12 00:38:47.719239 systemd[1]: Listening on systemd-journald.socket. Jul 12 00:38:47.719246 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:38:47.719253 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:38:47.719260 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:38:47.719266 systemd[1]: Reached target sockets.target. Jul 12 00:38:47.719274 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:38:47.719281 systemd[1]: Finished network-cleanup.service. Jul 12 00:38:47.719289 systemd[1]: Starting systemd-fsck-usr.service... Jul 12 00:38:47.719296 systemd[1]: Starting systemd-journald.service... Jul 12 00:38:47.719303 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:38:47.719311 systemd[1]: Starting systemd-resolved.service... Jul 12 00:38:47.719318 systemd[1]: Starting systemd-vconsole-setup.service... Jul 12 00:38:47.719325 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:38:47.719332 systemd[1]: Finished systemd-fsck-usr.service. Jul 12 00:38:47.719339 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 12 00:38:47.719346 systemd[1]: Finished systemd-vconsole-setup.service. Jul 12 00:38:47.719354 systemd[1]: Starting dracut-cmdline-ask.service... Jul 12 00:38:47.719361 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 12 00:38:47.719369 kernel: audit: type=1130 audit(1752280727.716:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.719379 systemd-journald[289]: Journal started Jul 12 00:38:47.719415 systemd-journald[289]: Runtime Journal (/run/log/journal/cd7b14c57b744ef48604545fcc6e72c4) is 6.0M, max 48.7M, 42.6M free. Jul 12 00:38:47.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.713836 systemd-modules-load[290]: Inserted module 'overlay' Jul 12 00:38:47.721147 systemd[1]: Started systemd-journald.service. Jul 12 00:38:47.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.724532 kernel: audit: type=1130 audit(1752280727.721:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.730069 systemd[1]: Finished dracut-cmdline-ask.service. Jul 12 00:38:47.732410 systemd[1]: Starting dracut-cmdline.service... Jul 12 00:38:47.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.735525 kernel: audit: type=1130 audit(1752280727.731:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.738542 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 12 00:38:47.739466 systemd-resolved[291]: Positive Trust Anchors: Jul 12 00:38:47.739485 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:38:47.739566 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:38:47.743921 systemd-resolved[291]: Defaulting to hostname 'linux'. Jul 12 00:38:47.744991 systemd[1]: Started systemd-resolved.service. Jul 12 00:38:47.748969 kernel: Bridge firewalling registered Jul 12 00:38:47.748985 kernel: audit: type=1130 audit(1752280727.746:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.749026 dracut-cmdline[308]: dracut-dracut-053 Jul 12 00:38:47.746048 systemd-modules-load[290]: Inserted module 'br_netfilter' Jul 12 00:38:47.746846 systemd[1]: Reached target nss-lookup.target. Jul 12 00:38:47.751272 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=6cb548cec1e3020e9c3dcbc1d7670f4d8bdc2e3c8e062898ccaed7fc9d588f65 Jul 12 00:38:47.758529 kernel: SCSI subsystem initialized Jul 12 00:38:47.765547 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 12 00:38:47.765582 kernel: device-mapper: uevent: version 1.0.3 Jul 12 00:38:47.765596 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 12 00:38:47.768420 systemd-modules-load[290]: Inserted module 'dm_multipath' Jul 12 00:38:47.769160 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:38:47.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.770695 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:38:47.773342 kernel: audit: type=1130 audit(1752280727.769:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.778782 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:38:47.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.782550 kernel: audit: type=1130 audit(1752280727.779:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.810531 kernel: Loading iSCSI transport class v2.0-870. Jul 12 00:38:47.822555 kernel: iscsi: registered transport (tcp) Jul 12 00:38:47.839538 kernel: iscsi: registered transport (qla4xxx) Jul 12 00:38:47.839571 kernel: QLogic iSCSI HBA Driver Jul 12 00:38:47.874167 systemd[1]: Finished dracut-cmdline.service. Jul 12 00:38:47.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.875863 systemd[1]: Starting dracut-pre-udev.service... Jul 12 00:38:47.878301 kernel: audit: type=1130 audit(1752280727.874:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:47.926420 kernel: raid6: neonx8 gen() 13741 MB/s Jul 12 00:38:47.942530 kernel: raid6: neonx8 xor() 10761 MB/s Jul 12 00:38:47.959536 kernel: raid6: neonx4 gen() 13523 MB/s Jul 12 00:38:47.976649 kernel: raid6: neonx4 xor() 11109 MB/s Jul 12 00:38:47.993539 kernel: raid6: neonx2 gen() 12944 MB/s Jul 12 00:38:48.011545 kernel: raid6: neonx2 xor() 10264 MB/s Jul 12 00:38:48.027553 kernel: raid6: neonx1 gen() 10573 MB/s Jul 12 00:38:48.046544 kernel: raid6: neonx1 xor() 8776 MB/s Jul 12 00:38:48.061548 kernel: raid6: int64x8 gen() 6257 MB/s Jul 12 00:38:48.078556 kernel: raid6: int64x8 xor() 3536 MB/s Jul 12 00:38:48.098545 kernel: raid6: int64x4 gen() 7239 MB/s Jul 12 00:38:48.112554 kernel: raid6: int64x4 xor() 3849 MB/s Jul 12 00:38:48.129552 kernel: raid6: int64x2 gen() 6140 MB/s Jul 12 00:38:48.146558 kernel: raid6: int64x2 xor() 3316 MB/s Jul 12 00:38:48.163555 kernel: raid6: int64x1 gen() 5033 MB/s Jul 12 00:38:48.180745 kernel: raid6: int64x1 xor() 2643 MB/s Jul 12 00:38:48.180811 kernel: raid6: using algorithm neonx8 gen() 13741 MB/s Jul 12 00:38:48.180831 kernel: raid6: .... xor() 10761 MB/s, rmw enabled Jul 12 00:38:48.180849 kernel: raid6: using neon recovery algorithm Jul 12 00:38:48.191534 kernel: xor: measuring software checksum speed Jul 12 00:38:48.191569 kernel: 8regs : 17224 MB/sec Jul 12 00:38:48.191578 kernel: 32regs : 18834 MB/sec Jul 12 00:38:48.192826 kernel: arm64_neon : 27607 MB/sec Jul 12 00:38:48.192844 kernel: xor: using function: arm64_neon (27607 MB/sec) Jul 12 00:38:48.248537 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 12 00:38:48.258881 systemd[1]: Finished dracut-pre-udev.service. Jul 12 00:38:48.262566 kernel: audit: type=1130 audit(1752280728.258:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:48.262584 kernel: audit: type=1334 audit(1752280728.261:10): prog-id=7 op=LOAD Jul 12 00:38:48.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:48.261000 audit: BPF prog-id=7 op=LOAD Jul 12 00:38:48.262000 audit: BPF prog-id=8 op=LOAD Jul 12 00:38:48.263597 systemd[1]: Starting systemd-udevd.service... Jul 12 00:38:48.277718 systemd-udevd[492]: Using default interface naming scheme 'v252'. Jul 12 00:38:48.280965 systemd[1]: Started systemd-udevd.service. Jul 12 00:38:48.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:48.282328 systemd[1]: Starting dracut-pre-trigger.service... Jul 12 00:38:48.297872 dracut-pre-trigger[498]: rd.md=0: removing MD RAID activation Jul 12 00:38:48.325656 systemd[1]: Finished dracut-pre-trigger.service. Jul 12 00:38:48.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:48.326999 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:38:48.358984 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:38:48.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:48.385527 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 12 00:38:48.389340 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 12 00:38:48.389355 kernel: GPT:9289727 != 19775487 Jul 12 00:38:48.389364 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 12 00:38:48.389378 kernel: GPT:9289727 != 19775487 Jul 12 00:38:48.389387 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 12 00:38:48.389395 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 12 00:38:48.400895 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 12 00:38:48.407554 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (545) Jul 12 00:38:48.408208 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 12 00:38:48.408975 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 12 00:38:48.413459 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 12 00:38:48.418396 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:38:48.419866 systemd[1]: Starting disk-uuid.service... Jul 12 00:38:48.425975 disk-uuid[566]: Primary Header is updated. Jul 12 00:38:48.425975 disk-uuid[566]: Secondary Entries is updated. Jul 12 00:38:48.425975 disk-uuid[566]: Secondary Header is updated. Jul 12 00:38:48.432548 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 12 00:38:49.440336 disk-uuid[567]: The operation has completed successfully. Jul 12 00:38:49.441278 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 12 00:38:49.463782 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 12 00:38:49.464946 systemd[1]: Finished disk-uuid.service. Jul 12 00:38:49.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.467088 systemd[1]: Starting verity-setup.service... Jul 12 00:38:49.480539 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 12 00:38:49.498870 systemd[1]: Found device dev-mapper-usr.device. Jul 12 00:38:49.501004 systemd[1]: Mounting sysusr-usr.mount... Jul 12 00:38:49.503111 systemd[1]: Finished verity-setup.service. Jul 12 00:38:49.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.552533 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 12 00:38:49.552662 systemd[1]: Mounted sysusr-usr.mount. Jul 12 00:38:49.553274 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 12 00:38:49.553955 systemd[1]: Starting ignition-setup.service... Jul 12 00:38:49.556151 systemd[1]: Starting parse-ip-for-networkd.service... Jul 12 00:38:49.562553 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:38:49.562678 kernel: BTRFS info (device vda6): using free space tree Jul 12 00:38:49.562721 kernel: BTRFS info (device vda6): has skinny extents Jul 12 00:38:49.569757 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 12 00:38:49.575579 systemd[1]: Finished ignition-setup.service. Jul 12 00:38:49.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.576905 systemd[1]: Starting ignition-fetch-offline.service... Jul 12 00:38:49.640361 systemd[1]: Finished parse-ip-for-networkd.service. Jul 12 00:38:49.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.641000 audit: BPF prog-id=9 op=LOAD Jul 12 00:38:49.642807 systemd[1]: Starting systemd-networkd.service... Jul 12 00:38:49.644434 ignition[653]: Ignition 2.14.0 Jul 12 00:38:49.644443 ignition[653]: Stage: fetch-offline Jul 12 00:38:49.644478 ignition[653]: no configs at "/usr/lib/ignition/base.d" Jul 12 00:38:49.644487 ignition[653]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:38:49.644639 ignition[653]: parsed url from cmdline: "" Jul 12 00:38:49.644642 ignition[653]: no config URL provided Jul 12 00:38:49.644647 ignition[653]: reading system config file "/usr/lib/ignition/user.ign" Jul 12 00:38:49.644653 ignition[653]: no config at "/usr/lib/ignition/user.ign" Jul 12 00:38:49.644672 ignition[653]: op(1): [started] loading QEMU firmware config module Jul 12 00:38:49.644676 ignition[653]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 12 00:38:49.653875 ignition[653]: op(1): [finished] loading QEMU firmware config module Jul 12 00:38:49.653899 ignition[653]: QEMU firmware config was not found. Ignoring... Jul 12 00:38:49.667024 systemd-networkd[744]: lo: Link UP Jul 12 00:38:49.667039 systemd-networkd[744]: lo: Gained carrier Jul 12 00:38:49.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.667678 systemd-networkd[744]: Enumeration completed Jul 12 00:38:49.667751 systemd[1]: Started systemd-networkd.service. Jul 12 00:38:49.668059 systemd-networkd[744]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:38:49.668948 systemd[1]: Reached target network.target. Jul 12 00:38:49.669410 systemd-networkd[744]: eth0: Link UP Jul 12 00:38:49.669413 systemd-networkd[744]: eth0: Gained carrier Jul 12 00:38:49.670902 systemd[1]: Starting iscsiuio.service... Jul 12 00:38:49.679935 systemd[1]: Started iscsiuio.service. Jul 12 00:38:49.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.681721 systemd[1]: Starting iscsid.service... Jul 12 00:38:49.684975 iscsid[750]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:38:49.684975 iscsid[750]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 12 00:38:49.684975 iscsid[750]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 12 00:38:49.684975 iscsid[750]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 12 00:38:49.684975 iscsid[750]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 12 00:38:49.684975 iscsid[750]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 12 00:38:49.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.687818 systemd[1]: Started iscsid.service. Jul 12 00:38:49.687844 systemd-networkd[744]: eth0: DHCPv4 address 10.0.0.133/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 12 00:38:49.692047 systemd[1]: Starting dracut-initqueue.service... Jul 12 00:38:49.702216 systemd[1]: Finished dracut-initqueue.service. Jul 12 00:38:49.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.703239 systemd[1]: Reached target remote-fs-pre.target. Jul 12 00:38:49.704632 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:38:49.706110 systemd[1]: Reached target remote-fs.target. Jul 12 00:38:49.708268 systemd[1]: Starting dracut-pre-mount.service... Jul 12 00:38:49.715568 systemd[1]: Finished dracut-pre-mount.service. Jul 12 00:38:49.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.717286 ignition[653]: parsing config with SHA512: e4854703457aa2c4b80ad5bdcf9f9bab28714f8ee21727b4ad53ee69c6a0af2b6af172e36e97f49e7f67300ae71fd527c402988f1b1b86ca683d9a383ece743a Jul 12 00:38:49.724235 unknown[653]: fetched base config from "system" Jul 12 00:38:49.724245 unknown[653]: fetched user config from "qemu" Jul 12 00:38:49.724699 ignition[653]: fetch-offline: fetch-offline passed Jul 12 00:38:49.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.725741 systemd[1]: Finished ignition-fetch-offline.service. Jul 12 00:38:49.724754 ignition[653]: Ignition finished successfully Jul 12 00:38:49.727100 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 12 00:38:49.727822 systemd[1]: Starting ignition-kargs.service... Jul 12 00:38:49.735940 ignition[765]: Ignition 2.14.0 Jul 12 00:38:49.735950 ignition[765]: Stage: kargs Jul 12 00:38:49.736031 ignition[765]: no configs at "/usr/lib/ignition/base.d" Jul 12 00:38:49.736040 ignition[765]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:38:49.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.737866 systemd[1]: Finished ignition-kargs.service. Jul 12 00:38:49.736817 ignition[765]: kargs: kargs passed Jul 12 00:38:49.739795 systemd[1]: Starting ignition-disks.service... Jul 12 00:38:49.736855 ignition[765]: Ignition finished successfully Jul 12 00:38:49.745544 ignition[771]: Ignition 2.14.0 Jul 12 00:38:49.745554 ignition[771]: Stage: disks Jul 12 00:38:49.745636 ignition[771]: no configs at "/usr/lib/ignition/base.d" Jul 12 00:38:49.745645 ignition[771]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:38:49.747266 systemd[1]: Finished ignition-disks.service. Jul 12 00:38:49.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.746443 ignition[771]: disks: disks passed Jul 12 00:38:49.748687 systemd[1]: Reached target initrd-root-device.target. Jul 12 00:38:49.746478 ignition[771]: Ignition finished successfully Jul 12 00:38:49.749806 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:38:49.750893 systemd[1]: Reached target local-fs.target. Jul 12 00:38:49.752066 systemd[1]: Reached target sysinit.target. Jul 12 00:38:49.753165 systemd[1]: Reached target basic.target. Jul 12 00:38:49.755044 systemd[1]: Starting systemd-fsck-root.service... Jul 12 00:38:49.764888 systemd-fsck[779]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 12 00:38:49.769206 systemd[1]: Finished systemd-fsck-root.service. Jul 12 00:38:49.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.770844 systemd[1]: Mounting sysroot.mount... Jul 12 00:38:49.776540 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 12 00:38:49.777077 systemd[1]: Mounted sysroot.mount. Jul 12 00:38:49.778040 systemd-resolved[291]: Detected conflict on linux IN A 10.0.0.133 Jul 12 00:38:49.778049 systemd-resolved[291]: Hostname conflict, changing published hostname from 'linux' to 'linux10'. Jul 12 00:38:49.778168 systemd[1]: Reached target initrd-root-fs.target. Jul 12 00:38:49.780631 systemd[1]: Mounting sysroot-usr.mount... Jul 12 00:38:49.781692 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 12 00:38:49.781733 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 12 00:38:49.781756 systemd[1]: Reached target ignition-diskful.target. Jul 12 00:38:49.783359 systemd[1]: Mounted sysroot-usr.mount. Jul 12 00:38:49.785544 systemd[1]: Starting initrd-setup-root.service... Jul 12 00:38:49.789584 initrd-setup-root[789]: cut: /sysroot/etc/passwd: No such file or directory Jul 12 00:38:49.792910 initrd-setup-root[797]: cut: /sysroot/etc/group: No such file or directory Jul 12 00:38:49.795970 initrd-setup-root[805]: cut: /sysroot/etc/shadow: No such file or directory Jul 12 00:38:49.799469 initrd-setup-root[813]: cut: /sysroot/etc/gshadow: No such file or directory Jul 12 00:38:49.823720 systemd[1]: Finished initrd-setup-root.service. Jul 12 00:38:49.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.825018 systemd[1]: Starting ignition-mount.service... Jul 12 00:38:49.826177 systemd[1]: Starting sysroot-boot.service... Jul 12 00:38:49.830723 bash[830]: umount: /sysroot/usr/share/oem: not mounted. Jul 12 00:38:49.838904 ignition[832]: INFO : Ignition 2.14.0 Jul 12 00:38:49.838904 ignition[832]: INFO : Stage: mount Jul 12 00:38:49.840081 ignition[832]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 12 00:38:49.840081 ignition[832]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:38:49.841571 ignition[832]: INFO : mount: mount passed Jul 12 00:38:49.841571 ignition[832]: INFO : Ignition finished successfully Jul 12 00:38:49.842992 systemd[1]: Finished ignition-mount.service. Jul 12 00:38:49.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:49.845203 systemd[1]: Finished sysroot-boot.service. Jul 12 00:38:49.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:50.510472 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 12 00:38:50.516533 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (840) Jul 12 00:38:50.517845 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 12 00:38:50.517861 kernel: BTRFS info (device vda6): using free space tree Jul 12 00:38:50.517870 kernel: BTRFS info (device vda6): has skinny extents Jul 12 00:38:50.520881 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 12 00:38:50.522182 systemd[1]: Starting ignition-files.service... Jul 12 00:38:50.535183 ignition[860]: INFO : Ignition 2.14.0 Jul 12 00:38:50.535183 ignition[860]: INFO : Stage: files Jul 12 00:38:50.536447 ignition[860]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 12 00:38:50.536447 ignition[860]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:38:50.536447 ignition[860]: DEBUG : files: compiled without relabeling support, skipping Jul 12 00:38:50.538961 ignition[860]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 12 00:38:50.538961 ignition[860]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 12 00:38:50.542120 ignition[860]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 12 00:38:50.543102 ignition[860]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 12 00:38:50.544214 unknown[860]: wrote ssh authorized keys file for user: core Jul 12 00:38:50.545099 ignition[860]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 12 00:38:50.545099 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 12 00:38:50.545099 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Jul 12 00:38:50.676621 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 12 00:38:50.847014 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 12 00:38:50.848540 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:38:50.859451 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 12 00:38:50.859451 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:38:50.859451 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:38:50.859451 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:38:50.859451 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Jul 12 00:38:50.918744 systemd-networkd[744]: eth0: Gained IPv6LL Jul 12 00:38:51.238509 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 12 00:38:51.840140 ignition[860]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 12 00:38:51.840140 ignition[860]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 12 00:38:51.842939 ignition[860]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 12 00:38:51.886002 ignition[860]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 12 00:38:51.888071 ignition[860]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 12 00:38:51.888071 ignition[860]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:38:51.888071 ignition[860]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 12 00:38:51.888071 ignition[860]: INFO : files: files passed Jul 12 00:38:51.888071 ignition[860]: INFO : Ignition finished successfully Jul 12 00:38:51.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.888035 systemd[1]: Finished ignition-files.service. Jul 12 00:38:51.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.889564 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 12 00:38:51.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.890551 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 12 00:38:51.899172 initrd-setup-root-after-ignition[885]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 12 00:38:51.891183 systemd[1]: Starting ignition-quench.service... Jul 12 00:38:51.901260 initrd-setup-root-after-ignition[888]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 12 00:38:51.894883 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 12 00:38:51.894960 systemd[1]: Finished ignition-quench.service. Jul 12 00:38:51.895836 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 12 00:38:51.896865 systemd[1]: Reached target ignition-complete.target. Jul 12 00:38:51.898560 systemd[1]: Starting initrd-parse-etc.service... Jul 12 00:38:51.910232 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 12 00:38:51.910320 systemd[1]: Finished initrd-parse-etc.service. Jul 12 00:38:51.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.911584 systemd[1]: Reached target initrd-fs.target. Jul 12 00:38:51.912481 systemd[1]: Reached target initrd.target. Jul 12 00:38:51.913461 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 12 00:38:51.914148 systemd[1]: Starting dracut-pre-pivot.service... Jul 12 00:38:51.924129 systemd[1]: Finished dracut-pre-pivot.service. Jul 12 00:38:51.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.925404 systemd[1]: Starting initrd-cleanup.service... Jul 12 00:38:51.932908 systemd[1]: Stopped target nss-lookup.target. Jul 12 00:38:51.933572 systemd[1]: Stopped target remote-cryptsetup.target. Jul 12 00:38:51.934728 systemd[1]: Stopped target timers.target. Jul 12 00:38:51.935832 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 12 00:38:51.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.935927 systemd[1]: Stopped dracut-pre-pivot.service. Jul 12 00:38:51.936871 systemd[1]: Stopped target initrd.target. Jul 12 00:38:51.937850 systemd[1]: Stopped target basic.target. Jul 12 00:38:51.938771 systemd[1]: Stopped target ignition-complete.target. Jul 12 00:38:51.939790 systemd[1]: Stopped target ignition-diskful.target. Jul 12 00:38:51.940755 systemd[1]: Stopped target initrd-root-device.target. Jul 12 00:38:51.941813 systemd[1]: Stopped target remote-fs.target. Jul 12 00:38:51.942798 systemd[1]: Stopped target remote-fs-pre.target. Jul 12 00:38:51.943863 systemd[1]: Stopped target sysinit.target. Jul 12 00:38:51.944794 systemd[1]: Stopped target local-fs.target. Jul 12 00:38:51.945856 systemd[1]: Stopped target local-fs-pre.target. Jul 12 00:38:51.946803 systemd[1]: Stopped target swap.target. Jul 12 00:38:51.947708 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 12 00:38:51.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.947806 systemd[1]: Stopped dracut-pre-mount.service. Jul 12 00:38:51.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.948874 systemd[1]: Stopped target cryptsetup.target. Jul 12 00:38:51.949719 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 12 00:38:51.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.949808 systemd[1]: Stopped dracut-initqueue.service. Jul 12 00:38:51.950869 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 12 00:38:51.950954 systemd[1]: Stopped ignition-fetch-offline.service. Jul 12 00:38:51.951931 systemd[1]: Stopped target paths.target. Jul 12 00:38:51.952794 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 12 00:38:51.957551 systemd[1]: Stopped systemd-ask-password-console.path. Jul 12 00:38:51.958256 systemd[1]: Stopped target slices.target. Jul 12 00:38:51.959285 systemd[1]: Stopped target sockets.target. Jul 12 00:38:51.960201 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 12 00:38:51.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.960303 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 12 00:38:51.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.961267 systemd[1]: ignition-files.service: Deactivated successfully. Jul 12 00:38:51.961344 systemd[1]: Stopped ignition-files.service. Jul 12 00:38:51.964876 iscsid[750]: iscsid shutting down. Jul 12 00:38:51.963334 systemd[1]: Stopping ignition-mount.service... Jul 12 00:38:51.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.964537 systemd[1]: Stopping iscsid.service... Jul 12 00:38:51.965232 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 12 00:38:51.965338 systemd[1]: Stopped kmod-static-nodes.service. Jul 12 00:38:51.966950 systemd[1]: Stopping sysroot-boot.service... Jul 12 00:38:51.967876 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 12 00:38:51.967995 systemd[1]: Stopped systemd-udev-trigger.service. Jul 12 00:38:51.971921 ignition[901]: INFO : Ignition 2.14.0 Jul 12 00:38:51.971921 ignition[901]: INFO : Stage: umount Jul 12 00:38:51.971921 ignition[901]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 12 00:38:51.971921 ignition[901]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 12 00:38:51.969179 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 12 00:38:51.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.978826 ignition[901]: INFO : umount: umount passed Jul 12 00:38:51.978826 ignition[901]: INFO : Ignition finished successfully Jul 12 00:38:51.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.969264 systemd[1]: Stopped dracut-pre-trigger.service. Jul 12 00:38:51.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.971622 systemd[1]: iscsid.service: Deactivated successfully. Jul 12 00:38:51.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.971749 systemd[1]: Stopped iscsid.service. Jul 12 00:38:51.973360 systemd[1]: iscsid.socket: Deactivated successfully. Jul 12 00:38:51.973427 systemd[1]: Closed iscsid.socket. Jul 12 00:38:51.974163 systemd[1]: Stopping iscsiuio.service... Jul 12 00:38:51.975834 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 12 00:38:51.975916 systemd[1]: Stopped ignition-mount.service. Jul 12 00:38:51.976900 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 12 00:38:51.976979 systemd[1]: Stopped ignition-disks.service. Jul 12 00:38:51.978193 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 12 00:38:51.978271 systemd[1]: Stopped ignition-kargs.service. Jul 12 00:38:51.979274 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 12 00:38:51.979307 systemd[1]: Stopped ignition-setup.service. Jul 12 00:38:51.980390 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 12 00:38:51.980474 systemd[1]: Stopped iscsiuio.service. Jul 12 00:38:51.981642 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 12 00:38:51.981721 systemd[1]: Finished initrd-cleanup.service. Jul 12 00:38:51.983327 systemd[1]: Stopped target network.target. Jul 12 00:38:51.985161 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 12 00:38:51.985198 systemd[1]: Closed iscsiuio.socket. Jul 12 00:38:51.986223 systemd[1]: Stopping systemd-networkd.service... Jul 12 00:38:51.987704 systemd[1]: Stopping systemd-resolved.service... Jul 12 00:38:51.989913 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 12 00:38:52.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.996569 systemd-networkd[744]: eth0: DHCPv6 lease lost Jul 12 00:38:52.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:51.998362 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 12 00:38:51.998452 systemd[1]: Stopped systemd-networkd.service. Jul 12 00:38:52.001239 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 12 00:38:52.001326 systemd[1]: Stopped systemd-resolved.service. Jul 12 00:38:52.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.002373 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 12 00:38:52.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.002400 systemd[1]: Closed systemd-networkd.socket. Jul 12 00:38:52.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.010000 audit: BPF prog-id=9 op=UNLOAD Jul 12 00:38:52.003831 systemd[1]: Stopping network-cleanup.service... Jul 12 00:38:52.004795 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 12 00:38:52.012000 audit: BPF prog-id=6 op=UNLOAD Jul 12 00:38:52.004845 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 12 00:38:52.006100 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 12 00:38:52.006137 systemd[1]: Stopped systemd-sysctl.service. Jul 12 00:38:52.007773 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 12 00:38:52.007813 systemd[1]: Stopped systemd-modules-load.service. Jul 12 00:38:52.008533 systemd[1]: Stopping systemd-udevd.service... Jul 12 00:38:52.014006 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 12 00:38:52.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.017399 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 12 00:38:52.017509 systemd[1]: Stopped network-cleanup.service. Jul 12 00:38:52.022305 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 12 00:38:52.022432 systemd[1]: Stopped systemd-udevd.service. Jul 12 00:38:52.023695 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 12 00:38:52.027392 kernel: kauditd_printk_skb: 54 callbacks suppressed Jul 12 00:38:52.027412 kernel: audit: type=1131 audit(1752280732.023:65): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.023727 systemd[1]: Closed systemd-udevd-control.socket. Jul 12 00:38:52.025104 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 12 00:38:52.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.025132 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 12 00:38:52.032461 kernel: audit: type=1131 audit(1752280732.028:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.027958 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 12 00:38:52.037012 kernel: audit: type=1131 audit(1752280732.031:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.037031 kernel: audit: type=1131 audit(1752280732.034:68): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.028002 systemd[1]: Stopped dracut-pre-udev.service. Jul 12 00:38:52.029050 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 12 00:38:52.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.029089 systemd[1]: Stopped dracut-cmdline.service. Jul 12 00:38:52.043619 kernel: audit: type=1131 audit(1752280732.038:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.043636 kernel: audit: type=1131 audit(1752280732.041:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.032057 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 12 00:38:52.048353 kernel: audit: type=1130 audit(1752280732.043:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.048385 kernel: audit: type=1131 audit(1752280732.043:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.032095 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 12 00:38:52.035433 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 12 00:38:52.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.037522 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 12 00:38:52.053362 kernel: audit: type=1131 audit(1752280732.049:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.037575 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 12 00:38:52.038997 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 12 00:38:52.039088 systemd[1]: Stopped sysroot-boot.service. Jul 12 00:38:52.041737 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 12 00:38:52.041808 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 12 00:38:52.044349 systemd[1]: Reached target initrd-switch-root.target. Jul 12 00:38:52.048933 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 12 00:38:52.048984 systemd[1]: Stopped initrd-setup-root.service. Jul 12 00:38:52.050738 systemd[1]: Starting initrd-switch-root.service... Jul 12 00:38:52.056734 systemd[1]: Switching root. Jul 12 00:38:52.072611 systemd-journald[289]: Journal stopped Jul 12 00:38:54.071146 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Jul 12 00:38:54.071201 kernel: SELinux: Class mctp_socket not defined in policy. Jul 12 00:38:54.071214 kernel: SELinux: Class anon_inode not defined in policy. Jul 12 00:38:54.071224 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 12 00:38:54.071234 kernel: SELinux: policy capability network_peer_controls=1 Jul 12 00:38:54.071244 kernel: SELinux: policy capability open_perms=1 Jul 12 00:38:54.071253 kernel: SELinux: policy capability extended_socket_class=1 Jul 12 00:38:54.071262 kernel: SELinux: policy capability always_check_network=0 Jul 12 00:38:54.071272 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 12 00:38:54.071281 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 12 00:38:54.071299 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 12 00:38:54.071308 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 12 00:38:54.071318 kernel: audit: type=1403 audit(1752280732.139:74): auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 12 00:38:54.071328 systemd[1]: Successfully loaded SELinux policy in 33.691ms. Jul 12 00:38:54.071347 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.976ms. Jul 12 00:38:54.071359 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 12 00:38:54.071369 systemd[1]: Detected virtualization kvm. Jul 12 00:38:54.071381 systemd[1]: Detected architecture arm64. Jul 12 00:38:54.071391 systemd[1]: Detected first boot. Jul 12 00:38:54.071404 systemd[1]: Initializing machine ID from VM UUID. Jul 12 00:38:54.071415 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 12 00:38:54.071425 systemd[1]: Populated /etc with preset unit settings. Jul 12 00:38:54.071436 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:38:54.071447 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:38:54.071464 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:38:54.071474 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 12 00:38:54.071496 systemd[1]: Stopped initrd-switch-root.service. Jul 12 00:38:54.071508 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 12 00:38:54.071547 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 12 00:38:54.071559 systemd[1]: Created slice system-addon\x2drun.slice. Jul 12 00:38:54.071571 systemd[1]: Created slice system-getty.slice. Jul 12 00:38:54.071583 systemd[1]: Created slice system-modprobe.slice. Jul 12 00:38:54.071593 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 12 00:38:54.071603 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 12 00:38:54.071614 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 12 00:38:54.071624 systemd[1]: Created slice user.slice. Jul 12 00:38:54.071634 systemd[1]: Started systemd-ask-password-console.path. Jul 12 00:38:54.071644 systemd[1]: Started systemd-ask-password-wall.path. Jul 12 00:38:54.071655 systemd[1]: Set up automount boot.automount. Jul 12 00:38:54.071666 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 12 00:38:54.071677 systemd[1]: Stopped target initrd-switch-root.target. Jul 12 00:38:54.071687 systemd[1]: Stopped target initrd-fs.target. Jul 12 00:38:54.071698 systemd[1]: Stopped target initrd-root-fs.target. Jul 12 00:38:54.071708 systemd[1]: Reached target integritysetup.target. Jul 12 00:38:54.071718 systemd[1]: Reached target remote-cryptsetup.target. Jul 12 00:38:54.071728 systemd[1]: Reached target remote-fs.target. Jul 12 00:38:54.071742 systemd[1]: Reached target slices.target. Jul 12 00:38:54.071753 systemd[1]: Reached target swap.target. Jul 12 00:38:54.071764 systemd[1]: Reached target torcx.target. Jul 12 00:38:54.071774 systemd[1]: Reached target veritysetup.target. Jul 12 00:38:54.071784 systemd[1]: Listening on systemd-coredump.socket. Jul 12 00:38:54.071795 systemd[1]: Listening on systemd-initctl.socket. Jul 12 00:38:54.071806 systemd[1]: Listening on systemd-networkd.socket. Jul 12 00:38:54.071816 systemd[1]: Listening on systemd-udevd-control.socket. Jul 12 00:38:54.071827 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 12 00:38:54.071837 systemd[1]: Listening on systemd-userdbd.socket. Jul 12 00:38:54.071849 systemd[1]: Mounting dev-hugepages.mount... Jul 12 00:38:54.071859 systemd[1]: Mounting dev-mqueue.mount... Jul 12 00:38:54.071870 systemd[1]: Mounting media.mount... Jul 12 00:38:54.071880 systemd[1]: Mounting sys-kernel-debug.mount... Jul 12 00:38:54.071891 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 12 00:38:54.071901 systemd[1]: Mounting tmp.mount... Jul 12 00:38:54.071911 systemd[1]: Starting flatcar-tmpfiles.service... Jul 12 00:38:54.071921 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.071932 systemd[1]: Starting kmod-static-nodes.service... Jul 12 00:38:54.071943 systemd[1]: Starting modprobe@configfs.service... Jul 12 00:38:54.071954 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:38:54.071964 systemd[1]: Starting modprobe@drm.service... Jul 12 00:38:54.071974 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:38:54.071984 systemd[1]: Starting modprobe@fuse.service... Jul 12 00:38:54.071994 systemd[1]: Starting modprobe@loop.service... Jul 12 00:38:54.072005 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 12 00:38:54.072016 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 12 00:38:54.072027 systemd[1]: Stopped systemd-fsck-root.service. Jul 12 00:38:54.072039 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 12 00:38:54.072049 systemd[1]: Stopped systemd-fsck-usr.service. Jul 12 00:38:54.072059 systemd[1]: Stopped systemd-journald.service. Jul 12 00:38:54.072070 kernel: loop: module loaded Jul 12 00:38:54.072081 systemd[1]: Starting systemd-journald.service... Jul 12 00:38:54.072092 kernel: fuse: init (API version 7.34) Jul 12 00:38:54.072102 systemd[1]: Starting systemd-modules-load.service... Jul 12 00:38:54.072112 systemd[1]: Starting systemd-network-generator.service... Jul 12 00:38:54.072123 systemd[1]: Starting systemd-remount-fs.service... Jul 12 00:38:54.072134 systemd[1]: Starting systemd-udev-trigger.service... Jul 12 00:38:54.072144 systemd[1]: verity-setup.service: Deactivated successfully. Jul 12 00:38:54.072155 systemd[1]: Stopped verity-setup.service. Jul 12 00:38:54.072166 systemd[1]: Mounted dev-hugepages.mount. Jul 12 00:38:54.072177 systemd[1]: Mounted dev-mqueue.mount. Jul 12 00:38:54.072188 systemd[1]: Mounted media.mount. Jul 12 00:38:54.072198 systemd[1]: Mounted sys-kernel-debug.mount. Jul 12 00:38:54.072208 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 12 00:38:54.072221 systemd-journald[996]: Journal started Jul 12 00:38:54.072262 systemd-journald[996]: Runtime Journal (/run/log/journal/cd7b14c57b744ef48604545fcc6e72c4) is 6.0M, max 48.7M, 42.6M free. Jul 12 00:38:54.072293 systemd[1]: Mounted tmp.mount. Jul 12 00:38:52.139000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 12 00:38:52.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:38:52.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 12 00:38:52.216000 audit: BPF prog-id=10 op=LOAD Jul 12 00:38:52.216000 audit: BPF prog-id=10 op=UNLOAD Jul 12 00:38:52.216000 audit: BPF prog-id=11 op=LOAD Jul 12 00:38:52.216000 audit: BPF prog-id=11 op=UNLOAD Jul 12 00:38:52.253000 audit[934]: AVC avc: denied { associate } for pid=934 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 12 00:38:52.253000 audit[934]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=917 pid=934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:38:52.253000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:38:52.254000 audit[934]: AVC avc: denied { associate } for pid=934 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 12 00:38:52.254000 audit[934]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=917 pid=934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:38:52.254000 audit: CWD cwd="/" Jul 12 00:38:52.254000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:38:52.254000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:38:52.254000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 12 00:38:53.946000 audit: BPF prog-id=12 op=LOAD Jul 12 00:38:53.946000 audit: BPF prog-id=3 op=UNLOAD Jul 12 00:38:53.946000 audit: BPF prog-id=13 op=LOAD Jul 12 00:38:53.946000 audit: BPF prog-id=14 op=LOAD Jul 12 00:38:53.946000 audit: BPF prog-id=4 op=UNLOAD Jul 12 00:38:53.946000 audit: BPF prog-id=5 op=UNLOAD Jul 12 00:38:53.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:53.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:53.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:53.957000 audit: BPF prog-id=12 op=UNLOAD Jul 12 00:38:54.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.047000 audit: BPF prog-id=15 op=LOAD Jul 12 00:38:54.048000 audit: BPF prog-id=16 op=LOAD Jul 12 00:38:54.048000 audit: BPF prog-id=17 op=LOAD Jul 12 00:38:54.048000 audit: BPF prog-id=13 op=UNLOAD Jul 12 00:38:54.048000 audit: BPF prog-id=14 op=UNLOAD Jul 12 00:38:54.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.067000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 12 00:38:54.067000 audit[996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffe6ad94c0 a2=4000 a3=1 items=0 ppid=1 pid=996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:38:54.067000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 12 00:38:53.945305 systemd[1]: Queued start job for default target multi-user.target. Jul 12 00:38:52.251678 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:38:53.945317 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 12 00:38:52.252017 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:38:53.947987 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 12 00:38:52.252037 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:38:52.252066 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 12 00:38:54.073828 systemd[1]: Started systemd-journald.service. Jul 12 00:38:52.252076 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 12 00:38:52.252105 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 12 00:38:52.252117 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 12 00:38:52.252304 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 12 00:38:52.252338 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 12 00:38:52.252350 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 12 00:38:52.253059 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 12 00:38:52.253095 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 12 00:38:52.253114 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 12 00:38:52.253127 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 12 00:38:54.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:52.253144 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 12 00:38:52.253157 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:52Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 12 00:38:53.708762 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:53Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:38:53.709019 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:53Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:38:53.709111 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:53Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:38:53.709270 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:53Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 12 00:38:53.709320 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:53Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 12 00:38:53.709375 /usr/lib/systemd/system-generators/torcx-generator[934]: time="2025-07-12T00:38:53Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 12 00:38:54.075049 systemd[1]: Finished kmod-static-nodes.service. Jul 12 00:38:54.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.075928 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 12 00:38:54.076074 systemd[1]: Finished modprobe@configfs.service. Jul 12 00:38:54.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.077079 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:38:54.077250 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:38:54.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.078103 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:38:54.078446 systemd[1]: Finished modprobe@drm.service. Jul 12 00:38:54.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.079285 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:38:54.081389 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:38:54.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.082273 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 12 00:38:54.082901 systemd[1]: Finished modprobe@fuse.service. Jul 12 00:38:54.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.083783 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:38:54.083981 systemd[1]: Finished modprobe@loop.service. Jul 12 00:38:54.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.084899 systemd[1]: Finished systemd-modules-load.service. Jul 12 00:38:54.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.085824 systemd[1]: Finished systemd-network-generator.service. Jul 12 00:38:54.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.086749 systemd[1]: Finished systemd-remount-fs.service. Jul 12 00:38:54.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.087899 systemd[1]: Reached target network-pre.target. Jul 12 00:38:54.089503 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 12 00:38:54.091306 systemd[1]: Mounting sys-kernel-config.mount... Jul 12 00:38:54.091940 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 12 00:38:54.093278 systemd[1]: Starting systemd-hwdb-update.service... Jul 12 00:38:54.095225 systemd[1]: Starting systemd-journal-flush.service... Jul 12 00:38:54.095891 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:38:54.096882 systemd[1]: Starting systemd-random-seed.service... Jul 12 00:38:54.097732 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.098935 systemd[1]: Starting systemd-sysctl.service... Jul 12 00:38:54.101967 systemd[1]: Finished flatcar-tmpfiles.service. Jul 12 00:38:54.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.102962 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 12 00:38:54.104013 systemd[1]: Mounted sys-kernel-config.mount. Jul 12 00:38:54.106279 systemd[1]: Starting systemd-sysusers.service... Jul 12 00:38:54.110015 systemd-journald[996]: Time spent on flushing to /var/log/journal/cd7b14c57b744ef48604545fcc6e72c4 is 17.260ms for 990 entries. Jul 12 00:38:54.110015 systemd-journald[996]: System Journal (/var/log/journal/cd7b14c57b744ef48604545fcc6e72c4) is 8.0M, max 195.6M, 187.6M free. Jul 12 00:38:54.135184 systemd-journald[996]: Received client request to flush runtime journal. Jul 12 00:38:54.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.113087 systemd[1]: Finished systemd-random-seed.service. Jul 12 00:38:54.135695 udevadm[1036]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 12 00:38:54.114040 systemd[1]: Reached target first-boot-complete.target. Jul 12 00:38:54.117839 systemd[1]: Finished systemd-udev-trigger.service. Jul 12 00:38:54.119580 systemd[1]: Starting systemd-udev-settle.service... Jul 12 00:38:54.121017 systemd[1]: Finished systemd-sysctl.service. Jul 12 00:38:54.128847 systemd[1]: Finished systemd-sysusers.service. Jul 12 00:38:54.135949 systemd[1]: Finished systemd-journal-flush.service. Jul 12 00:38:54.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.464779 systemd[1]: Finished systemd-hwdb-update.service. Jul 12 00:38:54.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.465000 audit: BPF prog-id=18 op=LOAD Jul 12 00:38:54.465000 audit: BPF prog-id=19 op=LOAD Jul 12 00:38:54.465000 audit: BPF prog-id=7 op=UNLOAD Jul 12 00:38:54.465000 audit: BPF prog-id=8 op=UNLOAD Jul 12 00:38:54.466837 systemd[1]: Starting systemd-udevd.service... Jul 12 00:38:54.488993 systemd-udevd[1038]: Using default interface naming scheme 'v252'. Jul 12 00:38:54.503371 systemd[1]: Started systemd-udevd.service. Jul 12 00:38:54.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.504000 audit: BPF prog-id=20 op=LOAD Jul 12 00:38:54.506729 systemd[1]: Starting systemd-networkd.service... Jul 12 00:38:54.512000 audit: BPF prog-id=21 op=LOAD Jul 12 00:38:54.512000 audit: BPF prog-id=22 op=LOAD Jul 12 00:38:54.512000 audit: BPF prog-id=23 op=LOAD Jul 12 00:38:54.513383 systemd[1]: Starting systemd-userdbd.service... Jul 12 00:38:54.522123 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 12 00:38:54.550427 systemd[1]: Started systemd-userdbd.service. Jul 12 00:38:54.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.563797 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 12 00:38:54.602187 systemd-networkd[1045]: lo: Link UP Jul 12 00:38:54.602196 systemd-networkd[1045]: lo: Gained carrier Jul 12 00:38:54.602580 systemd-networkd[1045]: Enumeration completed Jul 12 00:38:54.602666 systemd[1]: Started systemd-networkd.service. Jul 12 00:38:54.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.603387 systemd-networkd[1045]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 12 00:38:54.603987 systemd[1]: Finished systemd-udev-settle.service. Jul 12 00:38:54.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.605751 systemd[1]: Starting lvm2-activation-early.service... Jul 12 00:38:54.606612 systemd-networkd[1045]: eth0: Link UP Jul 12 00:38:54.606622 systemd-networkd[1045]: eth0: Gained carrier Jul 12 00:38:54.622988 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:38:54.628632 systemd-networkd[1045]: eth0: DHCPv4 address 10.0.0.133/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 12 00:38:54.649237 systemd[1]: Finished lvm2-activation-early.service. Jul 12 00:38:54.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.650039 systemd[1]: Reached target cryptsetup.target. Jul 12 00:38:54.651654 systemd[1]: Starting lvm2-activation.service... Jul 12 00:38:54.654703 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 12 00:38:54.686223 systemd[1]: Finished lvm2-activation.service. Jul 12 00:38:54.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.687007 systemd[1]: Reached target local-fs-pre.target. Jul 12 00:38:54.687668 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 12 00:38:54.687704 systemd[1]: Reached target local-fs.target. Jul 12 00:38:54.688264 systemd[1]: Reached target machines.target. Jul 12 00:38:54.689894 systemd[1]: Starting ldconfig.service... Jul 12 00:38:54.690718 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.690772 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:54.691795 systemd[1]: Starting systemd-boot-update.service... Jul 12 00:38:54.693582 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 12 00:38:54.695475 systemd[1]: Starting systemd-machine-id-commit.service... Jul 12 00:38:54.698116 systemd[1]: Starting systemd-sysext.service... Jul 12 00:38:54.699111 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1074 (bootctl) Jul 12 00:38:54.703095 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 12 00:38:54.704313 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 12 00:38:54.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.711225 systemd[1]: Unmounting usr-share-oem.mount... Jul 12 00:38:54.714917 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 12 00:38:54.715084 systemd[1]: Unmounted usr-share-oem.mount. Jul 12 00:38:54.727034 kernel: loop0: detected capacity change from 0 to 207008 Jul 12 00:38:54.774775 systemd[1]: Finished systemd-machine-id-commit.service. Jul 12 00:38:54.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.778559 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 12 00:38:54.790611 systemd-fsck[1083]: fsck.fat 4.2 (2021-01-31) Jul 12 00:38:54.790611 systemd-fsck[1083]: /dev/vda1: 236 files, 117310/258078 clusters Jul 12 00:38:54.791598 kernel: loop1: detected capacity change from 0 to 207008 Jul 12 00:38:54.792985 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 12 00:38:54.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.798225 (sd-sysext)[1086]: Using extensions 'kubernetes'. Jul 12 00:38:54.798571 (sd-sysext)[1086]: Merged extensions into '/usr'. Jul 12 00:38:54.818507 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.819800 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:38:54.821842 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:38:54.823850 systemd[1]: Starting modprobe@loop.service... Jul 12 00:38:54.824715 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.824846 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:54.825602 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:38:54.825737 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:38:54.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.827098 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:38:54.827212 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:38:54.827000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.828703 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:38:54.828816 systemd[1]: Finished modprobe@loop.service. Jul 12 00:38:54.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:54.830151 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:38:54.830243 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.871240 ldconfig[1073]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 12 00:38:54.890671 systemd[1]: Finished ldconfig.service. Jul 12 00:38:54.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.065844 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 12 00:38:55.067440 systemd[1]: Mounting boot.mount... Jul 12 00:38:55.069217 systemd[1]: Mounting usr-share-oem.mount... Jul 12 00:38:55.075014 systemd[1]: Mounted boot.mount. Jul 12 00:38:55.075926 systemd[1]: Mounted usr-share-oem.mount. Jul 12 00:38:55.077764 systemd[1]: Finished systemd-sysext.service. Jul 12 00:38:55.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.079737 systemd[1]: Starting ensure-sysext.service... Jul 12 00:38:55.081500 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 12 00:38:55.082792 systemd[1]: Finished systemd-boot-update.service. Jul 12 00:38:55.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.086492 systemd[1]: Reloading. Jul 12 00:38:55.092846 systemd-tmpfiles[1094]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 12 00:38:55.094720 systemd-tmpfiles[1094]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 12 00:38:55.097744 systemd-tmpfiles[1094]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 12 00:38:55.123973 /usr/lib/systemd/system-generators/torcx-generator[1114]: time="2025-07-12T00:38:55Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:38:55.124006 /usr/lib/systemd/system-generators/torcx-generator[1114]: time="2025-07-12T00:38:55Z" level=info msg="torcx already run" Jul 12 00:38:55.179453 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:38:55.179484 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:38:55.194539 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:38:55.235000 audit: BPF prog-id=24 op=LOAD Jul 12 00:38:55.235000 audit: BPF prog-id=25 op=LOAD Jul 12 00:38:55.235000 audit: BPF prog-id=18 op=UNLOAD Jul 12 00:38:55.235000 audit: BPF prog-id=19 op=UNLOAD Jul 12 00:38:55.236000 audit: BPF prog-id=26 op=LOAD Jul 12 00:38:55.236000 audit: BPF prog-id=20 op=UNLOAD Jul 12 00:38:55.236000 audit: BPF prog-id=27 op=LOAD Jul 12 00:38:55.236000 audit: BPF prog-id=21 op=UNLOAD Jul 12 00:38:55.236000 audit: BPF prog-id=28 op=LOAD Jul 12 00:38:55.236000 audit: BPF prog-id=29 op=LOAD Jul 12 00:38:55.236000 audit: BPF prog-id=22 op=UNLOAD Jul 12 00:38:55.236000 audit: BPF prog-id=23 op=UNLOAD Jul 12 00:38:55.238000 audit: BPF prog-id=30 op=LOAD Jul 12 00:38:55.238000 audit: BPF prog-id=15 op=UNLOAD Jul 12 00:38:55.238000 audit: BPF prog-id=31 op=LOAD Jul 12 00:38:55.238000 audit: BPF prog-id=32 op=LOAD Jul 12 00:38:55.238000 audit: BPF prog-id=16 op=UNLOAD Jul 12 00:38:55.238000 audit: BPF prog-id=17 op=UNLOAD Jul 12 00:38:55.241294 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 12 00:38:55.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.245210 systemd[1]: Starting audit-rules.service... Jul 12 00:38:55.247105 systemd[1]: Starting clean-ca-certificates.service... Jul 12 00:38:55.252000 audit: BPF prog-id=33 op=LOAD Jul 12 00:38:55.249239 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 12 00:38:55.253745 systemd[1]: Starting systemd-resolved.service... Jul 12 00:38:55.255000 audit: BPF prog-id=34 op=LOAD Jul 12 00:38:55.257039 systemd[1]: Starting systemd-timesyncd.service... Jul 12 00:38:55.259320 systemd[1]: Starting systemd-update-utmp.service... Jul 12 00:38:55.263683 systemd[1]: Finished clean-ca-certificates.service. Jul 12 00:38:55.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.264831 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.265000 audit[1164]: SYSTEM_BOOT pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.265974 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:38:55.268104 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:38:55.269856 systemd[1]: Starting modprobe@loop.service... Jul 12 00:38:55.270502 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.270730 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:55.270830 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:38:55.271679 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:38:55.271796 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:38:55.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.272848 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:38:55.272955 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:38:55.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.274036 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:38:55.274151 systemd[1]: Finished modprobe@loop.service. Jul 12 00:38:55.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.276706 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 12 00:38:55.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.278050 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:38:55.278187 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.279384 systemd[1]: Starting systemd-update-done.service... Jul 12 00:38:55.280709 systemd[1]: Finished systemd-update-utmp.service. Jul 12 00:38:55.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.283410 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.284580 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:38:55.286321 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:38:55.289096 systemd[1]: Starting modprobe@loop.service... Jul 12 00:38:55.289750 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.289891 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:55.290012 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:38:55.290842 systemd[1]: Finished systemd-update-done.service. Jul 12 00:38:55.291846 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:38:55.291949 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:38:55.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.292889 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:38:55.292999 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:38:55.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.294116 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:38:55.294218 systemd[1]: Finished modprobe@loop.service. Jul 12 00:38:55.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.295396 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:38:55.295527 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.297619 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.298718 systemd[1]: Starting modprobe@dm_mod.service... Jul 12 00:38:55.300504 systemd[1]: Starting modprobe@drm.service... Jul 12 00:38:55.302460 systemd[1]: Starting modprobe@efi_pstore.service... Jul 12 00:38:55.304338 systemd[1]: Starting modprobe@loop.service... Jul 12 00:38:55.305150 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 12 00:38:55.305276 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:55.306425 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 12 00:38:55.307457 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 12 00:38:55.308407 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 12 00:38:55.308548 systemd[1]: Finished modprobe@dm_mod.service. Jul 12 00:38:55.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.314465 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 12 00:38:55.314604 systemd[1]: Finished modprobe@drm.service. Jul 12 00:38:55.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.315844 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 12 00:38:55.315972 systemd[1]: Finished modprobe@efi_pstore.service. Jul 12 00:38:55.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:38:55.317287 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 12 00:38:55.317401 systemd[1]: Finished modprobe@loop.service. Jul 12 00:38:55.318000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 12 00:38:55.318000 audit[1180]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffeb56a790 a2=420 a3=0 items=0 ppid=1153 pid=1180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:38:55.318000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 12 00:38:55.318464 augenrules[1180]: No rules Jul 12 00:38:55.319608 systemd[1]: Started systemd-timesyncd.service. Jul 12 00:38:54.861990 systemd-timesyncd[1158]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 12 00:38:54.881523 systemd-journald[996]: Time jumped backwards, rotating. Jul 12 00:38:54.862045 systemd-timesyncd[1158]: Initial clock synchronization to Sat 2025-07-12 00:38:54.861916 UTC. Jul 12 00:38:54.863669 systemd[1]: Finished ensure-sysext.service. Jul 12 00:38:54.864680 systemd[1]: Finished audit-rules.service. Jul 12 00:38:54.866330 systemd-resolved[1157]: Positive Trust Anchors: Jul 12 00:38:54.866337 systemd-resolved[1157]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 12 00:38:54.866362 systemd[1]: Reached target time-set.target. Jul 12 00:38:54.866364 systemd-resolved[1157]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 12 00:38:54.867332 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 12 00:38:54.867368 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.880713 systemd-resolved[1157]: Defaulting to hostname 'linux'. Jul 12 00:38:54.882286 systemd[1]: Started systemd-resolved.service. Jul 12 00:38:54.882998 systemd[1]: Reached target network.target. Jul 12 00:38:54.883561 systemd[1]: Reached target nss-lookup.target. Jul 12 00:38:54.884132 systemd[1]: Reached target sysinit.target. Jul 12 00:38:54.884756 systemd[1]: Started motdgen.path. Jul 12 00:38:54.885273 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 12 00:38:54.886208 systemd[1]: Started logrotate.timer. Jul 12 00:38:54.886855 systemd[1]: Started mdadm.timer. Jul 12 00:38:54.887340 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 12 00:38:54.887964 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 12 00:38:54.887995 systemd[1]: Reached target paths.target. Jul 12 00:38:54.888503 systemd[1]: Reached target timers.target. Jul 12 00:38:54.889327 systemd[1]: Listening on dbus.socket. Jul 12 00:38:54.890853 systemd[1]: Starting docker.socket... Jul 12 00:38:54.893825 systemd[1]: Listening on sshd.socket. Jul 12 00:38:54.894478 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:54.894945 systemd[1]: Listening on docker.socket. Jul 12 00:38:54.895632 systemd[1]: Reached target sockets.target. Jul 12 00:38:54.896192 systemd[1]: Reached target basic.target. Jul 12 00:38:54.896783 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.896813 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 12 00:38:54.897756 systemd[1]: Starting containerd.service... Jul 12 00:38:54.899269 systemd[1]: Starting dbus.service... Jul 12 00:38:54.900770 systemd[1]: Starting enable-oem-cloudinit.service... Jul 12 00:38:54.902417 systemd[1]: Starting extend-filesystems.service... Jul 12 00:38:54.903183 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 12 00:38:54.904358 systemd[1]: Starting motdgen.service... Jul 12 00:38:54.905998 systemd[1]: Starting prepare-helm.service... Jul 12 00:38:54.906886 jq[1197]: false Jul 12 00:38:54.908059 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 12 00:38:54.912691 systemd[1]: Starting sshd-keygen.service... Jul 12 00:38:54.915602 systemd[1]: Starting systemd-logind.service... Jul 12 00:38:54.916367 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 12 00:38:54.916437 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 12 00:38:54.916953 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 12 00:38:54.923905 extend-filesystems[1198]: Found loop1 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda1 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda2 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda3 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found usr Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda4 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda6 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda7 Jul 12 00:38:54.923905 extend-filesystems[1198]: Found vda9 Jul 12 00:38:54.923905 extend-filesystems[1198]: Checking size of /dev/vda9 Jul 12 00:38:54.917698 systemd[1]: Starting update-engine.service... Jul 12 00:38:54.919770 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 12 00:38:54.944436 jq[1211]: true Jul 12 00:38:54.923030 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 12 00:38:54.923206 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 12 00:38:54.929769 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 12 00:38:54.944880 jq[1221]: true Jul 12 00:38:54.929913 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 12 00:38:54.941623 systemd[1]: motdgen.service: Deactivated successfully. Jul 12 00:38:54.941775 systemd[1]: Finished motdgen.service. Jul 12 00:38:54.972596 tar[1215]: linux-arm64/LICENSE Jul 12 00:38:54.972596 tar[1215]: linux-arm64/helm Jul 12 00:38:54.972845 extend-filesystems[1198]: Resized partition /dev/vda9 Jul 12 00:38:54.975358 extend-filesystems[1234]: resize2fs 1.46.5 (30-Dec-2021) Jul 12 00:38:54.987627 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 12 00:38:54.990777 dbus-daemon[1196]: [system] SELinux support is enabled Jul 12 00:38:54.991061 systemd[1]: Started dbus.service. Jul 12 00:38:54.994009 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 12 00:38:54.994033 systemd[1]: Reached target system-config.target. Jul 12 00:38:54.995076 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 12 00:38:54.995093 systemd[1]: Reached target user-config.target. Jul 12 00:38:55.004813 systemd-logind[1208]: Watching system buttons on /dev/input/event0 (Power Button) Jul 12 00:38:55.006030 systemd-logind[1208]: New seat seat0. Jul 12 00:38:55.009350 systemd[1]: Started systemd-logind.service. Jul 12 00:38:55.013141 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 12 00:38:55.013210 update_engine[1210]: I0712 00:38:55.011680 1210 main.cc:92] Flatcar Update Engine starting Jul 12 00:38:55.027746 update_engine[1210]: I0712 00:38:55.016446 1210 update_check_scheduler.cc:74] Next update check in 9m21s Jul 12 00:38:55.016403 systemd[1]: Started update-engine.service. Jul 12 00:38:55.026603 systemd[1]: Started locksmithd.service. Jul 12 00:38:55.028265 extend-filesystems[1234]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 12 00:38:55.028265 extend-filesystems[1234]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 12 00:38:55.028265 extend-filesystems[1234]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 12 00:38:55.034307 extend-filesystems[1198]: Resized filesystem in /dev/vda9 Jul 12 00:38:55.035095 bash[1243]: Updated "/home/core/.ssh/authorized_keys" Jul 12 00:38:55.029556 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 12 00:38:55.029730 systemd[1]: Finished extend-filesystems.service. Jul 12 00:38:55.032416 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 12 00:38:55.045676 env[1222]: time="2025-07-12T00:38:55.045405124Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 12 00:38:55.065412 env[1222]: time="2025-07-12T00:38:55.065285724Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 12 00:38:55.065509 env[1222]: time="2025-07-12T00:38:55.065466444Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.066727004Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.066761484Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.066981324Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.066997724Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.067010244Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.067019524Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.067109364Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.067389604Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.067504324Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 12 00:38:55.067756 env[1222]: time="2025-07-12T00:38:55.067518804Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 12 00:38:55.067994 env[1222]: time="2025-07-12T00:38:55.067605684Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 12 00:38:55.067994 env[1222]: time="2025-07-12T00:38:55.067617564Z" level=info msg="metadata content store policy set" policy=shared Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075577444Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075608844Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075620924Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075654084Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075667164Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075680204Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.075697404Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076039044Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076057964Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076072444Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076085524Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076097244Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076206324Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 12 00:38:55.077769 env[1222]: time="2025-07-12T00:38:55.076282524Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076485324Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076508364Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076522484Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076661844Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076678004Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076689644Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076708404Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076719524Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076731884Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076742724Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076752724Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076763884Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076880084Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076898044Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078049 env[1222]: time="2025-07-12T00:38:55.076909564Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078325 env[1222]: time="2025-07-12T00:38:55.076922804Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 12 00:38:55.078325 env[1222]: time="2025-07-12T00:38:55.076936564Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 12 00:38:55.078325 env[1222]: time="2025-07-12T00:38:55.076946364Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 12 00:38:55.078325 env[1222]: time="2025-07-12T00:38:55.076962124Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 12 00:38:55.078325 env[1222]: time="2025-07-12T00:38:55.076994204Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 12 00:38:55.078415 env[1222]: time="2025-07-12T00:38:55.077182324Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 12 00:38:55.078415 env[1222]: time="2025-07-12T00:38:55.077234404Z" level=info msg="Connect containerd service" Jul 12 00:38:55.078415 env[1222]: time="2025-07-12T00:38:55.077272204Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 12 00:38:55.081356 env[1222]: time="2025-07-12T00:38:55.079029844Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083031524Z" level=info msg="Start subscribing containerd event" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083167964Z" level=info msg="Start recovering state" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083238844Z" level=info msg="Start event monitor" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083265764Z" level=info msg="Start snapshots syncer" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083280724Z" level=info msg="Start cni network conf syncer for default" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083288724Z" level=info msg="Start streaming server" Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083319644Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 12 00:38:55.083907 env[1222]: time="2025-07-12T00:38:55.083365604Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 12 00:38:55.083494 systemd[1]: Started containerd.service. Jul 12 00:38:55.087588 env[1222]: time="2025-07-12T00:38:55.085084524Z" level=info msg="containerd successfully booted in 0.040424s" Jul 12 00:38:55.111382 locksmithd[1248]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 12 00:38:55.324740 systemd-networkd[1045]: eth0: Gained IPv6LL Jul 12 00:38:55.326363 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 12 00:38:55.327418 systemd[1]: Reached target network-online.target. Jul 12 00:38:55.329594 systemd[1]: Starting kubelet.service... Jul 12 00:38:55.386482 tar[1215]: linux-arm64/README.md Jul 12 00:38:55.391090 systemd[1]: Finished prepare-helm.service. Jul 12 00:38:55.953290 systemd[1]: Started kubelet.service. Jul 12 00:38:56.055849 sshd_keygen[1217]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 12 00:38:56.072989 systemd[1]: Finished sshd-keygen.service. Jul 12 00:38:56.075043 systemd[1]: Starting issuegen.service... Jul 12 00:38:56.079436 systemd[1]: issuegen.service: Deactivated successfully. Jul 12 00:38:56.079627 systemd[1]: Finished issuegen.service. Jul 12 00:38:56.081404 systemd[1]: Starting systemd-user-sessions.service... Jul 12 00:38:56.086966 systemd[1]: Finished systemd-user-sessions.service. Jul 12 00:38:56.088868 systemd[1]: Started getty@tty1.service. Jul 12 00:38:56.090896 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 12 00:38:56.091966 systemd[1]: Reached target getty.target. Jul 12 00:38:56.092839 systemd[1]: Reached target multi-user.target. Jul 12 00:38:56.094870 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 12 00:38:56.100868 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 12 00:38:56.101011 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 12 00:38:56.102088 systemd[1]: Startup finished in 584ms (kernel) + 4.535s (initrd) + 4.457s (userspace) = 9.577s. Jul 12 00:38:56.382239 kubelet[1265]: E0712 00:38:56.382134 1265 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:38:56.384128 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:38:56.384248 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:38:59.797446 systemd[1]: Created slice system-sshd.slice. Jul 12 00:38:59.798499 systemd[1]: Started sshd@0-10.0.0.133:22-10.0.0.1:34098.service. Jul 12 00:38:59.843274 sshd[1287]: Accepted publickey for core from 10.0.0.1 port 34098 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:38:59.848922 sshd[1287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:38:59.863916 systemd[1]: Created slice user-500.slice. Jul 12 00:38:59.864939 systemd[1]: Starting user-runtime-dir@500.service... Jul 12 00:38:59.873732 systemd-logind[1208]: New session 1 of user core. Jul 12 00:38:59.877852 systemd[1]: Finished user-runtime-dir@500.service. Jul 12 00:38:59.879119 systemd[1]: Starting user@500.service... Jul 12 00:38:59.883503 (systemd)[1290]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:38:59.944055 systemd[1290]: Queued start job for default target default.target. Jul 12 00:38:59.944484 systemd[1290]: Reached target paths.target. Jul 12 00:38:59.944526 systemd[1290]: Reached target sockets.target. Jul 12 00:38:59.944540 systemd[1290]: Reached target timers.target. Jul 12 00:38:59.944550 systemd[1290]: Reached target basic.target. Jul 12 00:38:59.944609 systemd[1290]: Reached target default.target. Jul 12 00:38:59.944634 systemd[1290]: Startup finished in 55ms. Jul 12 00:38:59.944807 systemd[1]: Started user@500.service. Jul 12 00:38:59.945664 systemd[1]: Started session-1.scope. Jul 12 00:38:59.999468 systemd[1]: Started sshd@1-10.0.0.133:22-10.0.0.1:34100.service. Jul 12 00:39:00.049457 sshd[1299]: Accepted publickey for core from 10.0.0.1 port 34100 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:39:00.049915 sshd[1299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:39:00.055333 systemd[1]: Started session-2.scope. Jul 12 00:39:00.055926 systemd-logind[1208]: New session 2 of user core. Jul 12 00:39:00.125947 sshd[1299]: pam_unix(sshd:session): session closed for user core Jul 12 00:39:00.129618 systemd[1]: sshd@1-10.0.0.133:22-10.0.0.1:34100.service: Deactivated successfully. Jul 12 00:39:00.130277 systemd[1]: session-2.scope: Deactivated successfully. Jul 12 00:39:00.130938 systemd-logind[1208]: Session 2 logged out. Waiting for processes to exit. Jul 12 00:39:00.133546 systemd[1]: Started sshd@2-10.0.0.133:22-10.0.0.1:34104.service. Jul 12 00:39:00.134348 systemd-logind[1208]: Removed session 2. Jul 12 00:39:00.175123 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 34104 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:39:00.176195 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:39:00.180315 systemd[1]: Started session-3.scope. Jul 12 00:39:00.180654 systemd-logind[1208]: New session 3 of user core. Jul 12 00:39:00.230829 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 12 00:39:00.233289 systemd[1]: Started sshd@3-10.0.0.133:22-10.0.0.1:34118.service. Jul 12 00:39:00.238102 systemd[1]: sshd@2-10.0.0.133:22-10.0.0.1:34104.service: Deactivated successfully. Jul 12 00:39:00.238781 systemd[1]: session-3.scope: Deactivated successfully. Jul 12 00:39:00.239482 systemd-logind[1208]: Session 3 logged out. Waiting for processes to exit. Jul 12 00:39:00.240346 systemd-logind[1208]: Removed session 3. Jul 12 00:39:00.274951 sshd[1310]: Accepted publickey for core from 10.0.0.1 port 34118 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:39:00.276318 sshd[1310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:39:00.280338 systemd[1]: Started session-4.scope. Jul 12 00:39:00.280739 systemd-logind[1208]: New session 4 of user core. Jul 12 00:39:00.339264 sshd[1310]: pam_unix(sshd:session): session closed for user core Jul 12 00:39:00.343800 systemd[1]: Started sshd@4-10.0.0.133:22-10.0.0.1:34134.service. Jul 12 00:39:00.346470 systemd[1]: sshd@3-10.0.0.133:22-10.0.0.1:34118.service: Deactivated successfully. Jul 12 00:39:00.348779 systemd[1]: session-4.scope: Deactivated successfully. Jul 12 00:39:00.352785 systemd-logind[1208]: Session 4 logged out. Waiting for processes to exit. Jul 12 00:39:00.353535 systemd-logind[1208]: Removed session 4. Jul 12 00:39:00.392656 sshd[1316]: Accepted publickey for core from 10.0.0.1 port 34134 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:39:00.393125 sshd[1316]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:39:00.403161 systemd-logind[1208]: New session 5 of user core. Jul 12 00:39:00.403281 systemd[1]: Started session-5.scope. Jul 12 00:39:00.465180 sudo[1320]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 12 00:39:00.468884 sudo[1320]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:39:00.480520 dbus-daemon[1196]: avc: received setenforce notice (enforcing=1) Jul 12 00:39:00.480673 sudo[1320]: pam_unix(sudo:session): session closed for user root Jul 12 00:39:00.486485 sshd[1316]: pam_unix(sshd:session): session closed for user core Jul 12 00:39:00.489779 systemd[1]: Started sshd@5-10.0.0.133:22-10.0.0.1:34146.service. Jul 12 00:39:00.492708 systemd[1]: sshd@4-10.0.0.133:22-10.0.0.1:34134.service: Deactivated successfully. Jul 12 00:39:00.494271 systemd[1]: session-5.scope: Deactivated successfully. Jul 12 00:39:00.495955 systemd-logind[1208]: Session 5 logged out. Waiting for processes to exit. Jul 12 00:39:00.501054 systemd-logind[1208]: Removed session 5. Jul 12 00:39:00.549024 sshd[1323]: Accepted publickey for core from 10.0.0.1 port 34146 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:39:00.550223 sshd[1323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:39:00.556618 systemd-logind[1208]: New session 6 of user core. Jul 12 00:39:00.557114 systemd[1]: Started session-6.scope. Jul 12 00:39:00.614076 sudo[1328]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 12 00:39:00.615660 sudo[1328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:39:00.619468 sudo[1328]: pam_unix(sudo:session): session closed for user root Jul 12 00:39:00.623676 sudo[1327]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 12 00:39:00.623873 sudo[1327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:39:00.633747 systemd[1]: Stopping audit-rules.service... Jul 12 00:39:00.634000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:39:00.635689 auditctl[1331]: No rules Jul 12 00:39:00.635887 kernel: kauditd_printk_skb: 135 callbacks suppressed Jul 12 00:39:00.635911 kernel: audit: type=1305 audit(1752280740.634:199): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 12 00:39:00.634000 audit[1331]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd6f793c0 a2=420 a3=0 items=0 ppid=1 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:00.638771 systemd[1]: audit-rules.service: Deactivated successfully. Jul 12 00:39:00.638926 systemd[1]: Stopped audit-rules.service. Jul 12 00:39:00.644429 kernel: audit: type=1300 audit(1752280740.634:199): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd6f793c0 a2=420 a3=0 items=0 ppid=1 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:00.644479 kernel: audit: type=1327 audit(1752280740.634:199): proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:39:00.644516 kernel: audit: type=1131 audit(1752280740.634:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.634000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 12 00:39:00.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.643776 systemd[1]: Starting audit-rules.service... Jul 12 00:39:00.663084 augenrules[1348]: No rules Jul 12 00:39:00.663664 systemd[1]: Finished audit-rules.service. Jul 12 00:39:00.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.663000 audit[1327]: USER_END pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.664656 sudo[1327]: pam_unix(sudo:session): session closed for user root Jul 12 00:39:00.669232 kernel: audit: type=1130 audit(1752280740.661:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.669285 kernel: audit: type=1106 audit(1752280740.663:202): pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.669302 kernel: audit: type=1104 audit(1752280740.663:203): pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.663000 audit[1327]: CRED_DISP pid=1327 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.671768 sshd[1323]: pam_unix(sshd:session): session closed for user core Jul 12 00:39:00.674000 audit[1323]: USER_END pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.676831 systemd[1]: Started sshd@6-10.0.0.133:22-10.0.0.1:34160.service. Jul 12 00:39:00.679698 systemd[1]: sshd@5-10.0.0.133:22-10.0.0.1:34146.service: Deactivated successfully. Jul 12 00:39:00.680260 systemd[1]: session-6.scope: Deactivated successfully. Jul 12 00:39:00.681206 systemd-logind[1208]: Session 6 logged out. Waiting for processes to exit. Jul 12 00:39:00.682727 systemd-logind[1208]: Removed session 6. Jul 12 00:39:00.674000 audit[1323]: CRED_DISP pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.686039 kernel: audit: type=1106 audit(1752280740.674:204): pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.686071 kernel: audit: type=1104 audit(1752280740.674:205): pid=1323 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.686100 kernel: audit: type=1130 audit(1752280740.675:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.133:22-10.0.0.1:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.133:22-10.0.0.1:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.133:22-10.0.0.1:34146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.716000 audit[1353]: USER_ACCT pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.718132 sshd[1353]: Accepted publickey for core from 10.0.0.1 port 34160 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:39:00.717000 audit[1353]: CRED_ACQ pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.717000 audit[1353]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3865c0 a2=3 a3=1 items=0 ppid=1 pid=1353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:00.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:39:00.719451 sshd[1353]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:39:00.723244 systemd[1]: Started session-7.scope. Jul 12 00:39:00.723355 systemd-logind[1208]: New session 7 of user core. Jul 12 00:39:00.724000 audit[1353]: USER_START pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.726000 audit[1356]: CRED_ACQ pid=1356 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:00.774465 sudo[1357]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 12 00:39:00.772000 audit[1357]: USER_ACCT pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.773000 audit[1357]: CRED_REFR pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.774732 sudo[1357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 12 00:39:00.774000 audit[1357]: USER_START pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:00.842596 systemd[1]: Starting docker.service... Jul 12 00:39:00.927210 env[1369]: time="2025-07-12T00:39:00.927098324Z" level=info msg="Starting up" Jul 12 00:39:00.930535 env[1369]: time="2025-07-12T00:39:00.930411284Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:39:00.930535 env[1369]: time="2025-07-12T00:39:00.930525364Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:39:00.930613 env[1369]: time="2025-07-12T00:39:00.930552364Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:39:00.930613 env[1369]: time="2025-07-12T00:39:00.930562924Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:39:00.935881 env[1369]: time="2025-07-12T00:39:00.935853644Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 12 00:39:00.935881 env[1369]: time="2025-07-12T00:39:00.935879284Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 12 00:39:00.935947 env[1369]: time="2025-07-12T00:39:00.935894564Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 12 00:39:00.935947 env[1369]: time="2025-07-12T00:39:00.935904084Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 12 00:39:01.082903 env[1369]: time="2025-07-12T00:39:01.082855324Z" level=info msg="Loading containers: start." Jul 12 00:39:01.132000 audit[1403]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.132000 audit[1403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd3337e40 a2=0 a3=1 items=0 ppid=1369 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.132000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 12 00:39:01.134000 audit[1405]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.134000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdf479470 a2=0 a3=1 items=0 ppid=1369 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.134000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 12 00:39:01.136000 audit[1407]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.136000 audit[1407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc4915a10 a2=0 a3=1 items=0 ppid=1369 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:39:01.138000 audit[1409]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.138000 audit[1409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd8d2fd50 a2=0 a3=1 items=0 ppid=1369 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.138000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:39:01.140000 audit[1411]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.140000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffced70190 a2=0 a3=1 items=0 ppid=1369 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.140000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 12 00:39:01.166000 audit[1416]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.166000 audit[1416]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffffdd3d990 a2=0 a3=1 items=0 ppid=1369 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 12 00:39:01.172000 audit[1418]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.172000 audit[1418]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffda2de10 a2=0 a3=1 items=0 ppid=1369 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.172000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 12 00:39:01.174000 audit[1420]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.174000 audit[1420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff9449560 a2=0 a3=1 items=0 ppid=1369 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.174000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 12 00:39:01.175000 audit[1422]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.175000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffdcb5c00 a2=0 a3=1 items=0 ppid=1369 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.175000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:39:01.182000 audit[1426]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.182000 audit[1426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcbbc9ab0 a2=0 a3=1 items=0 ppid=1369 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.182000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:39:01.193000 audit[1427]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.193000 audit[1427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd238a400 a2=0 a3=1 items=0 ppid=1369 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.193000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:39:01.203598 kernel: Initializing XFRM netlink socket Jul 12 00:39:01.226750 env[1369]: time="2025-07-12T00:39:01.226712164Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 12 00:39:01.240000 audit[1435]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.240000 audit[1435]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffe51b6730 a2=0 a3=1 items=0 ppid=1369 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.240000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 12 00:39:01.254000 audit[1438]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.254000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc3ffa240 a2=0 a3=1 items=0 ppid=1369 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.254000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 12 00:39:01.257000 audit[1441]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.257000 audit[1441]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd692fe50 a2=0 a3=1 items=0 ppid=1369 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 12 00:39:01.259000 audit[1443]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.259000 audit[1443]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc3042370 a2=0 a3=1 items=0 ppid=1369 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.259000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 12 00:39:01.261000 audit[1445]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.261000 audit[1445]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd8eb8040 a2=0 a3=1 items=0 ppid=1369 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 12 00:39:01.263000 audit[1447]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.263000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd0f6d970 a2=0 a3=1 items=0 ppid=1369 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 12 00:39:01.264000 audit[1449]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.264000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff6a53910 a2=0 a3=1 items=0 ppid=1369 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.264000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 12 00:39:01.271000 audit[1452]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.271000 audit[1452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff03d8d80 a2=0 a3=1 items=0 ppid=1369 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.271000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 12 00:39:01.273000 audit[1454]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.273000 audit[1454]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff30bb110 a2=0 a3=1 items=0 ppid=1369 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.273000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 12 00:39:01.275000 audit[1456]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.275000 audit[1456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff00a1b70 a2=0 a3=1 items=0 ppid=1369 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.275000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 12 00:39:01.276000 audit[1458]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.276000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe807cc50 a2=0 a3=1 items=0 ppid=1369 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 12 00:39:01.278781 systemd-networkd[1045]: docker0: Link UP Jul 12 00:39:01.284000 audit[1462]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1462 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.284000 audit[1462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc9dabe70 a2=0 a3=1 items=0 ppid=1369 pid=1462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.284000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:39:01.294000 audit[1463]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:01.294000 audit[1463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc1095140 a2=0 a3=1 items=0 ppid=1369 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:01.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 12 00:39:01.296864 env[1369]: time="2025-07-12T00:39:01.296818404Z" level=info msg="Loading containers: done." Jul 12 00:39:01.328563 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1996635962-merged.mount: Deactivated successfully. Jul 12 00:39:01.334614 env[1369]: time="2025-07-12T00:39:01.334547764Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 12 00:39:01.334790 env[1369]: time="2025-07-12T00:39:01.334744244Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 12 00:39:01.334858 env[1369]: time="2025-07-12T00:39:01.334838444Z" level=info msg="Daemon has completed initialization" Jul 12 00:39:01.354717 systemd[1]: Started docker.service. Jul 12 00:39:01.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:01.359910 env[1369]: time="2025-07-12T00:39:01.359800204Z" level=info msg="API listen on /run/docker.sock" Jul 12 00:39:01.940403 env[1222]: time="2025-07-12T00:39:01.940146444Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 12 00:39:02.520687 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2237896936.mount: Deactivated successfully. Jul 12 00:39:04.095490 env[1222]: time="2025-07-12T00:39:04.095440444Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:04.097113 env[1222]: time="2025-07-12T00:39:04.097079044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:04.099260 env[1222]: time="2025-07-12T00:39:04.099229564Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:04.101339 env[1222]: time="2025-07-12T00:39:04.101307804Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:04.101803 env[1222]: time="2025-07-12T00:39:04.101772604Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a\"" Jul 12 00:39:04.102534 env[1222]: time="2025-07-12T00:39:04.102504404Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 12 00:39:05.880303 env[1222]: time="2025-07-12T00:39:05.880254884Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:05.881783 env[1222]: time="2025-07-12T00:39:05.881755844Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:05.883746 env[1222]: time="2025-07-12T00:39:05.883722884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:05.885413 env[1222]: time="2025-07-12T00:39:05.885382684Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:05.886271 env[1222]: time="2025-07-12T00:39:05.886242484Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038\"" Jul 12 00:39:05.886901 env[1222]: time="2025-07-12T00:39:05.886876084Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 12 00:39:06.635005 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 12 00:39:06.636682 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 12 00:39:06.636724 kernel: audit: type=1130 audit(1752280746.633:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:06.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:06.635177 systemd[1]: Stopped kubelet.service. Jul 12 00:39:06.636653 systemd[1]: Starting kubelet.service... Jul 12 00:39:06.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:06.639327 kernel: audit: type=1131 audit(1752280746.633:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:06.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:06.733652 systemd[1]: Started kubelet.service. Jul 12 00:39:06.736581 kernel: audit: type=1130 audit(1752280746.732:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:06.809186 kubelet[1504]: E0712 00:39:06.809125 1504 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:39:06.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:39:06.811984 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:39:06.812105 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:39:06.814596 kernel: audit: type=1131 audit(1752280746.810:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:39:07.346388 env[1222]: time="2025-07-12T00:39:07.346342444Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:07.348307 env[1222]: time="2025-07-12T00:39:07.347951044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:07.350156 env[1222]: time="2025-07-12T00:39:07.350113644Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:07.352070 env[1222]: time="2025-07-12T00:39:07.352031804Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:07.352747 env[1222]: time="2025-07-12T00:39:07.352713404Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f\"" Jul 12 00:39:07.354601 env[1222]: time="2025-07-12T00:39:07.354386444Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 12 00:39:08.711249 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2156047489.mount: Deactivated successfully. Jul 12 00:39:09.169260 env[1222]: time="2025-07-12T00:39:09.169161844Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:09.170975 env[1222]: time="2025-07-12T00:39:09.170947764Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:09.172459 env[1222]: time="2025-07-12T00:39:09.172434084Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:09.173672 env[1222]: time="2025-07-12T00:39:09.173646484Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:09.173868 env[1222]: time="2025-07-12T00:39:09.173847124Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9\"" Jul 12 00:39:09.174772 env[1222]: time="2025-07-12T00:39:09.174748964Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 12 00:39:09.686804 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2909400136.mount: Deactivated successfully. Jul 12 00:39:10.616045 env[1222]: time="2025-07-12T00:39:10.615995284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:10.617504 env[1222]: time="2025-07-12T00:39:10.617466764Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:10.619528 env[1222]: time="2025-07-12T00:39:10.619497044Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:10.621420 env[1222]: time="2025-07-12T00:39:10.621384084Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:10.622212 env[1222]: time="2025-07-12T00:39:10.622179644Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 12 00:39:10.622869 env[1222]: time="2025-07-12T00:39:10.622835524Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 12 00:39:11.055517 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2150185911.mount: Deactivated successfully. Jul 12 00:39:11.058766 env[1222]: time="2025-07-12T00:39:11.058727364Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:11.060052 env[1222]: time="2025-07-12T00:39:11.060014324Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:11.061786 env[1222]: time="2025-07-12T00:39:11.061759924Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:11.063083 env[1222]: time="2025-07-12T00:39:11.063043924Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:11.063628 env[1222]: time="2025-07-12T00:39:11.063602364Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 12 00:39:11.064202 env[1222]: time="2025-07-12T00:39:11.064175884Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 12 00:39:11.607751 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3681625121.mount: Deactivated successfully. Jul 12 00:39:14.372982 env[1222]: time="2025-07-12T00:39:14.372933644Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:14.374864 env[1222]: time="2025-07-12T00:39:14.374823364Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:14.376746 env[1222]: time="2025-07-12T00:39:14.376716884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:14.379536 env[1222]: time="2025-07-12T00:39:14.379497604Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:14.380481 env[1222]: time="2025-07-12T00:39:14.380439964Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Jul 12 00:39:17.006464 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 12 00:39:17.006651 systemd[1]: Stopped kubelet.service. Jul 12 00:39:17.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:17.008004 systemd[1]: Starting kubelet.service... Jul 12 00:39:17.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:17.011675 kernel: audit: type=1130 audit(1752280757.005:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:17.011725 kernel: audit: type=1131 audit(1752280757.005:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:17.108826 systemd[1]: Started kubelet.service. Jul 12 00:39:17.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:17.111587 kernel: audit: type=1130 audit(1752280757.107:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:17.140529 kubelet[1535]: E0712 00:39:17.140485 1535 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 12 00:39:17.142518 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 12 00:39:17.142649 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 12 00:39:17.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:39:17.145587 kernel: audit: type=1131 audit(1752280757.141:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 12 00:39:21.080591 systemd[1]: Stopped kubelet.service. Jul 12 00:39:21.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.083593 kernel: audit: type=1130 audit(1752280761.079:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.083670 kernel: audit: type=1131 audit(1752280761.081:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.084797 systemd[1]: Starting kubelet.service... Jul 12 00:39:21.124610 systemd[1]: Reloading. Jul 12 00:39:21.176696 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-07-12T00:39:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:39:21.176727 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-07-12T00:39:21Z" level=info msg="torcx already run" Jul 12 00:39:21.270010 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:39:21.270035 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:39:21.285879 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:39:21.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.339541 kernel: audit: type=1400 audit(1752280761.333:251): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.339631 kernel: audit: type=1400 audit(1752280761.333:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.339671 kernel: audit: type=1400 audit(1752280761.333:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341305 kernel: audit: type=1400 audit(1752280761.334:254): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit: BPF prog-id=40 op=LOAD Jul 12 00:39:21.336000 audit: BPF prog-id=35 op=UNLOAD Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit: BPF prog-id=41 op=LOAD Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.339000 audit: BPF prog-id=42 op=LOAD Jul 12 00:39:21.339000 audit: BPF prog-id=36 op=UNLOAD Jul 12 00:39:21.339000 audit: BPF prog-id=37 op=UNLOAD Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit: BPF prog-id=43 op=LOAD Jul 12 00:39:21.341000 audit: BPF prog-id=33 op=UNLOAD Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit: BPF prog-id=44 op=LOAD Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit: BPF prog-id=45 op=LOAD Jul 12 00:39:21.341000 audit: BPF prog-id=24 op=UNLOAD Jul 12 00:39:21.341000 audit: BPF prog-id=25 op=UNLOAD Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit: BPF prog-id=46 op=LOAD Jul 12 00:39:21.342000 audit: BPF prog-id=34 op=UNLOAD Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit: BPF prog-id=47 op=LOAD Jul 12 00:39:21.343000 audit: BPF prog-id=26 op=UNLOAD Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.343000 audit: BPF prog-id=48 op=LOAD Jul 12 00:39:21.343000 audit: BPF prog-id=38 op=UNLOAD Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit: BPF prog-id=49 op=LOAD Jul 12 00:39:21.344000 audit: BPF prog-id=27 op=UNLOAD Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit: BPF prog-id=50 op=LOAD Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.344000 audit: BPF prog-id=51 op=LOAD Jul 12 00:39:21.344000 audit: BPF prog-id=28 op=UNLOAD Jul 12 00:39:21.344000 audit: BPF prog-id=29 op=UNLOAD Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit: BPF prog-id=52 op=LOAD Jul 12 00:39:21.346000 audit: BPF prog-id=30 op=UNLOAD Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit: BPF prog-id=53 op=LOAD Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:21.346000 audit: BPF prog-id=54 op=LOAD Jul 12 00:39:21.346000 audit: BPF prog-id=31 op=UNLOAD Jul 12 00:39:21.346000 audit: BPF prog-id=32 op=UNLOAD Jul 12 00:39:21.358690 systemd[1]: Started kubelet.service. Jul 12 00:39:21.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.360472 systemd[1]: Stopping kubelet.service... Jul 12 00:39:21.360774 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:39:21.360937 systemd[1]: Stopped kubelet.service. Jul 12 00:39:21.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.362450 systemd[1]: Starting kubelet.service... Jul 12 00:39:21.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:21.459672 systemd[1]: Started kubelet.service. Jul 12 00:39:21.495041 kubelet[1615]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:39:21.495041 kubelet[1615]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 12 00:39:21.495041 kubelet[1615]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:39:21.495417 kubelet[1615]: I0712 00:39:21.495093 1615 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:39:22.328622 kubelet[1615]: I0712 00:39:22.328580 1615 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 12 00:39:22.328824 kubelet[1615]: I0712 00:39:22.328812 1615 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:39:22.329294 kubelet[1615]: I0712 00:39:22.329273 1615 server.go:954] "Client rotation is on, will bootstrap in background" Jul 12 00:39:22.367750 kubelet[1615]: E0712 00:39:22.367688 1615 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.133:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:22.367987 kubelet[1615]: I0712 00:39:22.367966 1615 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:39:22.373758 kubelet[1615]: E0712 00:39:22.373726 1615 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:39:22.373758 kubelet[1615]: I0712 00:39:22.373756 1615 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:39:22.376921 kubelet[1615]: I0712 00:39:22.376898 1615 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:39:22.378245 kubelet[1615]: I0712 00:39:22.378211 1615 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:39:22.378408 kubelet[1615]: I0712 00:39:22.378250 1615 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:39:22.378494 kubelet[1615]: I0712 00:39:22.378487 1615 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:39:22.378524 kubelet[1615]: I0712 00:39:22.378497 1615 container_manager_linux.go:304] "Creating device plugin manager" Jul 12 00:39:22.378718 kubelet[1615]: I0712 00:39:22.378707 1615 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:39:22.391963 kubelet[1615]: I0712 00:39:22.391936 1615 kubelet.go:446] "Attempting to sync node with API server" Jul 12 00:39:22.391963 kubelet[1615]: I0712 00:39:22.391965 1615 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:39:22.392065 kubelet[1615]: I0712 00:39:22.391990 1615 kubelet.go:352] "Adding apiserver pod source" Jul 12 00:39:22.392065 kubelet[1615]: I0712 00:39:22.392001 1615 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:39:22.396811 kubelet[1615]: W0712 00:39:22.396758 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:22.396947 kubelet[1615]: E0712 00:39:22.396920 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:22.397114 kubelet[1615]: W0712 00:39:22.397084 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.133:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:22.397242 kubelet[1615]: E0712 00:39:22.397223 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.133:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:22.397969 kubelet[1615]: I0712 00:39:22.397946 1615 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:39:22.398761 kubelet[1615]: I0712 00:39:22.398736 1615 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 12 00:39:22.400681 kubelet[1615]: W0712 00:39:22.400652 1615 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 12 00:39:22.401833 kubelet[1615]: I0712 00:39:22.401813 1615 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 12 00:39:22.401909 kubelet[1615]: I0712 00:39:22.401851 1615 server.go:1287] "Started kubelet" Jul 12 00:39:22.401000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:22.403859 kernel: kauditd_printk_skb: 171 callbacks suppressed Jul 12 00:39:22.403920 kernel: audit: type=1400 audit(1752280762.401:426): avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:22.401000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:22.406638 kernel: audit: type=1401 audit(1752280762.401:426): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:22.406699 kernel: audit: type=1300 audit(1752280762.401:426): arch=c00000b7 syscall=5 success=no exit=-22 a0=40003a6840 a1=400038ad98 a2=40003ddfb0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.401000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40003a6840 a1=400038ad98 a2=40003ddfb0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.407263 kubelet[1615]: E0712 00:39:22.406964 1615 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.133:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.133:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18515a11c5b62fec default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-12 00:39:22.401828844 +0000 UTC m=+0.937596881,LastTimestamp:2025-07-12 00:39:22.401828844 +0000 UTC m=+0.937596881,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 12 00:39:22.407537 kubelet[1615]: I0712 00:39:22.407359 1615 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:39:22.407908 kubelet[1615]: I0712 00:39:22.407786 1615 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:39:22.408243 kubelet[1615]: I0712 00:39:22.408226 1615 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:39:22.408348 kubelet[1615]: E0712 00:39:22.407937 1615 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:39:22.408556 kubelet[1615]: I0712 00:39:22.408540 1615 server.go:479] "Adding debug handlers to kubelet server" Jul 12 00:39:22.409149 kernel: audit: type=1327 audit(1752280762.401:426): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:22.401000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:22.411475 kubelet[1615]: I0712 00:39:22.411437 1615 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:39:22.411518 kubelet[1615]: I0712 00:39:22.411494 1615 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 12 00:39:22.411611 kubelet[1615]: I0712 00:39:22.411595 1615 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:39:22.409000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:22.412092 kubelet[1615]: I0712 00:39:22.411677 1615 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 12 00:39:22.412175 kubelet[1615]: I0712 00:39:22.412154 1615 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:39:22.413312 kubelet[1615]: I0712 00:39:22.413144 1615 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 12 00:39:22.413312 kubelet[1615]: I0712 00:39:22.413234 1615 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:39:22.409000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:22.413715 kubelet[1615]: W0712 00:39:22.413656 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:22.413715 kubelet[1615]: E0712 00:39:22.413702 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:22.413830 kubelet[1615]: E0712 00:39:22.413807 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:39:22.414161 kubelet[1615]: I0712 00:39:22.414137 1615 factory.go:221] Registration of the systemd container factory successfully Jul 12 00:39:22.414242 kubelet[1615]: I0712 00:39:22.414222 1615 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:39:22.414472 kernel: audit: type=1400 audit(1752280762.409:427): avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:22.414527 kernel: audit: type=1401 audit(1752280762.409:427): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:22.414555 kernel: audit: type=1300 audit(1752280762.409:427): arch=c00000b7 syscall=5 success=no exit=-22 a0=40005369c0 a1=400038adb0 a2=40003a69f0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.409000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40005369c0 a1=400038adb0 a2=40003a69f0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.414849 kubelet[1615]: E0712 00:39:22.414827 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.133:6443: connect: connection refused" interval="200ms" Jul 12 00:39:22.415176 kubelet[1615]: I0712 00:39:22.415149 1615 factory.go:221] Registration of the containerd container factory successfully Jul 12 00:39:22.417014 kernel: audit: type=1327 audit(1752280762.409:427): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:22.409000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:22.419302 kernel: audit: type=1325 audit(1752280762.416:428): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.416000 audit[1628]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.420553 kernel: audit: type=1300 audit(1752280762.416:428): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd451d080 a2=0 a3=1 items=0 ppid=1615 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.416000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd451d080 a2=0 a3=1 items=0 ppid=1615 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.416000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:39:22.417000 audit[1629]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.417000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff41bfa40 a2=0 a3=1 items=0 ppid=1615 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.417000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:39:22.419000 audit[1631]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.419000 audit[1631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd54315b0 a2=0 a3=1 items=0 ppid=1615 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:39:22.420000 audit[1633]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.420000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc0eac180 a2=0 a3=1 items=0 ppid=1615 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.420000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:39:22.426991 kubelet[1615]: I0712 00:39:22.426974 1615 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 12 00:39:22.427092 kubelet[1615]: I0712 00:39:22.427079 1615 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 12 00:39:22.427166 kubelet[1615]: I0712 00:39:22.427156 1615 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:39:22.429000 audit[1638]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.429000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe45dbe30 a2=0 a3=1 items=0 ppid=1615 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 12 00:39:22.431011 kubelet[1615]: I0712 00:39:22.430818 1615 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 12 00:39:22.430000 audit[1642]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.430000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb710e50 a2=0 a3=1 items=0 ppid=1615 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:39:22.430000 audit[1641]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:22.430000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe78839d0 a2=0 a3=1 items=0 ppid=1615 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.430000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 12 00:39:22.432482 kubelet[1615]: I0712 00:39:22.432458 1615 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 12 00:39:22.432482 kubelet[1615]: I0712 00:39:22.432483 1615 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 12 00:39:22.432554 kubelet[1615]: I0712 00:39:22.432504 1615 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 12 00:39:22.432554 kubelet[1615]: I0712 00:39:22.432511 1615 kubelet.go:2382] "Starting kubelet main sync loop" Jul 12 00:39:22.432554 kubelet[1615]: E0712 00:39:22.432549 1615 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 12 00:39:22.431000 audit[1644]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.431000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff589b8b0 a2=0 a3=1 items=0 ppid=1615 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:39:22.432000 audit[1647]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:22.432000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe235c060 a2=0 a3=1 items=0 ppid=1615 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:39:22.432000 audit[1646]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:22.432000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff651d280 a2=0 a3=1 items=0 ppid=1615 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 12 00:39:22.433000 audit[1649]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:22.433000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff56ef930 a2=0 a3=1 items=0 ppid=1615 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 12 00:39:22.434000 audit[1650]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:22.434000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffedc9d7c0 a2=0 a3=1 items=0 ppid=1615 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.434000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 12 00:39:22.514590 kubelet[1615]: E0712 00:39:22.514535 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:39:22.520464 kubelet[1615]: I0712 00:39:22.520438 1615 policy_none.go:49] "None policy: Start" Jul 12 00:39:22.520464 kubelet[1615]: I0712 00:39:22.520461 1615 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 12 00:39:22.520594 kubelet[1615]: I0712 00:39:22.520474 1615 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:39:22.520975 kubelet[1615]: W0712 00:39:22.520908 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:22.520975 kubelet[1615]: E0712 00:39:22.520966 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:22.525511 systemd[1]: Created slice kubepods.slice. Jul 12 00:39:22.529341 systemd[1]: Created slice kubepods-burstable.slice. Jul 12 00:39:22.531514 systemd[1]: Created slice kubepods-besteffort.slice. Jul 12 00:39:22.533585 kubelet[1615]: E0712 00:39:22.533550 1615 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 12 00:39:22.539343 kubelet[1615]: I0712 00:39:22.539322 1615 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 12 00:39:22.537000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:22.537000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:22.537000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000df2f60 a1=4000e90720 a2=4000df2f30 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:22.537000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:22.539553 kubelet[1615]: I0712 00:39:22.539403 1615 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 12 00:39:22.539722 kubelet[1615]: I0712 00:39:22.539701 1615 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:39:22.539774 kubelet[1615]: I0712 00:39:22.539720 1615 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:39:22.539974 kubelet[1615]: I0712 00:39:22.539957 1615 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:39:22.541267 kubelet[1615]: E0712 00:39:22.541244 1615 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 12 00:39:22.541342 kubelet[1615]: E0712 00:39:22.541287 1615 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 12 00:39:22.619608 kubelet[1615]: E0712 00:39:22.615488 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.133:6443: connect: connection refused" interval="400ms" Jul 12 00:39:22.641496 kubelet[1615]: I0712 00:39:22.641467 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 12 00:39:22.641979 kubelet[1615]: E0712 00:39:22.641948 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.133:6443/api/v1/nodes\": dial tcp 10.0.0.133:6443: connect: connection refused" node="localhost" Jul 12 00:39:22.741556 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 12 00:39:22.751206 kubelet[1615]: E0712 00:39:22.751172 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:22.752490 systemd[1]: Created slice kubepods-burstable-pod1fe2a95272a015579775a63971ae4dca.slice. Jul 12 00:39:22.759543 kubelet[1615]: E0712 00:39:22.759394 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:22.761263 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 12 00:39:22.762548 kubelet[1615]: E0712 00:39:22.762524 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:22.814856 kubelet[1615]: I0712 00:39:22.814823 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1fe2a95272a015579775a63971ae4dca-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1fe2a95272a015579775a63971ae4dca\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:22.814971 kubelet[1615]: I0712 00:39:22.814861 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1fe2a95272a015579775a63971ae4dca-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1fe2a95272a015579775a63971ae4dca\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:22.814971 kubelet[1615]: I0712 00:39:22.814883 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:22.814971 kubelet[1615]: I0712 00:39:22.814901 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:22.814971 kubelet[1615]: I0712 00:39:22.814917 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:22.814971 kubelet[1615]: I0712 00:39:22.814933 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:22.815093 kubelet[1615]: I0712 00:39:22.814946 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1fe2a95272a015579775a63971ae4dca-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1fe2a95272a015579775a63971ae4dca\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:22.815093 kubelet[1615]: I0712 00:39:22.814959 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:22.815093 kubelet[1615]: I0712 00:39:22.814973 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:22.844016 kubelet[1615]: I0712 00:39:22.843966 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 12 00:39:22.844466 kubelet[1615]: E0712 00:39:22.844432 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.133:6443/api/v1/nodes\": dial tcp 10.0.0.133:6443: connect: connection refused" node="localhost" Jul 12 00:39:23.016843 kubelet[1615]: E0712 00:39:23.016811 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.133:6443: connect: connection refused" interval="800ms" Jul 12 00:39:23.052076 kubelet[1615]: E0712 00:39:23.052044 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:23.052761 env[1222]: time="2025-07-12T00:39:23.052704484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 12 00:39:23.059899 kubelet[1615]: E0712 00:39:23.059873 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:23.060558 env[1222]: time="2025-07-12T00:39:23.060512684Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1fe2a95272a015579775a63971ae4dca,Namespace:kube-system,Attempt:0,}" Jul 12 00:39:23.063185 kubelet[1615]: E0712 00:39:23.063167 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:23.063832 env[1222]: time="2025-07-12T00:39:23.063593364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 12 00:39:23.246248 kubelet[1615]: I0712 00:39:23.246201 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 12 00:39:23.246620 kubelet[1615]: E0712 00:39:23.246593 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.133:6443/api/v1/nodes\": dial tcp 10.0.0.133:6443: connect: connection refused" node="localhost" Jul 12 00:39:23.400232 kubelet[1615]: W0712 00:39:23.400117 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.133:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:23.400232 kubelet[1615]: E0712 00:39:23.400182 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.133:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:23.437723 kubelet[1615]: W0712 00:39:23.437659 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:23.437723 kubelet[1615]: E0712 00:39:23.437726 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.133:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:23.565599 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1902109093.mount: Deactivated successfully. Jul 12 00:39:23.568088 env[1222]: time="2025-07-12T00:39:23.568044124Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.569433 env[1222]: time="2025-07-12T00:39:23.569399844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.571853 env[1222]: time="2025-07-12T00:39:23.571823524Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.572800 env[1222]: time="2025-07-12T00:39:23.572773924Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.573672 env[1222]: time="2025-07-12T00:39:23.573646604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.575743 env[1222]: time="2025-07-12T00:39:23.575718484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.576468 env[1222]: time="2025-07-12T00:39:23.576432284Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.579271 env[1222]: time="2025-07-12T00:39:23.579235604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.582361 env[1222]: time="2025-07-12T00:39:23.582336484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.584648 env[1222]: time="2025-07-12T00:39:23.584615284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.585432 env[1222]: time="2025-07-12T00:39:23.585399884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.586228 env[1222]: time="2025-07-12T00:39:23.586203364Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:23.610307 env[1222]: time="2025-07-12T00:39:23.610245324Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:23.610443 env[1222]: time="2025-07-12T00:39:23.610282884Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:23.610443 env[1222]: time="2025-07-12T00:39:23.610292844Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:23.610589 env[1222]: time="2025-07-12T00:39:23.610547204Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/088ec0f9c23ccf907a204e3f34dc17a394c8db7eb992b295cdea19eff6ec20da pid=1673 runtime=io.containerd.runc.v2 Jul 12 00:39:23.611123 env[1222]: time="2025-07-12T00:39:23.610928604Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:23.611123 env[1222]: time="2025-07-12T00:39:23.610968564Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:23.611123 env[1222]: time="2025-07-12T00:39:23.610981324Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:23.611257 env[1222]: time="2025-07-12T00:39:23.611117484Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d95a4493f9196089257d8cd83ae0576640f464bee9e395ef8b286675456b523f pid=1672 runtime=io.containerd.runc.v2 Jul 12 00:39:23.611307 env[1222]: time="2025-07-12T00:39:23.610795964Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:23.611307 env[1222]: time="2025-07-12T00:39:23.610847684Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:23.611307 env[1222]: time="2025-07-12T00:39:23.610858364Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:23.611307 env[1222]: time="2025-07-12T00:39:23.611024524Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/efb66f607115007207ff454db7b6b9207f3f2e7cb9b6659595d2e0cd26e822f9 pid=1676 runtime=io.containerd.runc.v2 Jul 12 00:39:23.625717 systemd[1]: Started cri-containerd-d95a4493f9196089257d8cd83ae0576640f464bee9e395ef8b286675456b523f.scope. Jul 12 00:39:23.628795 systemd[1]: Started cri-containerd-efb66f607115007207ff454db7b6b9207f3f2e7cb9b6659595d2e0cd26e822f9.scope. Jul 12 00:39:23.639409 systemd[1]: Started cri-containerd-088ec0f9c23ccf907a204e3f34dc17a394c8db7eb992b295cdea19eff6ec20da.scope. Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.657000 audit: BPF prog-id=55 op=LOAD Jul 12 00:39:23.658000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.658000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1676 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623636663630373131353030373230376666343534646237623662 Jul 12 00:39:23.658000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.658000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1676 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623636663630373131353030373230376666343534646237623662 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit: BPF prog-id=56 op=LOAD Jul 12 00:39:23.659000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1676 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623636663630373131353030373230376666343534646237623662 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.659000 audit: BPF prog-id=57 op=LOAD Jul 12 00:39:23.659000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1676 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623636663630373131353030373230376666343534646237623662 Jul 12 00:39:23.660000 audit: BPF prog-id=57 op=UNLOAD Jul 12 00:39:23.660000 audit: BPF prog-id=56 op=UNLOAD Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.660000 audit: BPF prog-id=58 op=LOAD Jul 12 00:39:23.660000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1676 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623636663630373131353030373230376666343534646237623662 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.662000 audit: BPF prog-id=59 op=LOAD Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439356134343933663931393630383932353764386364383361653035 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439356134343933663931393630383932353764386364383361653035 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit: BPF prog-id=60 op=LOAD Jul 12 00:39:23.663000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439356134343933663931393630383932353764386364383361653035 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit: BPF prog-id=61 op=LOAD Jul 12 00:39:23.663000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439356134343933663931393630383932353764386364383361653035 Jul 12 00:39:23.663000 audit: BPF prog-id=61 op=UNLOAD Jul 12 00:39:23.663000 audit: BPF prog-id=60 op=UNLOAD Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { perfmon } for pid=1704 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit[1704]: AVC avc: denied { bpf } for pid=1704 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.663000 audit: BPF prog-id=62 op=LOAD Jul 12 00:39:23.663000 audit[1704]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1672 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439356134343933663931393630383932353764386364383361653035 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit: BPF prog-id=63 op=LOAD Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1673 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386563306639633233636366393037613230346533663334646331 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1673 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386563306639633233636366393037613230346533663334646331 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit: BPF prog-id=64 op=LOAD Jul 12 00:39:23.668000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1673 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386563306639633233636366393037613230346533663334646331 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.668000 audit: BPF prog-id=65 op=LOAD Jul 12 00:39:23.668000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1673 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386563306639633233636366393037613230346533663334646331 Jul 12 00:39:23.669000 audit: BPF prog-id=65 op=UNLOAD Jul 12 00:39:23.669000 audit: BPF prog-id=64 op=UNLOAD Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.669000 audit: BPF prog-id=66 op=LOAD Jul 12 00:39:23.669000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1673 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038386563306639633233636366393037613230346533663334646331 Jul 12 00:39:23.689008 env[1222]: time="2025-07-12T00:39:23.688963324Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"d95a4493f9196089257d8cd83ae0576640f464bee9e395ef8b286675456b523f\"" Jul 12 00:39:23.690080 kubelet[1615]: E0712 00:39:23.690049 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:23.692159 env[1222]: time="2025-07-12T00:39:23.692123884Z" level=info msg="CreateContainer within sandbox \"d95a4493f9196089257d8cd83ae0576640f464bee9e395ef8b286675456b523f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 12 00:39:23.695548 env[1222]: time="2025-07-12T00:39:23.695517084Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1fe2a95272a015579775a63971ae4dca,Namespace:kube-system,Attempt:0,} returns sandbox id \"efb66f607115007207ff454db7b6b9207f3f2e7cb9b6659595d2e0cd26e822f9\"" Jul 12 00:39:23.695881 env[1222]: time="2025-07-12T00:39:23.695818404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"088ec0f9c23ccf907a204e3f34dc17a394c8db7eb992b295cdea19eff6ec20da\"" Jul 12 00:39:23.697461 kubelet[1615]: E0712 00:39:23.697418 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:23.697669 kubelet[1615]: E0712 00:39:23.697640 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:23.700741 env[1222]: time="2025-07-12T00:39:23.700675444Z" level=info msg="CreateContainer within sandbox \"efb66f607115007207ff454db7b6b9207f3f2e7cb9b6659595d2e0cd26e822f9\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 12 00:39:23.700953 env[1222]: time="2025-07-12T00:39:23.700925324Z" level=info msg="CreateContainer within sandbox \"088ec0f9c23ccf907a204e3f34dc17a394c8db7eb992b295cdea19eff6ec20da\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 12 00:39:23.706133 env[1222]: time="2025-07-12T00:39:23.706092244Z" level=info msg="CreateContainer within sandbox \"d95a4493f9196089257d8cd83ae0576640f464bee9e395ef8b286675456b523f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"88dac93fc99fd796df3183cefbf6c1f60c73112b63d124e6fed5cfb5fa14b718\"" Jul 12 00:39:23.706710 env[1222]: time="2025-07-12T00:39:23.706683564Z" level=info msg="StartContainer for \"88dac93fc99fd796df3183cefbf6c1f60c73112b63d124e6fed5cfb5fa14b718\"" Jul 12 00:39:23.716322 env[1222]: time="2025-07-12T00:39:23.716272564Z" level=info msg="CreateContainer within sandbox \"efb66f607115007207ff454db7b6b9207f3f2e7cb9b6659595d2e0cd26e822f9\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c2d68feb1a377fd4107aeb57c8fefd42ffb8370643d4213738bc3eeadfe465dc\"" Jul 12 00:39:23.716827 env[1222]: time="2025-07-12T00:39:23.716792204Z" level=info msg="StartContainer for \"c2d68feb1a377fd4107aeb57c8fefd42ffb8370643d4213738bc3eeadfe465dc\"" Jul 12 00:39:23.720275 env[1222]: time="2025-07-12T00:39:23.720240724Z" level=info msg="CreateContainer within sandbox \"088ec0f9c23ccf907a204e3f34dc17a394c8db7eb992b295cdea19eff6ec20da\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"95407397d34854cc1e96f8c181b3d00720010543da90a93cfa20a3b3a3472c44\"" Jul 12 00:39:23.720920 env[1222]: time="2025-07-12T00:39:23.720890004Z" level=info msg="StartContainer for \"95407397d34854cc1e96f8c181b3d00720010543da90a93cfa20a3b3a3472c44\"" Jul 12 00:39:23.727406 systemd[1]: Started cri-containerd-88dac93fc99fd796df3183cefbf6c1f60c73112b63d124e6fed5cfb5fa14b718.scope. Jul 12 00:39:23.736479 systemd[1]: Started cri-containerd-95407397d34854cc1e96f8c181b3d00720010543da90a93cfa20a3b3a3472c44.scope. Jul 12 00:39:23.743319 systemd[1]: Started cri-containerd-c2d68feb1a377fd4107aeb57c8fefd42ffb8370643d4213738bc3eeadfe465dc.scope. Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit: BPF prog-id=67 op=LOAD Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1672 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838646163393366633939666437393664663331383363656662663663 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1672 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838646163393366633939666437393664663331383363656662663663 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit: BPF prog-id=68 op=LOAD Jul 12 00:39:23.765000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1672 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838646163393366633939666437393664663331383363656662663663 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit: BPF prog-id=69 op=LOAD Jul 12 00:39:23.765000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1672 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838646163393366633939666437393664663331383363656662663663 Jul 12 00:39:23.765000 audit: BPF prog-id=69 op=UNLOAD Jul 12 00:39:23.765000 audit: BPF prog-id=68 op=UNLOAD Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.765000 audit: BPF prog-id=70 op=LOAD Jul 12 00:39:23.765000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1672 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838646163393366633939666437393664663331383363656662663663 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.768000 audit: BPF prog-id=71 op=LOAD Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343037333937643334383534636331653936663863313831623364 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343037333937643334383534636331653936663863313831623364 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit: BPF prog-id=72 op=LOAD Jul 12 00:39:23.770000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343037333937643334383534636331653936663863313831623364 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit: BPF prog-id=73 op=LOAD Jul 12 00:39:23.770000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343037333937643334383534636331653936663863313831623364 Jul 12 00:39:23.770000 audit: BPF prog-id=73 op=UNLOAD Jul 12 00:39:23.770000 audit: BPF prog-id=72 op=UNLOAD Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { perfmon } for pid=1816 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit[1816]: AVC avc: denied { bpf } for pid=1816 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.770000 audit: BPF prog-id=74 op=LOAD Jul 12 00:39:23.770000 audit[1816]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1673 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.770000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935343037333937643334383534636331653936663863313831623364 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.778000 audit: BPF prog-id=75 op=LOAD Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1676 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643638666562316133373766643431303761656235376338666566 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1676 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643638666562316133373766643431303761656235376338666566 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.779000 audit: BPF prog-id=76 op=LOAD Jul 12 00:39:23.779000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1676 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643638666562316133373766643431303761656235376338666566 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.780000 audit: BPF prog-id=77 op=LOAD Jul 12 00:39:23.780000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1676 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643638666562316133373766643431303761656235376338666566 Jul 12 00:39:23.780000 audit: BPF prog-id=77 op=UNLOAD Jul 12 00:39:23.780000 audit: BPF prog-id=76 op=UNLOAD Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { perfmon } for pid=1808 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit[1808]: AVC avc: denied { bpf } for pid=1808 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:23.781000 audit: BPF prog-id=78 op=LOAD Jul 12 00:39:23.781000 audit[1808]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1676 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:23.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643638666562316133373766643431303761656235376338666566 Jul 12 00:39:23.800515 env[1222]: time="2025-07-12T00:39:23.799703044Z" level=info msg="StartContainer for \"95407397d34854cc1e96f8c181b3d00720010543da90a93cfa20a3b3a3472c44\" returns successfully" Jul 12 00:39:23.800515 env[1222]: time="2025-07-12T00:39:23.800072204Z" level=info msg="StartContainer for \"88dac93fc99fd796df3183cefbf6c1f60c73112b63d124e6fed5cfb5fa14b718\" returns successfully" Jul 12 00:39:23.826995 kubelet[1615]: E0712 00:39:23.817727 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.133:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.133:6443: connect: connection refused" interval="1.6s" Jul 12 00:39:23.827315 env[1222]: time="2025-07-12T00:39:23.827271564Z" level=info msg="StartContainer for \"c2d68feb1a377fd4107aeb57c8fefd42ffb8370643d4213738bc3eeadfe465dc\" returns successfully" Jul 12 00:39:23.846681 kubelet[1615]: W0712 00:39:23.841159 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:23.846681 kubelet[1615]: E0712 00:39:23.841234 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.133:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:23.938772 kubelet[1615]: W0712 00:39:23.938644 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.133:6443: connect: connection refused Jul 12 00:39:23.938772 kubelet[1615]: E0712 00:39:23.938713 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.133:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.133:6443: connect: connection refused" logger="UnhandledError" Jul 12 00:39:24.049155 kubelet[1615]: I0712 00:39:24.048800 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 12 00:39:24.049155 kubelet[1615]: E0712 00:39:24.049117 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.133:6443/api/v1/nodes\": dial tcp 10.0.0.133:6443: connect: connection refused" node="localhost" Jul 12 00:39:24.438496 kubelet[1615]: E0712 00:39:24.438459 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:24.438639 kubelet[1615]: E0712 00:39:24.438606 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:24.440248 kubelet[1615]: E0712 00:39:24.440222 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:24.440338 kubelet[1615]: E0712 00:39:24.440310 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:24.441777 kubelet[1615]: E0712 00:39:24.441755 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:24.441881 kubelet[1615]: E0712 00:39:24.441864 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:25.320000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.320000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40044d6390 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:39:25.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:39:25.320000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7307 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.320000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40044d6420 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:39:25.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:39:25.327000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7313 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.327000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400582d7d0 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:39:25.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:39:25.332000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.332000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4005aac040 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:39:25.332000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:39:25.355000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.355000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=4005aace40 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:39:25.355000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:39:25.356000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.356000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40044d7320 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:39:25.356000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:39:25.432451 kubelet[1615]: E0712 00:39:25.432405 1615 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 12 00:39:25.444219 kubelet[1615]: E0712 00:39:25.444187 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:25.445342 kubelet[1615]: E0712 00:39:25.444718 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:25.445342 kubelet[1615]: E0712 00:39:25.445168 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:25.445342 kubelet[1615]: E0712 00:39:25.445242 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 12 00:39:25.445342 kubelet[1615]: E0712 00:39:25.445284 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:25.445342 kubelet[1615]: E0712 00:39:25.445343 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:25.600000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.600000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400081c720 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:25.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:25.600000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:25.600000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003d86e0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:25.600000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:25.650517 kubelet[1615]: I0712 00:39:25.650477 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 12 00:39:25.658643 kubelet[1615]: I0712 00:39:25.658600 1615 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 12 00:39:25.658643 kubelet[1615]: E0712 00:39:25.658639 1615 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 12 00:39:25.668733 kubelet[1615]: E0712 00:39:25.668703 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:39:25.769019 kubelet[1615]: E0712 00:39:25.768982 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:39:25.869764 kubelet[1615]: E0712 00:39:25.869657 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:39:26.014826 kubelet[1615]: I0712 00:39:26.014789 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:26.024359 kubelet[1615]: E0712 00:39:26.024313 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:26.024359 kubelet[1615]: I0712 00:39:26.024352 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:26.026278 kubelet[1615]: E0712 00:39:26.026256 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:26.026278 kubelet[1615]: I0712 00:39:26.026275 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:26.027854 kubelet[1615]: E0712 00:39:26.027831 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:26.397681 kubelet[1615]: I0712 00:39:26.397637 1615 apiserver.go:52] "Watching apiserver" Jul 12 00:39:26.414081 kubelet[1615]: I0712 00:39:26.414022 1615 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 12 00:39:26.803351 kubelet[1615]: I0712 00:39:26.803317 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:26.839182 kubelet[1615]: E0712 00:39:26.839140 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:27.417825 systemd[1]: Reloading. Jul 12 00:39:27.446609 kubelet[1615]: E0712 00:39:27.446563 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:27.470174 /usr/lib/systemd/system-generators/torcx-generator[1916]: time="2025-07-12T00:39:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 12 00:39:27.470203 /usr/lib/systemd/system-generators/torcx-generator[1916]: time="2025-07-12T00:39:27Z" level=info msg="torcx already run" Jul 12 00:39:27.529878 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 12 00:39:27.529900 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 12 00:39:27.545806 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606694 kernel: kauditd_printk_skb: 404 callbacks suppressed Jul 12 00:39:27.606750 kernel: audit: type=1400 audit(1752280767.604:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610027 kernel: audit: type=1400 audit(1752280767.604:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610065 kernel: audit: type=1400 audit(1752280767.604:559): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.613351 kernel: audit: type=1400 audit(1752280767.604:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.613412 kernel: audit: type=1400 audit(1752280767.604:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.615032 kernel: audit: type=1400 audit(1752280767.604:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.616757 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.618964 kernel: audit: type=1400 audit(1752280767.604:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.618994 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 12 00:39:27.619012 kernel: audit: type=1400 audit(1752280767.604:564): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit: BPF prog-id=79 op=LOAD Jul 12 00:39:27.605000 audit: BPF prog-id=63 op=UNLOAD Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit: BPF prog-id=80 op=LOAD Jul 12 00:39:27.606000 audit: BPF prog-id=40 op=UNLOAD Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit: BPF prog-id=81 op=LOAD Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.608000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit: BPF prog-id=82 op=LOAD Jul 12 00:39:27.610000 audit: BPF prog-id=41 op=UNLOAD Jul 12 00:39:27.610000 audit: BPF prog-id=42 op=UNLOAD Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.611000 audit: BPF prog-id=83 op=LOAD Jul 12 00:39:27.611000 audit: BPF prog-id=43 op=UNLOAD Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.613000 audit: BPF prog-id=84 op=LOAD Jul 12 00:39:27.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit: BPF prog-id=85 op=LOAD Jul 12 00:39:27.619000 audit: BPF prog-id=44 op=UNLOAD Jul 12 00:39:27.619000 audit: BPF prog-id=45 op=UNLOAD Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.620000 audit: BPF prog-id=86 op=LOAD Jul 12 00:39:27.620000 audit: BPF prog-id=46 op=UNLOAD Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit: BPF prog-id=87 op=LOAD Jul 12 00:39:27.622000 audit: BPF prog-id=67 op=UNLOAD Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.622000 audit: BPF prog-id=88 op=LOAD Jul 12 00:39:27.623000 audit: BPF prog-id=47 op=UNLOAD Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.623000 audit: BPF prog-id=89 op=LOAD Jul 12 00:39:27.623000 audit: BPF prog-id=48 op=UNLOAD Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit: BPF prog-id=90 op=LOAD Jul 12 00:39:27.624000 audit: BPF prog-id=49 op=UNLOAD Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit: BPF prog-id=91 op=LOAD Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit: BPF prog-id=92 op=LOAD Jul 12 00:39:27.625000 audit: BPF prog-id=50 op=UNLOAD Jul 12 00:39:27.625000 audit: BPF prog-id=51 op=UNLOAD Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.625000 audit: BPF prog-id=93 op=LOAD Jul 12 00:39:27.625000 audit: BPF prog-id=55 op=UNLOAD Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.626000 audit: BPF prog-id=94 op=LOAD Jul 12 00:39:27.626000 audit: BPF prog-id=75 op=UNLOAD Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.628000 audit: BPF prog-id=95 op=LOAD Jul 12 00:39:27.628000 audit: BPF prog-id=71 op=UNLOAD Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit: BPF prog-id=96 op=LOAD Jul 12 00:39:27.629000 audit: BPF prog-id=52 op=UNLOAD Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit: BPF prog-id=97 op=LOAD Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.629000 audit: BPF prog-id=98 op=LOAD Jul 12 00:39:27.629000 audit: BPF prog-id=53 op=UNLOAD Jul 12 00:39:27.629000 audit: BPF prog-id=54 op=UNLOAD Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.630000 audit: BPF prog-id=99 op=LOAD Jul 12 00:39:27.630000 audit: BPF prog-id=59 op=UNLOAD Jul 12 00:39:27.652546 systemd[1]: Stopping kubelet.service... Jul 12 00:39:27.673880 systemd[1]: kubelet.service: Deactivated successfully. Jul 12 00:39:27.674099 systemd[1]: Stopped kubelet.service. Jul 12 00:39:27.674155 systemd[1]: kubelet.service: Consumed 1.300s CPU time. Jul 12 00:39:27.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:27.678131 systemd[1]: Starting kubelet.service... Jul 12 00:39:27.779922 systemd[1]: Started kubelet.service. Jul 12 00:39:27.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:27.814184 kubelet[1958]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:39:27.814184 kubelet[1958]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 12 00:39:27.814184 kubelet[1958]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 12 00:39:27.814546 kubelet[1958]: I0712 00:39:27.814226 1958 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 12 00:39:27.822283 kubelet[1958]: I0712 00:39:27.822246 1958 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 12 00:39:27.822401 kubelet[1958]: I0712 00:39:27.822390 1958 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 12 00:39:27.824640 kubelet[1958]: I0712 00:39:27.823000 1958 server.go:954] "Client rotation is on, will bootstrap in background" Jul 12 00:39:27.827031 kubelet[1958]: I0712 00:39:27.827003 1958 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 12 00:39:27.830243 kubelet[1958]: I0712 00:39:27.830209 1958 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 12 00:39:27.832912 kubelet[1958]: E0712 00:39:27.832890 1958 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 12 00:39:27.833022 kubelet[1958]: I0712 00:39:27.833008 1958 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 12 00:39:27.835572 kubelet[1958]: I0712 00:39:27.835538 1958 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 12 00:39:27.835753 kubelet[1958]: I0712 00:39:27.835729 1958 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 12 00:39:27.835910 kubelet[1958]: I0712 00:39:27.835754 1958 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 12 00:39:27.835990 kubelet[1958]: I0712 00:39:27.835913 1958 topology_manager.go:138] "Creating topology manager with none policy" Jul 12 00:39:27.835990 kubelet[1958]: I0712 00:39:27.835922 1958 container_manager_linux.go:304] "Creating device plugin manager" Jul 12 00:39:27.835990 kubelet[1958]: I0712 00:39:27.835960 1958 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:39:27.836091 kubelet[1958]: I0712 00:39:27.836081 1958 kubelet.go:446] "Attempting to sync node with API server" Jul 12 00:39:27.836121 kubelet[1958]: I0712 00:39:27.836095 1958 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 12 00:39:27.836121 kubelet[1958]: I0712 00:39:27.836113 1958 kubelet.go:352] "Adding apiserver pod source" Jul 12 00:39:27.836180 kubelet[1958]: I0712 00:39:27.836122 1958 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 12 00:39:27.836743 kubelet[1958]: I0712 00:39:27.836712 1958 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 12 00:39:27.837726 kubelet[1958]: I0712 00:39:27.837709 1958 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 12 00:39:27.838184 kubelet[1958]: I0712 00:39:27.838168 1958 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 12 00:39:27.838716 kubelet[1958]: I0712 00:39:27.838702 1958 server.go:1287] "Started kubelet" Jul 12 00:39:27.839210 kubelet[1958]: I0712 00:39:27.839187 1958 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 12 00:39:27.841137 kubelet[1958]: I0712 00:39:27.841091 1958 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 12 00:39:27.841345 kubelet[1958]: I0712 00:39:27.841315 1958 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 12 00:39:27.841394 kubelet[1958]: I0712 00:39:27.841366 1958 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 12 00:39:27.839000 audit[1958]: AVC avc: denied { mac_admin } for pid=1958 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.839000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:27.839000 audit[1958]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006244b0 a1=4000c419e0 a2=4000624480 a3=25 items=0 ppid=1 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:27.839000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:27.839000 audit[1958]: AVC avc: denied { mac_admin } for pid=1958 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.839000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:27.839000 audit[1958]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d8f060 a1=4000c419f8 a2=4000624810 a3=25 items=0 ppid=1 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:27.839000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:27.849519 kubelet[1958]: I0712 00:39:27.848870 1958 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 12 00:39:27.849519 kubelet[1958]: I0712 00:39:27.849211 1958 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 12 00:39:27.851448 kubelet[1958]: I0712 00:39:27.850885 1958 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 12 00:39:27.852513 kubelet[1958]: I0712 00:39:27.852478 1958 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 12 00:39:27.852767 kubelet[1958]: E0712 00:39:27.852740 1958 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 12 00:39:27.854816 kubelet[1958]: I0712 00:39:27.854787 1958 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 12 00:39:27.855281 kubelet[1958]: I0712 00:39:27.855257 1958 reconciler.go:26] "Reconciler: start to sync state" Jul 12 00:39:27.855420 kubelet[1958]: I0712 00:39:27.855388 1958 server.go:479] "Adding debug handlers to kubelet server" Jul 12 00:39:27.856741 kubelet[1958]: I0712 00:39:27.856718 1958 factory.go:221] Registration of the systemd container factory successfully Jul 12 00:39:27.856852 kubelet[1958]: I0712 00:39:27.856805 1958 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 12 00:39:27.857870 kubelet[1958]: I0712 00:39:27.857849 1958 factory.go:221] Registration of the containerd container factory successfully Jul 12 00:39:27.863674 kubelet[1958]: I0712 00:39:27.863626 1958 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 12 00:39:27.863972 kubelet[1958]: E0712 00:39:27.863942 1958 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 12 00:39:27.864815 kubelet[1958]: I0712 00:39:27.864780 1958 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 12 00:39:27.864815 kubelet[1958]: I0712 00:39:27.864802 1958 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 12 00:39:27.864894 kubelet[1958]: I0712 00:39:27.864834 1958 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 12 00:39:27.864894 kubelet[1958]: I0712 00:39:27.864842 1958 kubelet.go:2382] "Starting kubelet main sync loop" Jul 12 00:39:27.864894 kubelet[1958]: E0712 00:39:27.864880 1958 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 12 00:39:27.888471 kubelet[1958]: I0712 00:39:27.888448 1958 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 12 00:39:27.888471 kubelet[1958]: I0712 00:39:27.888466 1958 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 12 00:39:27.888625 kubelet[1958]: I0712 00:39:27.888492 1958 state_mem.go:36] "Initialized new in-memory state store" Jul 12 00:39:27.888948 kubelet[1958]: I0712 00:39:27.888932 1958 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 12 00:39:27.888979 kubelet[1958]: I0712 00:39:27.888948 1958 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 12 00:39:27.888979 kubelet[1958]: I0712 00:39:27.888966 1958 policy_none.go:49] "None policy: Start" Jul 12 00:39:27.888979 kubelet[1958]: I0712 00:39:27.888976 1958 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 12 00:39:27.889046 kubelet[1958]: I0712 00:39:27.888987 1958 state_mem.go:35] "Initializing new in-memory state store" Jul 12 00:39:27.889099 kubelet[1958]: I0712 00:39:27.889088 1958 state_mem.go:75] "Updated machine memory state" Jul 12 00:39:27.892465 kubelet[1958]: I0712 00:39:27.892449 1958 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 12 00:39:27.890000 audit[1958]: AVC avc: denied { mac_admin } for pid=1958 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:27.890000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 12 00:39:27.890000 audit[1958]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000055290 a1=4000ed4918 a2=4000055260 a3=25 items=0 ppid=1 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:27.890000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 12 00:39:27.892673 kubelet[1958]: I0712 00:39:27.892525 1958 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 12 00:39:27.892699 kubelet[1958]: I0712 00:39:27.892672 1958 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 12 00:39:27.892722 kubelet[1958]: I0712 00:39:27.892684 1958 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 12 00:39:27.893084 kubelet[1958]: I0712 00:39:27.892946 1958 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 12 00:39:27.894642 kubelet[1958]: E0712 00:39:27.894623 1958 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 12 00:39:27.966419 kubelet[1958]: I0712 00:39:27.966306 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:27.966892 kubelet[1958]: I0712 00:39:27.966867 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:27.967196 kubelet[1958]: I0712 00:39:27.967176 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:27.972447 kubelet[1958]: E0712 00:39:27.972422 1958 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:27.996238 kubelet[1958]: I0712 00:39:27.996219 1958 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 12 00:39:28.002387 kubelet[1958]: I0712 00:39:28.002365 1958 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 12 00:39:28.002558 kubelet[1958]: I0712 00:39:28.002546 1958 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 12 00:39:28.056605 kubelet[1958]: I0712 00:39:28.056555 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:28.056690 kubelet[1958]: I0712 00:39:28.056617 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:28.056690 kubelet[1958]: I0712 00:39:28.056640 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:28.056690 kubelet[1958]: I0712 00:39:28.056658 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:28.056690 kubelet[1958]: I0712 00:39:28.056678 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:28.056796 kubelet[1958]: I0712 00:39:28.056692 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1fe2a95272a015579775a63971ae4dca-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1fe2a95272a015579775a63971ae4dca\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:28.056796 kubelet[1958]: I0712 00:39:28.056706 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1fe2a95272a015579775a63971ae4dca-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1fe2a95272a015579775a63971ae4dca\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:28.056796 kubelet[1958]: I0712 00:39:28.056721 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1fe2a95272a015579775a63971ae4dca-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1fe2a95272a015579775a63971ae4dca\") " pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:28.056796 kubelet[1958]: I0712 00:39:28.056736 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 12 00:39:28.273147 kubelet[1958]: E0712 00:39:28.273123 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:28.273351 kubelet[1958]: E0712 00:39:28.273134 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:28.273507 kubelet[1958]: E0712 00:39:28.273488 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:28.837002 kubelet[1958]: I0712 00:39:28.836953 1958 apiserver.go:52] "Watching apiserver" Jul 12 00:39:28.855746 kubelet[1958]: I0712 00:39:28.855710 1958 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 12 00:39:28.875558 kubelet[1958]: E0712 00:39:28.875527 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:28.875852 kubelet[1958]: I0712 00:39:28.875827 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:28.876075 kubelet[1958]: I0712 00:39:28.876052 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:28.913182 kubelet[1958]: E0712 00:39:28.913153 1958 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 12 00:39:28.913442 kubelet[1958]: E0712 00:39:28.913423 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:28.913539 kubelet[1958]: E0712 00:39:28.913507 1958 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 12 00:39:28.913838 kubelet[1958]: E0712 00:39:28.913760 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:28.921338 kubelet[1958]: I0712 00:39:28.921275 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.9212592539999997 podStartE2EDuration="2.921259254s" podCreationTimestamp="2025-07-12 00:39:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:39:28.914447313 +0000 UTC m=+1.130250510" watchObservedRunningTime="2025-07-12 00:39:28.921259254 +0000 UTC m=+1.137062411" Jul 12 00:39:28.942212 kubelet[1958]: I0712 00:39:28.942161 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.9421441590000001 podStartE2EDuration="1.942144159s" podCreationTimestamp="2025-07-12 00:39:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:39:28.941802798 +0000 UTC m=+1.157605995" watchObservedRunningTime="2025-07-12 00:39:28.942144159 +0000 UTC m=+1.157947316" Jul 12 00:39:28.942469 kubelet[1958]: I0712 00:39:28.942442 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.94243452 podStartE2EDuration="1.94243452s" podCreationTimestamp="2025-07-12 00:39:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:39:28.921607815 +0000 UTC m=+1.137411012" watchObservedRunningTime="2025-07-12 00:39:28.94243452 +0000 UTC m=+1.158237717" Jul 12 00:39:29.877252 kubelet[1958]: E0712 00:39:29.877223 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:29.877650 kubelet[1958]: E0712 00:39:29.877261 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:29.998000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:29.998000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f78be0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:29.998000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:29.999000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:29.999000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f78d80 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:29.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:29.999000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:29.999000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f78dc0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:29.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:29.999000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:39:29.999000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000d63ac0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:29.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:30.878200 kubelet[1958]: E0712 00:39:30.878165 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:32.398000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 12 00:39:32.398000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400068c900 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:39:32.398000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:39:32.911654 kubelet[1958]: E0712 00:39:32.911625 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:33.212275 kubelet[1958]: I0712 00:39:33.212188 1958 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 12 00:39:33.212755 env[1222]: time="2025-07-12T00:39:33.212719355Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 12 00:39:33.213266 kubelet[1958]: I0712 00:39:33.213250 1958 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 12 00:39:33.922225 systemd[1]: Created slice kubepods-besteffort-pode9f9b7c4_28e4_44cf_bd19_70715a15439d.slice. Jul 12 00:39:33.994991 kubelet[1958]: I0712 00:39:33.994909 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e9f9b7c4-28e4-44cf-bd19-70715a15439d-xtables-lock\") pod \"kube-proxy-q9s6q\" (UID: \"e9f9b7c4-28e4-44cf-bd19-70715a15439d\") " pod="kube-system/kube-proxy-q9s6q" Jul 12 00:39:33.994991 kubelet[1958]: I0712 00:39:33.994986 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e9f9b7c4-28e4-44cf-bd19-70715a15439d-lib-modules\") pod \"kube-proxy-q9s6q\" (UID: \"e9f9b7c4-28e4-44cf-bd19-70715a15439d\") " pod="kube-system/kube-proxy-q9s6q" Jul 12 00:39:33.995356 kubelet[1958]: I0712 00:39:33.995019 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e9f9b7c4-28e4-44cf-bd19-70715a15439d-kube-proxy\") pod \"kube-proxy-q9s6q\" (UID: \"e9f9b7c4-28e4-44cf-bd19-70715a15439d\") " pod="kube-system/kube-proxy-q9s6q" Jul 12 00:39:33.995356 kubelet[1958]: I0712 00:39:33.995052 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dshnv\" (UniqueName: \"kubernetes.io/projected/e9f9b7c4-28e4-44cf-bd19-70715a15439d-kube-api-access-dshnv\") pod \"kube-proxy-q9s6q\" (UID: \"e9f9b7c4-28e4-44cf-bd19-70715a15439d\") " pod="kube-system/kube-proxy-q9s6q" Jul 12 00:39:34.103631 kubelet[1958]: I0712 00:39:34.103599 1958 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 12 00:39:34.236155 kubelet[1958]: E0712 00:39:34.236035 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:34.236734 env[1222]: time="2025-07-12T00:39:34.236686580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-q9s6q,Uid:e9f9b7c4-28e4-44cf-bd19-70715a15439d,Namespace:kube-system,Attempt:0,}" Jul 12 00:39:34.256202 env[1222]: time="2025-07-12T00:39:34.256128541Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:34.256667 env[1222]: time="2025-07-12T00:39:34.256198061Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:34.256667 env[1222]: time="2025-07-12T00:39:34.256213541Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:34.256667 env[1222]: time="2025-07-12T00:39:34.256417702Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4a4f9f18db3e9a8cff479b89eef08635f25ba500dc7a4061963e23834c415580 pid=2013 runtime=io.containerd.runc.v2 Jul 12 00:39:34.291012 systemd[1]: run-containerd-runc-k8s.io-4a4f9f18db3e9a8cff479b89eef08635f25ba500dc7a4061963e23834c415580-runc.QeNLtD.mount: Deactivated successfully. Jul 12 00:39:34.298009 kubelet[1958]: I0712 00:39:34.297960 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/94aed2df-d723-4a7c-b063-3f1b6d21c3c2-var-lib-calico\") pod \"tigera-operator-747864d56d-828q8\" (UID: \"94aed2df-d723-4a7c-b063-3f1b6d21c3c2\") " pod="tigera-operator/tigera-operator-747864d56d-828q8" Jul 12 00:39:34.298257 kubelet[1958]: I0712 00:39:34.298019 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zrpb5\" (UniqueName: \"kubernetes.io/projected/94aed2df-d723-4a7c-b063-3f1b6d21c3c2-kube-api-access-zrpb5\") pod \"tigera-operator-747864d56d-828q8\" (UID: \"94aed2df-d723-4a7c-b063-3f1b6d21c3c2\") " pod="tigera-operator/tigera-operator-747864d56d-828q8" Jul 12 00:39:34.306813 systemd[1]: Started cri-containerd-4a4f9f18db3e9a8cff479b89eef08635f25ba500dc7a4061963e23834c415580.scope. Jul 12 00:39:34.307367 systemd[1]: Created slice kubepods-besteffort-pod94aed2df_d723_4a7c_b063_3f1b6d21c3c2.slice. Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.323586 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 12 00:39:34.323619 kernel: audit: type=1400 audit(1752280774.321:808): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.326957 kernel: audit: type=1400 audit(1752280774.321:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327009 kernel: audit: type=1400 audit(1752280774.321:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328652 kernel: audit: type=1400 audit(1752280774.321:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.332106 kernel: audit: type=1400 audit(1752280774.321:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.332164 kernel: audit: type=1400 audit(1752280774.321:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.335628 kernel: audit: type=1400 audit(1752280774.321:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.335696 kernel: audit: type=1400 audit(1752280774.321:815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.339301 kernel: audit: type=1400 audit(1752280774.321:816): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.341776 kernel: audit: type=1400 audit(1752280774.322:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.322000 audit: BPF prog-id=100 op=LOAD Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2013 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461346639663138646233653961386366663437396238396565663038 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2013 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461346639663138646233653961386366663437396238396565663038 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.325000 audit: BPF prog-id=101 op=LOAD Jul 12 00:39:34.325000 audit[2024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2013 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461346639663138646233653961386366663437396238396565663038 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.327000 audit: BPF prog-id=102 op=LOAD Jul 12 00:39:34.327000 audit[2024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2013 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461346639663138646233653961386366663437396238396565663038 Jul 12 00:39:34.328000 audit: BPF prog-id=102 op=UNLOAD Jul 12 00:39:34.328000 audit: BPF prog-id=101 op=UNLOAD Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { perfmon } for pid=2024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit[2024]: AVC avc: denied { bpf } for pid=2024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.328000 audit: BPF prog-id=103 op=LOAD Jul 12 00:39:34.328000 audit[2024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2013 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461346639663138646233653961386366663437396238396565663038 Jul 12 00:39:34.351211 env[1222]: time="2025-07-12T00:39:34.351169061Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-q9s6q,Uid:e9f9b7c4-28e4-44cf-bd19-70715a15439d,Namespace:kube-system,Attempt:0,} returns sandbox id \"4a4f9f18db3e9a8cff479b89eef08635f25ba500dc7a4061963e23834c415580\"" Jul 12 00:39:34.352020 kubelet[1958]: E0712 00:39:34.351999 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:34.355184 env[1222]: time="2025-07-12T00:39:34.355085749Z" level=info msg="CreateContainer within sandbox \"4a4f9f18db3e9a8cff479b89eef08635f25ba500dc7a4061963e23834c415580\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 12 00:39:34.369009 env[1222]: time="2025-07-12T00:39:34.368932699Z" level=info msg="CreateContainer within sandbox \"4a4f9f18db3e9a8cff479b89eef08635f25ba500dc7a4061963e23834c415580\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0ef9f26bea9822f09c922fb56586df51d25b104aad014a7d55ec5a8c3690272f\"" Jul 12 00:39:34.371074 env[1222]: time="2025-07-12T00:39:34.370683382Z" level=info msg="StartContainer for \"0ef9f26bea9822f09c922fb56586df51d25b104aad014a7d55ec5a8c3690272f\"" Jul 12 00:39:34.389088 systemd[1]: Started cri-containerd-0ef9f26bea9822f09c922fb56586df51d25b104aad014a7d55ec5a8c3690272f.scope. Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2013 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663966323662656139383232663039633932326662353635383664 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit: BPF prog-id=104 op=LOAD Jul 12 00:39:34.413000 audit[2054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2013 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663966323662656139383232663039633932326662353635383664 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit: BPF prog-id=105 op=LOAD Jul 12 00:39:34.413000 audit[2054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2013 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663966323662656139383232663039633932326662353635383664 Jul 12 00:39:34.413000 audit: BPF prog-id=105 op=UNLOAD Jul 12 00:39:34.413000 audit: BPF prog-id=104 op=UNLOAD Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { perfmon } for pid=2054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit[2054]: AVC avc: denied { bpf } for pid=2054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.413000 audit: BPF prog-id=106 op=LOAD Jul 12 00:39:34.413000 audit[2054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2013 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065663966323662656139383232663039633932326662353635383664 Jul 12 00:39:34.426208 env[1222]: time="2025-07-12T00:39:34.426165939Z" level=info msg="StartContainer for \"0ef9f26bea9822f09c922fb56586df51d25b104aad014a7d55ec5a8c3690272f\" returns successfully" Jul 12 00:39:34.613049 env[1222]: time="2025-07-12T00:39:34.613003812Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-828q8,Uid:94aed2df-d723-4a7c-b063-3f1b6d21c3c2,Namespace:tigera-operator,Attempt:0,}" Jul 12 00:39:34.623000 audit[2127]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.623000 audit[2127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdae59430 a2=0 a3=1 items=0 ppid=2065 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.623000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:39:34.624000 audit[2126]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.624000 audit[2126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdfb82b10 a2=0 a3=1 items=0 ppid=2065 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.624000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 12 00:39:34.626389 env[1222]: time="2025-07-12T00:39:34.626066400Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:34.626483 env[1222]: time="2025-07-12T00:39:34.626393960Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:34.626483 env[1222]: time="2025-07-12T00:39:34.626420960Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:34.628109 env[1222]: time="2025-07-12T00:39:34.627213282Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/03fb7e01be189cf85771aa069860c84dc0ad5c91aa02bddd2682b5dbce5c9909 pid=2125 runtime=io.containerd.runc.v2 Jul 12 00:39:34.626000 audit[2137]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.626000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffca0b2a0 a2=0 a3=1 items=0 ppid=2065 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:39:34.628000 audit[2136]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.628000 audit[2136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc51f83c0 a2=0 a3=1 items=0 ppid=2065 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.628000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 12 00:39:34.628000 audit[2139]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.628000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5747010 a2=0 a3=1 items=0 ppid=2065 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.628000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:39:34.632000 audit[2141]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.632000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1320d10 a2=0 a3=1 items=0 ppid=2065 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.632000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 12 00:39:34.642242 systemd[1]: Started cri-containerd-03fb7e01be189cf85771aa069860c84dc0ad5c91aa02bddd2682b5dbce5c9909.scope. Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.664000 audit: BPF prog-id=107 op=LOAD Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2125 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666237653031626531383963663835373731616130363938363063 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2125 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666237653031626531383963663835373731616130363938363063 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit: BPF prog-id=108 op=LOAD Jul 12 00:39:34.665000 audit[2140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2125 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666237653031626531383963663835373731616130363938363063 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit: BPF prog-id=109 op=LOAD Jul 12 00:39:34.665000 audit[2140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2125 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666237653031626531383963663835373731616130363938363063 Jul 12 00:39:34.665000 audit: BPF prog-id=109 op=UNLOAD Jul 12 00:39:34.665000 audit: BPF prog-id=108 op=UNLOAD Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { perfmon } for pid=2140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit[2140]: AVC avc: denied { bpf } for pid=2140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:34.665000 audit: BPF prog-id=110 op=LOAD Jul 12 00:39:34.665000 audit[2140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2125 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033666237653031626531383963663835373731616130363938363063 Jul 12 00:39:34.684615 env[1222]: time="2025-07-12T00:39:34.684556323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-828q8,Uid:94aed2df-d723-4a7c-b063-3f1b6d21c3c2,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"03fb7e01be189cf85771aa069860c84dc0ad5c91aa02bddd2682b5dbce5c9909\"" Jul 12 00:39:34.687269 env[1222]: time="2025-07-12T00:39:34.687204688Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 12 00:39:34.726000 audit[2164]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.726000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff6643070 a2=0 a3=1 items=0 ppid=2065 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:39:34.730000 audit[2166]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.730000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffed4ec1f0 a2=0 a3=1 items=0 ppid=2065 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.730000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 12 00:39:34.735000 audit[2169]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.735000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe29a2c90 a2=0 a3=1 items=0 ppid=2065 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 12 00:39:34.736000 audit[2170]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.736000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd32f8450 a2=0 a3=1 items=0 ppid=2065 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:39:34.738000 audit[2172]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.738000 audit[2172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff6fa0330 a2=0 a3=1 items=0 ppid=2065 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:39:34.739000 audit[2173]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.739000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8c6d480 a2=0 a3=1 items=0 ppid=2065 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.739000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:39:34.741000 audit[2175]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.741000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffff9bf4c0 a2=0 a3=1 items=0 ppid=2065 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.741000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:39:34.745000 audit[2178]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.745000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff7bc0540 a2=0 a3=1 items=0 ppid=2065 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.745000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 12 00:39:34.746000 audit[2179]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.746000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff22f0e40 a2=0 a3=1 items=0 ppid=2065 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:39:34.748000 audit[2181]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.748000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdd2db8a0 a2=0 a3=1 items=0 ppid=2065 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:39:34.749000 audit[2182]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.749000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe63240f0 a2=0 a3=1 items=0 ppid=2065 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:39:34.751000 audit[2184]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.751000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc0dd3120 a2=0 a3=1 items=0 ppid=2065 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:39:34.755000 audit[2187]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.755000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff8f8f480 a2=0 a3=1 items=0 ppid=2065 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:39:34.758000 audit[2190]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.758000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc37de5e0 a2=0 a3=1 items=0 ppid=2065 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:39:34.759000 audit[2191]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.759000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffce6d35e0 a2=0 a3=1 items=0 ppid=2065 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.759000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:39:34.762000 audit[2193]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.762000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd5876600 a2=0 a3=1 items=0 ppid=2065 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.762000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:39:34.766000 audit[2196]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.766000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd71c9da0 a2=0 a3=1 items=0 ppid=2065 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.766000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:39:34.767000 audit[2197]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.767000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7a1fa70 a2=0 a3=1 items=0 ppid=2065 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:39:34.769000 audit[2199]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 12 00:39:34.769000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd5b64860 a2=0 a3=1 items=0 ppid=2065 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.769000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:39:34.790000 audit[2205]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:34.790000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffefcadef0 a2=0 a3=1 items=0 ppid=2065 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.790000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:34.802000 audit[2205]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:34.802000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffefcadef0 a2=0 a3=1 items=0 ppid=2065 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.802000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:34.804000 audit[2210]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.804000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc19f5670 a2=0 a3=1 items=0 ppid=2065 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.804000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 12 00:39:34.806000 audit[2212]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.806000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd89a73a0 a2=0 a3=1 items=0 ppid=2065 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 12 00:39:34.810000 audit[2215]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.810000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe9647e70 a2=0 a3=1 items=0 ppid=2065 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.810000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 12 00:39:34.811000 audit[2216]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.811000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfcdb390 a2=0 a3=1 items=0 ppid=2065 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 12 00:39:34.813000 audit[2218]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.813000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff8b96b90 a2=0 a3=1 items=0 ppid=2065 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.813000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 12 00:39:34.814000 audit[2219]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.814000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffddd78150 a2=0 a3=1 items=0 ppid=2065 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.814000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 12 00:39:34.816000 audit[2221]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.816000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeb1a91d0 a2=0 a3=1 items=0 ppid=2065 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 12 00:39:34.819000 audit[2224]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.819000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff8cc0df0 a2=0 a3=1 items=0 ppid=2065 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.819000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 12 00:39:34.820000 audit[2225]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.820000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe79ecf00 a2=0 a3=1 items=0 ppid=2065 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.820000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 12 00:39:34.824000 audit[2227]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.824000 audit[2227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdeb1fc70 a2=0 a3=1 items=0 ppid=2065 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 12 00:39:34.826000 audit[2228]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.826000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeac6ef10 a2=0 a3=1 items=0 ppid=2065 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 12 00:39:34.828000 audit[2230]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.828000 audit[2230]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd194a6e0 a2=0 a3=1 items=0 ppid=2065 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 12 00:39:34.832000 audit[2233]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.832000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec392920 a2=0 a3=1 items=0 ppid=2065 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 12 00:39:34.835000 audit[2236]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.835000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdf67f8b0 a2=0 a3=1 items=0 ppid=2065 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 12 00:39:34.836000 audit[2237]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.836000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd09c3850 a2=0 a3=1 items=0 ppid=2065 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.836000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 12 00:39:34.839000 audit[2239]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.839000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe795bc80 a2=0 a3=1 items=0 ppid=2065 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:39:34.842000 audit[2242]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.842000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe24f90c0 a2=0 a3=1 items=0 ppid=2065 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 12 00:39:34.843000 audit[2243]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.843000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff367a660 a2=0 a3=1 items=0 ppid=2065 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 12 00:39:34.845000 audit[2245]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.845000 audit[2245]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd6703000 a2=0 a3=1 items=0 ppid=2065 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.845000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 12 00:39:34.847000 audit[2246]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.847000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6662c30 a2=0 a3=1 items=0 ppid=2065 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 12 00:39:34.849000 audit[2248]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.849000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffca46bf50 a2=0 a3=1 items=0 ppid=2065 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.849000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:39:34.852000 audit[2251]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 12 00:39:34.852000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe8a73130 a2=0 a3=1 items=0 ppid=2065 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.852000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 12 00:39:34.855000 audit[2253]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:39:34.855000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc928de00 a2=0 a3=1 items=0 ppid=2065 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.855000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:34.855000 audit[2253]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 12 00:39:34.855000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc928de00 a2=0 a3=1 items=0 ppid=2065 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:34.855000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:34.884915 kubelet[1958]: E0712 00:39:34.884831 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:34.896245 kubelet[1958]: I0712 00:39:34.896181 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-q9s6q" podStartSLOduration=1.8961585680000002 podStartE2EDuration="1.896158568s" podCreationTimestamp="2025-07-12 00:39:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:39:34.895839407 +0000 UTC m=+7.111642644" watchObservedRunningTime="2025-07-12 00:39:34.896158568 +0000 UTC m=+7.111961725" Jul 12 00:39:35.809085 kubelet[1958]: E0712 00:39:35.809031 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:35.886921 kubelet[1958]: E0712 00:39:35.886888 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:36.050309 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2537845554.mount: Deactivated successfully. Jul 12 00:39:36.370978 kubelet[1958]: E0712 00:39:36.370936 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:36.601263 env[1222]: time="2025-07-12T00:39:36.601214912Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:36.602784 env[1222]: time="2025-07-12T00:39:36.602744594Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:36.604242 env[1222]: time="2025-07-12T00:39:36.604215277Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:36.605554 env[1222]: time="2025-07-12T00:39:36.605524320Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:36.606302 env[1222]: time="2025-07-12T00:39:36.606269241Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 12 00:39:36.609916 env[1222]: time="2025-07-12T00:39:36.609885848Z" level=info msg="CreateContainer within sandbox \"03fb7e01be189cf85771aa069860c84dc0ad5c91aa02bddd2682b5dbce5c9909\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 12 00:39:36.619347 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount410096725.mount: Deactivated successfully. Jul 12 00:39:36.621862 env[1222]: time="2025-07-12T00:39:36.621500189Z" level=info msg="CreateContainer within sandbox \"03fb7e01be189cf85771aa069860c84dc0ad5c91aa02bddd2682b5dbce5c9909\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"ea3c1f78ca58e7e9369441de120923926e73130397763936fbbec17575754a2e\"" Jul 12 00:39:36.622120 env[1222]: time="2025-07-12T00:39:36.622094190Z" level=info msg="StartContainer for \"ea3c1f78ca58e7e9369441de120923926e73130397763936fbbec17575754a2e\"" Jul 12 00:39:36.639996 systemd[1]: Started cri-containerd-ea3c1f78ca58e7e9369441de120923926e73130397763936fbbec17575754a2e.scope. Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.654000 audit: BPF prog-id=111 op=LOAD Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2125 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:36.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561336331663738636135386537653933363934343164653132303932 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2125 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:36.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561336331663738636135386537653933363934343164653132303932 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.655000 audit: BPF prog-id=112 op=LOAD Jul 12 00:39:36.655000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2125 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:36.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561336331663738636135386537653933363934343164653132303932 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.656000 audit: BPF prog-id=113 op=LOAD Jul 12 00:39:36.656000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2125 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:36.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561336331663738636135386537653933363934343164653132303932 Jul 12 00:39:36.656000 audit: BPF prog-id=113 op=UNLOAD Jul 12 00:39:36.656000 audit: BPF prog-id=112 op=UNLOAD Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:36.657000 audit: BPF prog-id=114 op=LOAD Jul 12 00:39:36.657000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2125 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:36.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561336331663738636135386537653933363934343164653132303932 Jul 12 00:39:36.669539 env[1222]: time="2025-07-12T00:39:36.669495358Z" level=info msg="StartContainer for \"ea3c1f78ca58e7e9369441de120923926e73130397763936fbbec17575754a2e\" returns successfully" Jul 12 00:39:36.892519 kubelet[1958]: E0712 00:39:36.890615 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:36.892519 kubelet[1958]: E0712 00:39:36.891236 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:36.902815 kubelet[1958]: I0712 00:39:36.902751 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-828q8" podStartSLOduration=0.981025311 podStartE2EDuration="2.902734709s" podCreationTimestamp="2025-07-12 00:39:34 +0000 UTC" firstStartedPulling="2025-07-12 00:39:34.685581685 +0000 UTC m=+6.901384842" lastFinishedPulling="2025-07-12 00:39:36.607291043 +0000 UTC m=+8.823094240" observedRunningTime="2025-07-12 00:39:36.902555869 +0000 UTC m=+9.118359066" watchObservedRunningTime="2025-07-12 00:39:36.902734709 +0000 UTC m=+9.118537906" Jul 12 00:39:40.530741 update_engine[1210]: I0712 00:39:40.528884 1210 update_attempter.cc:509] Updating boot flags... Jul 12 00:39:41.875926 sudo[1357]: pam_unix(sudo:session): session closed for user root Jul 12 00:39:41.874000 audit[1357]: USER_END pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:41.878767 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 12 00:39:41.878848 kernel: audit: type=1106 audit(1752280781.874:919): pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:41.878872 kernel: audit: type=1104 audit(1752280781.874:920): pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:41.874000 audit[1357]: CRED_DISP pid=1357 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 12 00:39:41.881983 sshd[1353]: pam_unix(sshd:session): session closed for user core Jul 12 00:39:41.881000 audit[1353]: USER_END pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:41.884848 systemd-logind[1208]: Session 7 logged out. Waiting for processes to exit. Jul 12 00:39:41.881000 audit[1353]: CRED_DISP pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:41.889158 kernel: audit: type=1106 audit(1752280781.881:921): pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:41.889243 kernel: audit: type=1104 audit(1752280781.881:922): pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:39:41.890672 kernel: audit: type=1131 audit(1752280781.888:923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.133:22-10.0.0.1:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:41.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.133:22-10.0.0.1:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:39:41.889554 systemd[1]: sshd@6-10.0.0.133:22-10.0.0.1:34160.service: Deactivated successfully. Jul 12 00:39:41.890231 systemd[1]: session-7.scope: Deactivated successfully. Jul 12 00:39:41.890369 systemd[1]: session-7.scope: Consumed 8.551s CPU time. Jul 12 00:39:41.891405 systemd-logind[1208]: Removed session 7. Jul 12 00:39:42.325000 audit[2362]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:42.325000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc49bdb90 a2=0 a3=1 items=0 ppid=2065 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:42.331033 kernel: audit: type=1325 audit(1752280782.325:924): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:42.331135 kernel: audit: type=1300 audit(1752280782.325:924): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc49bdb90 a2=0 a3=1 items=0 ppid=2065 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:42.331167 kernel: audit: type=1327 audit(1752280782.325:924): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:42.325000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:42.337000 audit[2362]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:42.337000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc49bdb90 a2=0 a3=1 items=0 ppid=2065 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:42.343475 kernel: audit: type=1325 audit(1752280782.337:925): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:42.343546 kernel: audit: type=1300 audit(1752280782.337:925): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc49bdb90 a2=0 a3=1 items=0 ppid=2065 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:42.337000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:42.397000 audit[2364]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:42.397000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcdc417b0 a2=0 a3=1 items=0 ppid=2065 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:42.397000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:42.403000 audit[2364]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:42.403000 audit[2364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcdc417b0 a2=0 a3=1 items=0 ppid=2065 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:42.403000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:42.921464 kubelet[1958]: E0712 00:39:42.921435 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:45.253000 audit[2366]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:45.253000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffce033e60 a2=0 a3=1 items=0 ppid=2065 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.253000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:45.259000 audit[2366]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:45.259000 audit[2366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffce033e60 a2=0 a3=1 items=0 ppid=2065 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.259000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:45.272000 audit[2368]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:45.272000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffa739880 a2=0 a3=1 items=0 ppid=2065 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:45.276000 audit[2368]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:45.276000 audit[2368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffa739880 a2=0 a3=1 items=0 ppid=2065 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.276000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:45.375461 systemd[1]: Created slice kubepods-besteffort-pod7c3a9bbc_b1c6_4703_84a1_379629e05655.slice. Jul 12 00:39:45.476099 kubelet[1958]: I0712 00:39:45.476056 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7c3a9bbc-b1c6-4703-84a1-379629e05655-tigera-ca-bundle\") pod \"calico-typha-766c4c849f-6xls4\" (UID: \"7c3a9bbc-b1c6-4703-84a1-379629e05655\") " pod="calico-system/calico-typha-766c4c849f-6xls4" Jul 12 00:39:45.476099 kubelet[1958]: I0712 00:39:45.476101 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7c3a9bbc-b1c6-4703-84a1-379629e05655-typha-certs\") pod \"calico-typha-766c4c849f-6xls4\" (UID: \"7c3a9bbc-b1c6-4703-84a1-379629e05655\") " pod="calico-system/calico-typha-766c4c849f-6xls4" Jul 12 00:39:45.476473 kubelet[1958]: I0712 00:39:45.476118 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4gld2\" (UniqueName: \"kubernetes.io/projected/7c3a9bbc-b1c6-4703-84a1-379629e05655-kube-api-access-4gld2\") pod \"calico-typha-766c4c849f-6xls4\" (UID: \"7c3a9bbc-b1c6-4703-84a1-379629e05655\") " pod="calico-system/calico-typha-766c4c849f-6xls4" Jul 12 00:39:45.677950 kubelet[1958]: E0712 00:39:45.677895 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:45.678534 env[1222]: time="2025-07-12T00:39:45.678475980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-766c4c849f-6xls4,Uid:7c3a9bbc-b1c6-4703-84a1-379629e05655,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:45.700259 env[1222]: time="2025-07-12T00:39:45.700011003Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:45.700259 env[1222]: time="2025-07-12T00:39:45.700052403Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:45.700259 env[1222]: time="2025-07-12T00:39:45.700069003Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:45.700259 env[1222]: time="2025-07-12T00:39:45.700202843Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45c56d2034a0ef714f416e64e23e3dc3d273b8ea22c63630b8e11133be7e986a pid=2377 runtime=io.containerd.runc.v2 Jul 12 00:39:45.730770 kubelet[1958]: W0712 00:39:45.730725 1958 reflector.go:569] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 12 00:39:45.730887 kubelet[1958]: E0712 00:39:45.730771 1958 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"cni-config\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 12 00:39:45.730887 kubelet[1958]: I0712 00:39:45.730844 1958 status_manager.go:890] "Failed to get status for pod" podUID="0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b" pod="calico-system/calico-node-wswfg" err="pods \"calico-node-wswfg\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" Jul 12 00:39:45.730939 kubelet[1958]: W0712 00:39:45.730891 1958 reflector.go:569] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 12 00:39:45.730939 kubelet[1958]: E0712 00:39:45.730904 1958 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"node-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"node-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 12 00:39:45.733362 systemd[1]: Created slice kubepods-besteffort-pod0ef3eaa8_dc7a_4202_83f4_af0f1ff34c2b.slice. Jul 12 00:39:45.741737 systemd[1]: Started cri-containerd-45c56d2034a0ef714f416e64e23e3dc3d273b8ea22c63630b8e11133be7e986a.scope. Jul 12 00:39:45.777957 kubelet[1958]: I0712 00:39:45.777904 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-policysync\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.777957 kubelet[1958]: I0712 00:39:45.777963 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-var-run-calico\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778110 kubelet[1958]: I0712 00:39:45.777983 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-xtables-lock\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778110 kubelet[1958]: I0712 00:39:45.778001 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-cni-net-dir\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778110 kubelet[1958]: I0712 00:39:45.778016 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-lib-modules\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778110 kubelet[1958]: I0712 00:39:45.778032 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-tigera-ca-bundle\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778110 kubelet[1958]: I0712 00:39:45.778047 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-cni-bin-dir\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778236 kubelet[1958]: I0712 00:39:45.778061 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-cni-log-dir\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778236 kubelet[1958]: I0712 00:39:45.778075 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-var-lib-calico\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778236 kubelet[1958]: I0712 00:39:45.778091 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hnvxj\" (UniqueName: \"kubernetes.io/projected/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-kube-api-access-hnvxj\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778236 kubelet[1958]: I0712 00:39:45.778109 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-flexvol-driver-host\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778236 kubelet[1958]: I0712 00:39:45.778125 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b-node-certs\") pod \"calico-node-wswfg\" (UID: \"0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b\") " pod="calico-system/calico-node-wswfg" Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.778000 audit: BPF prog-id=115 op=LOAD Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2377 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435633536643230333461306566373134663431366536346532336533 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2377 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435633536643230333461306566373134663431366536346532336533 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit: BPF prog-id=116 op=LOAD Jul 12 00:39:45.779000 audit[2387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2377 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435633536643230333461306566373134663431366536346532336533 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit: BPF prog-id=117 op=LOAD Jul 12 00:39:45.779000 audit[2387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2377 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435633536643230333461306566373134663431366536346532336533 Jul 12 00:39:45.779000 audit: BPF prog-id=117 op=UNLOAD Jul 12 00:39:45.779000 audit: BPF prog-id=116 op=UNLOAD Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { perfmon } for pid=2387 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit[2387]: AVC avc: denied { bpf } for pid=2387 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:45.779000 audit: BPF prog-id=118 op=LOAD Jul 12 00:39:45.779000 audit[2387]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2377 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:45.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435633536643230333461306566373134663431366536346532336533 Jul 12 00:39:45.800407 env[1222]: time="2025-07-12T00:39:45.800362666Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-766c4c849f-6xls4,Uid:7c3a9bbc-b1c6-4703-84a1-379629e05655,Namespace:calico-system,Attempt:0,} returns sandbox id \"45c56d2034a0ef714f416e64e23e3dc3d273b8ea22c63630b8e11133be7e986a\"" Jul 12 00:39:45.800934 kubelet[1958]: E0712 00:39:45.800909 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:45.802783 env[1222]: time="2025-07-12T00:39:45.802753989Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 12 00:39:45.891381 kubelet[1958]: E0712 00:39:45.891341 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.891381 kubelet[1958]: W0712 00:39:45.891366 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.891562 kubelet[1958]: E0712 00:39:45.891394 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.962000 kubelet[1958]: E0712 00:39:45.961890 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-mb7w5" podUID="04117f3b-9ff5-49df-b39c-0dfb22b7f6ce" Jul 12 00:39:45.972903 kubelet[1958]: E0712 00:39:45.972875 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.972903 kubelet[1958]: W0712 00:39:45.972899 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.973072 kubelet[1958]: E0712 00:39:45.972917 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.973128 kubelet[1958]: E0712 00:39:45.973112 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.973170 kubelet[1958]: W0712 00:39:45.973125 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.973208 kubelet[1958]: E0712 00:39:45.973169 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.973453 kubelet[1958]: E0712 00:39:45.973432 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.973453 kubelet[1958]: W0712 00:39:45.973447 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.973554 kubelet[1958]: E0712 00:39:45.973461 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.973661 kubelet[1958]: E0712 00:39:45.973644 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.973661 kubelet[1958]: W0712 00:39:45.973657 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.973741 kubelet[1958]: E0712 00:39:45.973666 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.975251 kubelet[1958]: E0712 00:39:45.975218 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.975251 kubelet[1958]: W0712 00:39:45.975241 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.975251 kubelet[1958]: E0712 00:39:45.975255 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.975697 kubelet[1958]: E0712 00:39:45.975676 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.975697 kubelet[1958]: W0712 00:39:45.975694 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.975792 kubelet[1958]: E0712 00:39:45.975706 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.976609 kubelet[1958]: E0712 00:39:45.976589 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.976609 kubelet[1958]: W0712 00:39:45.976608 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.976713 kubelet[1958]: E0712 00:39:45.976620 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.976851 kubelet[1958]: E0712 00:39:45.976833 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.976896 kubelet[1958]: W0712 00:39:45.976867 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.976896 kubelet[1958]: E0712 00:39:45.976878 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.977177 kubelet[1958]: E0712 00:39:45.977157 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.977237 kubelet[1958]: W0712 00:39:45.977171 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.977268 kubelet[1958]: E0712 00:39:45.977245 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.977447 kubelet[1958]: E0712 00:39:45.977426 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.977447 kubelet[1958]: W0712 00:39:45.977441 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.977522 kubelet[1958]: E0712 00:39:45.977451 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.977631 kubelet[1958]: E0712 00:39:45.977614 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.977631 kubelet[1958]: W0712 00:39:45.977625 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.977631 kubelet[1958]: E0712 00:39:45.977633 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.977821 kubelet[1958]: E0712 00:39:45.977766 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.977821 kubelet[1958]: W0712 00:39:45.977776 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.977821 kubelet[1958]: E0712 00:39:45.977783 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.977923 kubelet[1958]: E0712 00:39:45.977908 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.977923 kubelet[1958]: W0712 00:39:45.977918 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.977979 kubelet[1958]: E0712 00:39:45.977925 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.978240 kubelet[1958]: E0712 00:39:45.978039 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.978240 kubelet[1958]: W0712 00:39:45.978049 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.978240 kubelet[1958]: E0712 00:39:45.978055 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.978240 kubelet[1958]: E0712 00:39:45.978167 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.978240 kubelet[1958]: W0712 00:39:45.978175 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.978240 kubelet[1958]: E0712 00:39:45.978181 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.978473 kubelet[1958]: E0712 00:39:45.978293 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.978473 kubelet[1958]: W0712 00:39:45.978299 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.978473 kubelet[1958]: E0712 00:39:45.978306 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.978473 kubelet[1958]: E0712 00:39:45.978435 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.978473 kubelet[1958]: W0712 00:39:45.978442 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.978473 kubelet[1958]: E0712 00:39:45.978449 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.978647 kubelet[1958]: E0712 00:39:45.978559 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.978684 kubelet[1958]: W0712 00:39:45.978650 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.978684 kubelet[1958]: E0712 00:39:45.978666 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.978883 kubelet[1958]: E0712 00:39:45.978869 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.978883 kubelet[1958]: W0712 00:39:45.978883 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.978963 kubelet[1958]: E0712 00:39:45.978893 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.979044 kubelet[1958]: E0712 00:39:45.979028 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.979044 kubelet[1958]: W0712 00:39:45.979040 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.979111 kubelet[1958]: E0712 00:39:45.979049 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.981607 kubelet[1958]: E0712 00:39:45.979308 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.981607 kubelet[1958]: W0712 00:39:45.979320 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.981607 kubelet[1958]: E0712 00:39:45.979330 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.981607 kubelet[1958]: I0712 00:39:45.979353 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/04117f3b-9ff5-49df-b39c-0dfb22b7f6ce-registration-dir\") pod \"csi-node-driver-mb7w5\" (UID: \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\") " pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:45.981607 kubelet[1958]: E0712 00:39:45.979504 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.981607 kubelet[1958]: W0712 00:39:45.979512 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.981607 kubelet[1958]: E0712 00:39:45.979521 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.981607 kubelet[1958]: I0712 00:39:45.979536 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/04117f3b-9ff5-49df-b39c-0dfb22b7f6ce-socket-dir\") pod \"csi-node-driver-mb7w5\" (UID: \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\") " pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:45.981607 kubelet[1958]: E0712 00:39:45.979741 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.981863 kubelet[1958]: W0712 00:39:45.979750 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.981863 kubelet[1958]: E0712 00:39:45.979757 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.981863 kubelet[1958]: I0712 00:39:45.979770 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/04117f3b-9ff5-49df-b39c-0dfb22b7f6ce-kubelet-dir\") pod \"csi-node-driver-mb7w5\" (UID: \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\") " pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:45.981863 kubelet[1958]: E0712 00:39:45.979899 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.981863 kubelet[1958]: W0712 00:39:45.979908 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.981863 kubelet[1958]: E0712 00:39:45.979916 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.981863 kubelet[1958]: I0712 00:39:45.979929 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p6gbw\" (UniqueName: \"kubernetes.io/projected/04117f3b-9ff5-49df-b39c-0dfb22b7f6ce-kube-api-access-p6gbw\") pod \"csi-node-driver-mb7w5\" (UID: \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\") " pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:45.981863 kubelet[1958]: E0712 00:39:45.980052 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982037 kubelet[1958]: W0712 00:39:45.980060 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982037 kubelet[1958]: E0712 00:39:45.980066 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982037 kubelet[1958]: I0712 00:39:45.980080 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/04117f3b-9ff5-49df-b39c-0dfb22b7f6ce-varrun\") pod \"csi-node-driver-mb7w5\" (UID: \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\") " pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:45.982037 kubelet[1958]: E0712 00:39:45.980215 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982037 kubelet[1958]: W0712 00:39:45.980222 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982037 kubelet[1958]: E0712 00:39:45.980230 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982037 kubelet[1958]: E0712 00:39:45.980343 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982037 kubelet[1958]: W0712 00:39:45.980350 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982037 kubelet[1958]: E0712 00:39:45.980357 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.980496 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982224 kubelet[1958]: W0712 00:39:45.980505 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.980512 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.980652 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982224 kubelet[1958]: W0712 00:39:45.980660 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.980667 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.981703 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982224 kubelet[1958]: W0712 00:39:45.981714 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.981724 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982224 kubelet[1958]: E0712 00:39:45.981855 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982443 kubelet[1958]: W0712 00:39:45.981863 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982443 kubelet[1958]: E0712 00:39:45.981871 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982443 kubelet[1958]: E0712 00:39:45.982006 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982443 kubelet[1958]: W0712 00:39:45.982013 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982443 kubelet[1958]: E0712 00:39:45.982022 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982443 kubelet[1958]: E0712 00:39:45.982152 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982443 kubelet[1958]: W0712 00:39:45.982158 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982443 kubelet[1958]: E0712 00:39:45.982166 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982443 kubelet[1958]: E0712 00:39:45.982313 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982443 kubelet[1958]: W0712 00:39:45.982321 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982677 kubelet[1958]: E0712 00:39:45.982328 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:45.982677 kubelet[1958]: E0712 00:39:45.982462 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:45.982677 kubelet[1958]: W0712 00:39:45.982470 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:45.982677 kubelet[1958]: E0712 00:39:45.982477 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.081085 kubelet[1958]: E0712 00:39:46.081052 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.081264 kubelet[1958]: W0712 00:39:46.081245 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.081341 kubelet[1958]: E0712 00:39:46.081326 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.081647 kubelet[1958]: E0712 00:39:46.081631 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.081735 kubelet[1958]: W0712 00:39:46.081721 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.081804 kubelet[1958]: E0712 00:39:46.081791 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.082071 kubelet[1958]: E0712 00:39:46.082036 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.082071 kubelet[1958]: W0712 00:39:46.082058 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.082154 kubelet[1958]: E0712 00:39:46.082077 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.082232 kubelet[1958]: E0712 00:39:46.082221 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.082232 kubelet[1958]: W0712 00:39:46.082231 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.082295 kubelet[1958]: E0712 00:39:46.082240 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.082396 kubelet[1958]: E0712 00:39:46.082386 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.082396 kubelet[1958]: W0712 00:39:46.082396 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.082457 kubelet[1958]: E0712 00:39:46.082408 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.082623 kubelet[1958]: E0712 00:39:46.082611 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.082623 kubelet[1958]: W0712 00:39:46.082623 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.082685 kubelet[1958]: E0712 00:39:46.082636 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.082797 kubelet[1958]: E0712 00:39:46.082787 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.082827 kubelet[1958]: W0712 00:39:46.082798 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.082827 kubelet[1958]: E0712 00:39:46.082810 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.082972 kubelet[1958]: E0712 00:39:46.082958 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.082972 kubelet[1958]: W0712 00:39:46.082970 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.083044 kubelet[1958]: E0712 00:39:46.083037 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.083116 kubelet[1958]: E0712 00:39:46.083107 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.083116 kubelet[1958]: W0712 00:39:46.083116 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.083257 kubelet[1958]: E0712 00:39:46.083239 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.083257 kubelet[1958]: W0712 00:39:46.083252 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.083319 kubelet[1958]: E0712 00:39:46.083261 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.083399 kubelet[1958]: E0712 00:39:46.083366 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.083471 kubelet[1958]: E0712 00:39:46.083393 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.083530 kubelet[1958]: W0712 00:39:46.083516 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.083611 kubelet[1958]: E0712 00:39:46.083599 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.083820 kubelet[1958]: E0712 00:39:46.083808 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.083820 kubelet[1958]: W0712 00:39:46.083820 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.083886 kubelet[1958]: E0712 00:39:46.083832 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084013 kubelet[1958]: E0712 00:39:46.084000 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084058 kubelet[1958]: W0712 00:39:46.084012 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.084058 kubelet[1958]: E0712 00:39:46.084026 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084166 kubelet[1958]: E0712 00:39:46.084152 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084166 kubelet[1958]: W0712 00:39:46.084164 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.084166 kubelet[1958]: E0712 00:39:46.084171 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084296 kubelet[1958]: E0712 00:39:46.084284 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084296 kubelet[1958]: W0712 00:39:46.084294 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.084382 kubelet[1958]: E0712 00:39:46.084360 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084435 kubelet[1958]: E0712 00:39:46.084425 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084435 kubelet[1958]: W0712 00:39:46.084434 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.084513 kubelet[1958]: E0712 00:39:46.084500 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084584 kubelet[1958]: E0712 00:39:46.084556 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084584 kubelet[1958]: W0712 00:39:46.084565 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.084654 kubelet[1958]: E0712 00:39:46.084587 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084725 kubelet[1958]: E0712 00:39:46.084714 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084725 kubelet[1958]: W0712 00:39:46.084724 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.084796 kubelet[1958]: E0712 00:39:46.084787 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.084939 kubelet[1958]: E0712 00:39:46.084929 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.084939 kubelet[1958]: W0712 00:39:46.084939 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.085034 kubelet[1958]: E0712 00:39:46.085017 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.085112 kubelet[1958]: E0712 00:39:46.085095 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.085112 kubelet[1958]: W0712 00:39:46.085108 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.085171 kubelet[1958]: E0712 00:39:46.085121 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.085277 kubelet[1958]: E0712 00:39:46.085264 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.085277 kubelet[1958]: W0712 00:39:46.085275 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.085342 kubelet[1958]: E0712 00:39:46.085287 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.085445 kubelet[1958]: E0712 00:39:46.085434 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.085482 kubelet[1958]: W0712 00:39:46.085446 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.085482 kubelet[1958]: E0712 00:39:46.085458 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.085635 kubelet[1958]: E0712 00:39:46.085623 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.085635 kubelet[1958]: W0712 00:39:46.085634 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.085709 kubelet[1958]: E0712 00:39:46.085646 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.086604 kubelet[1958]: E0712 00:39:46.086166 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.086604 kubelet[1958]: W0712 00:39:46.086185 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.086604 kubelet[1958]: E0712 00:39:46.086200 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.086604 kubelet[1958]: E0712 00:39:46.086427 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.086604 kubelet[1958]: W0712 00:39:46.086435 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.086604 kubelet[1958]: E0712 00:39:46.086444 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.095123 kubelet[1958]: E0712 00:39:46.095105 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.095222 kubelet[1958]: W0712 00:39:46.095208 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.095286 kubelet[1958]: E0712 00:39:46.095275 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.286000 audit[2475]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:46.286000 audit[2475]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffe75db30 a2=0 a3=1 items=0 ppid=2065 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:46.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:46.291000 audit[2475]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:39:46.291000 audit[2475]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffe75db30 a2=0 a3=1 items=0 ppid=2065 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:46.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:39:46.659651 kubelet[1958]: E0712 00:39:46.659517 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:46.659651 kubelet[1958]: W0712 00:39:46.659538 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:46.659651 kubelet[1958]: E0712 00:39:46.659558 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:46.695934 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1028574433.mount: Deactivated successfully. Jul 12 00:39:46.939553 env[1222]: time="2025-07-12T00:39:46.939252384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wswfg,Uid:0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:46.972981 env[1222]: time="2025-07-12T00:39:46.972907857Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:46.973144 env[1222]: time="2025-07-12T00:39:46.972957297Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:46.973144 env[1222]: time="2025-07-12T00:39:46.972967817Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:46.973144 env[1222]: time="2025-07-12T00:39:46.973102297Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95 pid=2485 runtime=io.containerd.runc.v2 Jul 12 00:39:46.999394 systemd[1]: Started cri-containerd-e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95.scope. Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.027953 kernel: kauditd_printk_skb: 82 callbacks suppressed Jul 12 00:39:47.028027 kernel: audit: type=1400 audit(1752280787.024:952): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028052 kernel: audit: type=1400 audit(1752280787.024:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.031672 kernel: audit: type=1400 audit(1752280787.024:954): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.031709 kernel: audit: type=1400 audit(1752280787.024:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.035359 kernel: audit: type=1400 audit(1752280787.024:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.037393 kernel: audit: type=1400 audit(1752280787.024:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.037452 kernel: audit: type=1400 audit(1752280787.024:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.041778 kernel: audit: type=1400 audit(1752280787.024:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.044212 kernel: audit: type=1400 audit(1752280787.024:960): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.046120 kernel: audit: type=1400 audit(1752280787.024:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.024000 audit: BPF prog-id=119 op=LOAD Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2485 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363834663761316436343233383536636663333164373365376164 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2485 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363834663761316436343233383536636663333164373365376164 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.026000 audit: BPF prog-id=120 op=LOAD Jul 12 00:39:47.026000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2485 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363834663761316436343233383536636663333164373365376164 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.028000 audit: BPF prog-id=121 op=LOAD Jul 12 00:39:47.028000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2485 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363834663761316436343233383536636663333164373365376164 Jul 12 00:39:47.030000 audit: BPF prog-id=121 op=UNLOAD Jul 12 00:39:47.030000 audit: BPF prog-id=120 op=UNLOAD Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.030000 audit: BPF prog-id=122 op=LOAD Jul 12 00:39:47.030000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2485 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363834663761316436343233383536636663333164373365376164 Jul 12 00:39:47.053627 env[1222]: time="2025-07-12T00:39:47.053554052Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-wswfg,Uid:0ef3eaa8-dc7a-4202-83f4-af0f1ff34c2b,Namespace:calico-system,Attempt:0,} returns sandbox id \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\"" Jul 12 00:39:47.281046 env[1222]: time="2025-07-12T00:39:47.280989139Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:47.282316 env[1222]: time="2025-07-12T00:39:47.282278340Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:47.283701 env[1222]: time="2025-07-12T00:39:47.283675541Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:47.285957 env[1222]: time="2025-07-12T00:39:47.285897463Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:47.286977 env[1222]: time="2025-07-12T00:39:47.286939824Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 12 00:39:47.297017 env[1222]: time="2025-07-12T00:39:47.296964913Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 12 00:39:47.316676 env[1222]: time="2025-07-12T00:39:47.316618451Z" level=info msg="CreateContainer within sandbox \"45c56d2034a0ef714f416e64e23e3dc3d273b8ea22c63630b8e11133be7e986a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 12 00:39:47.338664 env[1222]: time="2025-07-12T00:39:47.338605151Z" level=info msg="CreateContainer within sandbox \"45c56d2034a0ef714f416e64e23e3dc3d273b8ea22c63630b8e11133be7e986a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"844e7ee3b3f337ef2b4885d5949749622183c72131fe5efe5b655c36a05e17e9\"" Jul 12 00:39:47.339722 env[1222]: time="2025-07-12T00:39:47.339688792Z" level=info msg="StartContainer for \"844e7ee3b3f337ef2b4885d5949749622183c72131fe5efe5b655c36a05e17e9\"" Jul 12 00:39:47.355532 systemd[1]: Started cri-containerd-844e7ee3b3f337ef2b4885d5949749622183c72131fe5efe5b655c36a05e17e9.scope. Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.401000 audit: BPF prog-id=123 op=LOAD Jul 12 00:39:47.402000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.402000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2377 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834346537656533623366333337656632623438383564353934393734 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2377 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834346537656533623366333337656632623438383564353934393734 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit: BPF prog-id=124 op=LOAD Jul 12 00:39:47.404000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2377 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834346537656533623366333337656632623438383564353934393734 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit: BPF prog-id=125 op=LOAD Jul 12 00:39:47.404000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2377 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834346537656533623366333337656632623438383564353934393734 Jul 12 00:39:47.404000 audit: BPF prog-id=125 op=UNLOAD Jul 12 00:39:47.404000 audit: BPF prog-id=124 op=UNLOAD Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:47.404000 audit: BPF prog-id=126 op=LOAD Jul 12 00:39:47.404000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2377 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:47.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834346537656533623366333337656632623438383564353934393734 Jul 12 00:39:47.424120 env[1222]: time="2025-07-12T00:39:47.424070349Z" level=info msg="StartContainer for \"844e7ee3b3f337ef2b4885d5949749622183c72131fe5efe5b655c36a05e17e9\" returns successfully" Jul 12 00:39:47.867062 kubelet[1958]: E0712 00:39:47.866997 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-mb7w5" podUID="04117f3b-9ff5-49df-b39c-0dfb22b7f6ce" Jul 12 00:39:47.909317 kubelet[1958]: E0712 00:39:47.909272 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:47.923001 kubelet[1958]: I0712 00:39:47.922952 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-766c4c849f-6xls4" podStartSLOduration=1.428352997 podStartE2EDuration="2.922939122s" podCreationTimestamp="2025-07-12 00:39:45 +0000 UTC" firstStartedPulling="2025-07-12 00:39:45.802133868 +0000 UTC m=+18.017937065" lastFinishedPulling="2025-07-12 00:39:47.296719993 +0000 UTC m=+19.512523190" observedRunningTime="2025-07-12 00:39:47.922807922 +0000 UTC m=+20.138611119" watchObservedRunningTime="2025-07-12 00:39:47.922939122 +0000 UTC m=+20.138742319" Jul 12 00:39:48.001234 kubelet[1958]: E0712 00:39:48.001202 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.001234 kubelet[1958]: W0712 00:39:48.001227 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.001414 kubelet[1958]: E0712 00:39:48.001248 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.001491 kubelet[1958]: E0712 00:39:48.001477 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.001586 kubelet[1958]: W0712 00:39:48.001489 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.001586 kubelet[1958]: E0712 00:39:48.001531 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.001719 kubelet[1958]: E0712 00:39:48.001705 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.001719 kubelet[1958]: W0712 00:39:48.001717 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.001783 kubelet[1958]: E0712 00:39:48.001726 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.001905 kubelet[1958]: E0712 00:39:48.001891 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.001905 kubelet[1958]: W0712 00:39:48.001903 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.001974 kubelet[1958]: E0712 00:39:48.001911 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002081 kubelet[1958]: E0712 00:39:48.002068 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.002081 kubelet[1958]: W0712 00:39:48.002079 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.002145 kubelet[1958]: E0712 00:39:48.002087 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002231 kubelet[1958]: E0712 00:39:48.002220 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.002231 kubelet[1958]: W0712 00:39:48.002229 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.002290 kubelet[1958]: E0712 00:39:48.002236 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002362 kubelet[1958]: E0712 00:39:48.002351 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.002404 kubelet[1958]: W0712 00:39:48.002361 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.002404 kubelet[1958]: E0712 00:39:48.002378 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002513 kubelet[1958]: E0712 00:39:48.002501 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.002513 kubelet[1958]: W0712 00:39:48.002511 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.002578 kubelet[1958]: E0712 00:39:48.002519 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002704 kubelet[1958]: E0712 00:39:48.002691 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.002704 kubelet[1958]: W0712 00:39:48.002703 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.002759 kubelet[1958]: E0712 00:39:48.002713 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002840 kubelet[1958]: E0712 00:39:48.002829 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.002840 kubelet[1958]: W0712 00:39:48.002839 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.002894 kubelet[1958]: E0712 00:39:48.002846 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.002978 kubelet[1958]: E0712 00:39:48.002966 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.003008 kubelet[1958]: W0712 00:39:48.002977 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.003008 kubelet[1958]: E0712 00:39:48.002986 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.003128 kubelet[1958]: E0712 00:39:48.003115 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.003128 kubelet[1958]: W0712 00:39:48.003126 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.003192 kubelet[1958]: E0712 00:39:48.003133 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.003338 kubelet[1958]: E0712 00:39:48.003325 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.003338 kubelet[1958]: W0712 00:39:48.003336 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.003418 kubelet[1958]: E0712 00:39:48.003343 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.003506 kubelet[1958]: E0712 00:39:48.003492 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.003506 kubelet[1958]: W0712 00:39:48.003503 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.003562 kubelet[1958]: E0712 00:39:48.003511 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.003650 kubelet[1958]: E0712 00:39:48.003637 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.003650 kubelet[1958]: W0712 00:39:48.003648 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.003708 kubelet[1958]: E0712 00:39:48.003655 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.003858 kubelet[1958]: E0712 00:39:48.003846 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.003858 kubelet[1958]: W0712 00:39:48.003856 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.003914 kubelet[1958]: E0712 00:39:48.003864 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.004025 kubelet[1958]: E0712 00:39:48.004012 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.004025 kubelet[1958]: W0712 00:39:48.004023 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.004084 kubelet[1958]: E0712 00:39:48.004036 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.004211 kubelet[1958]: E0712 00:39:48.004197 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.004211 kubelet[1958]: W0712 00:39:48.004209 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.004266 kubelet[1958]: E0712 00:39:48.004218 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.004406 kubelet[1958]: E0712 00:39:48.004387 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.004406 kubelet[1958]: W0712 00:39:48.004399 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.004471 kubelet[1958]: E0712 00:39:48.004412 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.004595 kubelet[1958]: E0712 00:39:48.004559 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.004595 kubelet[1958]: W0712 00:39:48.004576 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.004595 kubelet[1958]: E0712 00:39:48.004586 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.004730 kubelet[1958]: E0712 00:39:48.004714 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.004730 kubelet[1958]: W0712 00:39:48.004725 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.004786 kubelet[1958]: E0712 00:39:48.004737 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.004895 kubelet[1958]: E0712 00:39:48.004881 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.004895 kubelet[1958]: W0712 00:39:48.004891 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.004957 kubelet[1958]: E0712 00:39:48.004903 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.005674 kubelet[1958]: E0712 00:39:48.005647 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.005674 kubelet[1958]: W0712 00:39:48.005665 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.005770 kubelet[1958]: E0712 00:39:48.005686 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.005892 kubelet[1958]: E0712 00:39:48.005873 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.005892 kubelet[1958]: W0712 00:39:48.005886 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.005947 kubelet[1958]: E0712 00:39:48.005911 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.006027 kubelet[1958]: E0712 00:39:48.006014 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.006027 kubelet[1958]: W0712 00:39:48.006025 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.006086 kubelet[1958]: E0712 00:39:48.006042 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.006163 kubelet[1958]: E0712 00:39:48.006150 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.006163 kubelet[1958]: W0712 00:39:48.006159 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.006217 kubelet[1958]: E0712 00:39:48.006171 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.006335 kubelet[1958]: E0712 00:39:48.006319 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.006335 kubelet[1958]: W0712 00:39:48.006329 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.006404 kubelet[1958]: E0712 00:39:48.006341 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.006515 kubelet[1958]: E0712 00:39:48.006498 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.006515 kubelet[1958]: W0712 00:39:48.006510 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.006591 kubelet[1958]: E0712 00:39:48.006523 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.006726 kubelet[1958]: E0712 00:39:48.006707 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.006726 kubelet[1958]: W0712 00:39:48.006720 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.006789 kubelet[1958]: E0712 00:39:48.006730 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.006859 kubelet[1958]: E0712 00:39:48.006845 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.006859 kubelet[1958]: W0712 00:39:48.006856 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.006915 kubelet[1958]: E0712 00:39:48.006868 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.007027 kubelet[1958]: E0712 00:39:48.007012 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.007064 kubelet[1958]: W0712 00:39:48.007028 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.007064 kubelet[1958]: E0712 00:39:48.007042 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.007323 kubelet[1958]: E0712 00:39:48.007299 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.007323 kubelet[1958]: W0712 00:39:48.007318 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.007398 kubelet[1958]: E0712 00:39:48.007332 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.008749 kubelet[1958]: E0712 00:39:48.008725 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 12 00:39:48.008749 kubelet[1958]: W0712 00:39:48.008741 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 12 00:39:48.008749 kubelet[1958]: E0712 00:39:48.008752 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 12 00:39:48.114168 env[1222]: time="2025-07-12T00:39:48.114114770Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:48.115977 env[1222]: time="2025-07-12T00:39:48.115946212Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:48.119523 env[1222]: time="2025-07-12T00:39:48.117605613Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:48.123175 env[1222]: time="2025-07-12T00:39:48.121140896Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:48.123175 env[1222]: time="2025-07-12T00:39:48.122058257Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 12 00:39:48.124874 env[1222]: time="2025-07-12T00:39:48.124842419Z" level=info msg="CreateContainer within sandbox \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 12 00:39:48.147359 env[1222]: time="2025-07-12T00:39:48.147317998Z" level=info msg="CreateContainer within sandbox \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00\"" Jul 12 00:39:48.148138 env[1222]: time="2025-07-12T00:39:48.147967599Z" level=info msg="StartContainer for \"c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00\"" Jul 12 00:39:48.179325 systemd[1]: Started cri-containerd-c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00.scope. Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2485 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:48.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313538643161623562353737326136623365616262646630633664 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit: BPF prog-id=127 op=LOAD Jul 12 00:39:48.198000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2485 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:48.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313538643161623562353737326136623365616262646630633664 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit: BPF prog-id=128 op=LOAD Jul 12 00:39:48.198000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2485 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:48.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313538643161623562353737326136623365616262646630633664 Jul 12 00:39:48.198000 audit: BPF prog-id=128 op=UNLOAD Jul 12 00:39:48.198000 audit: BPF prog-id=127 op=UNLOAD Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:48.198000 audit: BPF prog-id=129 op=LOAD Jul 12 00:39:48.198000 audit[2603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2485 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:48.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333313538643161623562353737326136623365616262646630633664 Jul 12 00:39:48.220427 env[1222]: time="2025-07-12T00:39:48.219665620Z" level=info msg="StartContainer for \"c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00\" returns successfully" Jul 12 00:39:48.232140 systemd[1]: cri-containerd-c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00.scope: Deactivated successfully. Jul 12 00:39:48.238000 audit: BPF prog-id=129 op=UNLOAD Jul 12 00:39:48.260331 env[1222]: time="2025-07-12T00:39:48.260272535Z" level=info msg="shim disconnected" id=c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00 Jul 12 00:39:48.260331 env[1222]: time="2025-07-12T00:39:48.260318215Z" level=warning msg="cleaning up after shim disconnected" id=c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00 namespace=k8s.io Jul 12 00:39:48.260331 env[1222]: time="2025-07-12T00:39:48.260327255Z" level=info msg="cleaning up dead shim" Jul 12 00:39:48.267119 env[1222]: time="2025-07-12T00:39:48.267073020Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:39:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2642 runtime=io.containerd.runc.v2\n" Jul 12 00:39:48.581749 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c3158d1ab5b5772a6b3eabbdf0c6dad62205ac7ca848c9af759ec34909c94c00-rootfs.mount: Deactivated successfully. Jul 12 00:39:48.916421 kubelet[1958]: I0712 00:39:48.914516 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:39:48.916421 kubelet[1958]: E0712 00:39:48.914893 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:48.924828 env[1222]: time="2025-07-12T00:39:48.924782221Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 12 00:39:49.866846 kubelet[1958]: E0712 00:39:49.866779 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-mb7w5" podUID="04117f3b-9ff5-49df-b39c-0dfb22b7f6ce" Jul 12 00:39:51.870896 kubelet[1958]: E0712 00:39:51.870854 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-mb7w5" podUID="04117f3b-9ff5-49df-b39c-0dfb22b7f6ce" Jul 12 00:39:52.036170 env[1222]: time="2025-07-12T00:39:52.036117160Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:52.037626 env[1222]: time="2025-07-12T00:39:52.037562601Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:52.039375 env[1222]: time="2025-07-12T00:39:52.039312003Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:52.041023 env[1222]: time="2025-07-12T00:39:52.040974964Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:52.041671 env[1222]: time="2025-07-12T00:39:52.041641404Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 12 00:39:52.045902 env[1222]: time="2025-07-12T00:39:52.045859967Z" level=info msg="CreateContainer within sandbox \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 12 00:39:52.085049 env[1222]: time="2025-07-12T00:39:52.084990313Z" level=info msg="CreateContainer within sandbox \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215\"" Jul 12 00:39:52.085844 env[1222]: time="2025-07-12T00:39:52.085795073Z" level=info msg="StartContainer for \"0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215\"" Jul 12 00:39:52.111118 systemd[1]: Started cri-containerd-0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215.scope. Jul 12 00:39:52.154590 kernel: kauditd_printk_skb: 148 callbacks suppressed Jul 12 00:39:52.154704 kernel: audit: type=1400 audit(1752280792.143:995): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.154731 kernel: audit: type=1300 audit(1752280792.143:995): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2485 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:52.154750 kernel: audit: type=1327 audit(1752280792.143:995): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062653634396463316438633862396162646434663362313438333462 Jul 12 00:39:52.154768 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.154785 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.143000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.143000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2485 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:52.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062653634396463316438633862396162646434663362313438333462 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.158105 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.160939 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.161007 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.162604 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.166186 kernel: audit: type=1400 audit(1752280792.146:996): avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.146000 audit: BPF prog-id=130 op=LOAD Jul 12 00:39:52.146000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2485 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:52.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062653634396463316438633862396162646434663362313438333462 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.149000 audit: BPF prog-id=131 op=LOAD Jul 12 00:39:52.149000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2485 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:52.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062653634396463316438633862396162646434663362313438333462 Jul 12 00:39:52.151000 audit: BPF prog-id=131 op=UNLOAD Jul 12 00:39:52.151000 audit: BPF prog-id=130 op=UNLOAD Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { perfmon } for pid=2667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit[2667]: AVC avc: denied { bpf } for pid=2667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:52.151000 audit: BPF prog-id=132 op=LOAD Jul 12 00:39:52.151000 audit[2667]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2485 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:52.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062653634396463316438633862396162646434663362313438333462 Jul 12 00:39:52.188840 env[1222]: time="2025-07-12T00:39:52.188783221Z" level=info msg="StartContainer for \"0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215\" returns successfully" Jul 12 00:39:52.760262 env[1222]: time="2025-07-12T00:39:52.760200397Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 12 00:39:52.762730 systemd[1]: cri-containerd-0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215.scope: Deactivated successfully. Jul 12 00:39:52.766092 kubelet[1958]: I0712 00:39:52.765325 1958 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 12 00:39:52.766000 audit: BPF prog-id=132 op=UNLOAD Jul 12 00:39:52.791615 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215-rootfs.mount: Deactivated successfully. Jul 12 00:39:52.803143 env[1222]: time="2025-07-12T00:39:52.803055385Z" level=info msg="shim disconnected" id=0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215 Jul 12 00:39:52.803362 env[1222]: time="2025-07-12T00:39:52.803325226Z" level=warning msg="cleaning up after shim disconnected" id=0be649dc1d8c8b9abdd4f3b14834bf5b092c4a3dfe9638043514404880cbd215 namespace=k8s.io Jul 12 00:39:52.803443 env[1222]: time="2025-07-12T00:39:52.803429466Z" level=info msg="cleaning up dead shim" Jul 12 00:39:52.806776 systemd[1]: Created slice kubepods-besteffort-podb2b46589_3ded_452d_959c_f50f98e9b674.slice. Jul 12 00:39:52.816712 systemd[1]: Created slice kubepods-burstable-pod7c47756a_d15a_4eb6_8064_223428db82b1.slice. Jul 12 00:39:52.825478 systemd[1]: Created slice kubepods-burstable-podbb5b6643_082f_48ed_a008_dcfa21e5ea7a.slice. Jul 12 00:39:52.834659 systemd[1]: Created slice kubepods-besteffort-pod216424c2_1c1e_4a37_bd40_df86a8d6aac3.slice. Jul 12 00:39:52.834919 env[1222]: time="2025-07-12T00:39:52.834857646Z" level=warning msg="cleanup warnings time=\"2025-07-12T00:39:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2710 runtime=io.containerd.runc.v2\n" Jul 12 00:39:52.842000 systemd[1]: Created slice kubepods-besteffort-pod316e97b3_0094_475b_8d95_317e1102cb14.slice. Jul 12 00:39:52.846402 systemd[1]: Created slice kubepods-besteffort-pod26468c6c_6406_46a2_89b5_765ca62c9c7a.slice. Jul 12 00:39:52.849253 kubelet[1958]: I0712 00:39:52.849221 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-px8bj\" (UniqueName: \"kubernetes.io/projected/7c47756a-d15a-4eb6-8064-223428db82b1-kube-api-access-px8bj\") pod \"coredns-668d6bf9bc-fv96n\" (UID: \"7c47756a-d15a-4eb6-8064-223428db82b1\") " pod="kube-system/coredns-668d6bf9bc-fv96n" Jul 12 00:39:52.849253 kubelet[1958]: I0712 00:39:52.849261 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5dcfb\" (UniqueName: \"kubernetes.io/projected/316e97b3-0094-475b-8d95-317e1102cb14-kube-api-access-5dcfb\") pod \"whisker-c8bbccd56-45z7t\" (UID: \"316e97b3-0094-475b-8d95-317e1102cb14\") " pod="calico-system/whisker-c8bbccd56-45z7t" Jul 12 00:39:52.849411 kubelet[1958]: I0712 00:39:52.849279 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6bkvd\" (UniqueName: \"kubernetes.io/projected/bb5b6643-082f-48ed-a008-dcfa21e5ea7a-kube-api-access-6bkvd\") pod \"coredns-668d6bf9bc-6dg9j\" (UID: \"bb5b6643-082f-48ed-a008-dcfa21e5ea7a\") " pod="kube-system/coredns-668d6bf9bc-6dg9j" Jul 12 00:39:52.849411 kubelet[1958]: I0712 00:39:52.849296 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lj9p8\" (UniqueName: \"kubernetes.io/projected/26468c6c-6406-46a2-89b5-765ca62c9c7a-kube-api-access-lj9p8\") pod \"calico-apiserver-5fcc9669f-vgpzb\" (UID: \"26468c6c-6406-46a2-89b5-765ca62c9c7a\") " pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" Jul 12 00:39:52.849411 kubelet[1958]: I0712 00:39:52.849363 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/752c67a8-1e1d-4600-9633-efa79d989209-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-t26mx\" (UID: \"752c67a8-1e1d-4600-9633-efa79d989209\") " pod="calico-system/goldmane-768f4c5c69-t26mx" Jul 12 00:39:52.849411 kubelet[1958]: I0712 00:39:52.849390 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/316e97b3-0094-475b-8d95-317e1102cb14-whisker-backend-key-pair\") pod \"whisker-c8bbccd56-45z7t\" (UID: \"316e97b3-0094-475b-8d95-317e1102cb14\") " pod="calico-system/whisker-c8bbccd56-45z7t" Jul 12 00:39:52.849411 kubelet[1958]: I0712 00:39:52.849408 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/316e97b3-0094-475b-8d95-317e1102cb14-whisker-ca-bundle\") pod \"whisker-c8bbccd56-45z7t\" (UID: \"316e97b3-0094-475b-8d95-317e1102cb14\") " pod="calico-system/whisker-c8bbccd56-45z7t" Jul 12 00:39:52.849536 kubelet[1958]: I0712 00:39:52.849424 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9jxmm\" (UniqueName: \"kubernetes.io/projected/216424c2-1c1e-4a37-bd40-df86a8d6aac3-kube-api-access-9jxmm\") pod \"calico-apiserver-5fcc9669f-2jgsc\" (UID: \"216424c2-1c1e-4a37-bd40-df86a8d6aac3\") " pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" Jul 12 00:39:52.849536 kubelet[1958]: I0712 00:39:52.849443 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/26468c6c-6406-46a2-89b5-765ca62c9c7a-calico-apiserver-certs\") pod \"calico-apiserver-5fcc9669f-vgpzb\" (UID: \"26468c6c-6406-46a2-89b5-765ca62c9c7a\") " pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" Jul 12 00:39:52.849536 kubelet[1958]: I0712 00:39:52.849459 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/bb5b6643-082f-48ed-a008-dcfa21e5ea7a-config-volume\") pod \"coredns-668d6bf9bc-6dg9j\" (UID: \"bb5b6643-082f-48ed-a008-dcfa21e5ea7a\") " pod="kube-system/coredns-668d6bf9bc-6dg9j" Jul 12 00:39:52.849648 kubelet[1958]: I0712 00:39:52.849475 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/752c67a8-1e1d-4600-9633-efa79d989209-config\") pod \"goldmane-768f4c5c69-t26mx\" (UID: \"752c67a8-1e1d-4600-9633-efa79d989209\") " pod="calico-system/goldmane-768f4c5c69-t26mx" Jul 12 00:39:52.849847 kubelet[1958]: I0712 00:39:52.849816 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b2b46589-3ded-452d-959c-f50f98e9b674-tigera-ca-bundle\") pod \"calico-kube-controllers-6dc9d689b8-c5vgk\" (UID: \"b2b46589-3ded-452d-959c-f50f98e9b674\") " pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" Jul 12 00:39:52.849907 kubelet[1958]: I0712 00:39:52.849850 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/216424c2-1c1e-4a37-bd40-df86a8d6aac3-calico-apiserver-certs\") pod \"calico-apiserver-5fcc9669f-2jgsc\" (UID: \"216424c2-1c1e-4a37-bd40-df86a8d6aac3\") " pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" Jul 12 00:39:52.849907 kubelet[1958]: I0712 00:39:52.849868 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7s85k\" (UniqueName: \"kubernetes.io/projected/752c67a8-1e1d-4600-9633-efa79d989209-kube-api-access-7s85k\") pod \"goldmane-768f4c5c69-t26mx\" (UID: \"752c67a8-1e1d-4600-9633-efa79d989209\") " pod="calico-system/goldmane-768f4c5c69-t26mx" Jul 12 00:39:52.849907 kubelet[1958]: I0712 00:39:52.849888 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xhj25\" (UniqueName: \"kubernetes.io/projected/b2b46589-3ded-452d-959c-f50f98e9b674-kube-api-access-xhj25\") pod \"calico-kube-controllers-6dc9d689b8-c5vgk\" (UID: \"b2b46589-3ded-452d-959c-f50f98e9b674\") " pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" Jul 12 00:39:52.849907 kubelet[1958]: I0712 00:39:52.849904 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/752c67a8-1e1d-4600-9633-efa79d989209-goldmane-key-pair\") pod \"goldmane-768f4c5c69-t26mx\" (UID: \"752c67a8-1e1d-4600-9633-efa79d989209\") " pod="calico-system/goldmane-768f4c5c69-t26mx" Jul 12 00:39:52.850005 kubelet[1958]: I0712 00:39:52.849921 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7c47756a-d15a-4eb6-8064-223428db82b1-config-volume\") pod \"coredns-668d6bf9bc-fv96n\" (UID: \"7c47756a-d15a-4eb6-8064-223428db82b1\") " pod="kube-system/coredns-668d6bf9bc-fv96n" Jul 12 00:39:52.850331 systemd[1]: Created slice kubepods-besteffort-pod752c67a8_1e1d_4600_9633_efa79d989209.slice. Jul 12 00:39:52.922785 env[1222]: time="2025-07-12T00:39:52.922632784Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 12 00:39:53.117110 env[1222]: time="2025-07-12T00:39:53.116297267Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dc9d689b8-c5vgk,Uid:b2b46589-3ded-452d-959c-f50f98e9b674,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:53.121997 kubelet[1958]: E0712 00:39:53.121967 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:53.122911 env[1222]: time="2025-07-12T00:39:53.122852591Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fv96n,Uid:7c47756a-d15a-4eb6-8064-223428db82b1,Namespace:kube-system,Attempt:0,}" Jul 12 00:39:53.131608 kubelet[1958]: E0712 00:39:53.131557 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:39:53.133506 env[1222]: time="2025-07-12T00:39:53.133298958Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dg9j,Uid:bb5b6643-082f-48ed-a008-dcfa21e5ea7a,Namespace:kube-system,Attempt:0,}" Jul 12 00:39:53.139231 env[1222]: time="2025-07-12T00:39:53.139170481Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-2jgsc,Uid:216424c2-1c1e-4a37-bd40-df86a8d6aac3,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:39:53.153081 env[1222]: time="2025-07-12T00:39:53.152961410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-vgpzb,Uid:26468c6c-6406-46a2-89b5-765ca62c9c7a,Namespace:calico-apiserver,Attempt:0,}" Jul 12 00:39:53.153244 env[1222]: time="2025-07-12T00:39:53.153207970Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-c8bbccd56-45z7t,Uid:316e97b3-0094-475b-8d95-317e1102cb14,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:53.166357 env[1222]: time="2025-07-12T00:39:53.160087494Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-t26mx,Uid:752c67a8-1e1d-4600-9633-efa79d989209,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:53.432653 env[1222]: time="2025-07-12T00:39:53.432266822Z" level=error msg="Failed to destroy network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.433029 env[1222]: time="2025-07-12T00:39:53.432978543Z" level=error msg="encountered an error cleaning up failed sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.433077 env[1222]: time="2025-07-12T00:39:53.433055623Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fv96n,Uid:7c47756a-d15a-4eb6-8064-223428db82b1,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.434745 kubelet[1958]: E0712 00:39:53.434698 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.434830 kubelet[1958]: E0712 00:39:53.434780 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-fv96n" Jul 12 00:39:53.434830 kubelet[1958]: E0712 00:39:53.434802 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-fv96n" Jul 12 00:39:53.434891 kubelet[1958]: E0712 00:39:53.434848 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-fv96n_kube-system(7c47756a-d15a-4eb6-8064-223428db82b1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-fv96n_kube-system(7c47756a-d15a-4eb6-8064-223428db82b1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-fv96n" podUID="7c47756a-d15a-4eb6-8064-223428db82b1" Jul 12 00:39:53.449969 env[1222]: time="2025-07-12T00:39:53.449903713Z" level=error msg="Failed to destroy network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.450330 env[1222]: time="2025-07-12T00:39:53.450296793Z" level=error msg="encountered an error cleaning up failed sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.450399 env[1222]: time="2025-07-12T00:39:53.450361633Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-2jgsc,Uid:216424c2-1c1e-4a37-bd40-df86a8d6aac3,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.450633 kubelet[1958]: E0712 00:39:53.450594 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.450712 kubelet[1958]: E0712 00:39:53.450653 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" Jul 12 00:39:53.450712 kubelet[1958]: E0712 00:39:53.450677 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" Jul 12 00:39:53.450770 kubelet[1958]: E0712 00:39:53.450719 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5fcc9669f-2jgsc_calico-apiserver(216424c2-1c1e-4a37-bd40-df86a8d6aac3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5fcc9669f-2jgsc_calico-apiserver(216424c2-1c1e-4a37-bd40-df86a8d6aac3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" podUID="216424c2-1c1e-4a37-bd40-df86a8d6aac3" Jul 12 00:39:53.454541 env[1222]: time="2025-07-12T00:39:53.454488116Z" level=error msg="Failed to destroy network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.455071 env[1222]: time="2025-07-12T00:39:53.455036276Z" level=error msg="encountered an error cleaning up failed sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.455111 env[1222]: time="2025-07-12T00:39:53.455093996Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-c8bbccd56-45z7t,Uid:316e97b3-0094-475b-8d95-317e1102cb14,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.455317 kubelet[1958]: E0712 00:39:53.455283 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.455381 kubelet[1958]: E0712 00:39:53.455338 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-c8bbccd56-45z7t" Jul 12 00:39:53.455381 kubelet[1958]: E0712 00:39:53.455365 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-c8bbccd56-45z7t" Jul 12 00:39:53.455449 kubelet[1958]: E0712 00:39:53.455420 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-c8bbccd56-45z7t_calico-system(316e97b3-0094-475b-8d95-317e1102cb14)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-c8bbccd56-45z7t_calico-system(316e97b3-0094-475b-8d95-317e1102cb14)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-c8bbccd56-45z7t" podUID="316e97b3-0094-475b-8d95-317e1102cb14" Jul 12 00:39:53.456388 env[1222]: time="2025-07-12T00:39:53.456341677Z" level=error msg="Failed to destroy network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.456758 env[1222]: time="2025-07-12T00:39:53.456688397Z" level=error msg="encountered an error cleaning up failed sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.456826 env[1222]: time="2025-07-12T00:39:53.456732677Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-t26mx,Uid:752c67a8-1e1d-4600-9633-efa79d989209,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.456958 kubelet[1958]: E0712 00:39:53.456928 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.456999 kubelet[1958]: E0712 00:39:53.456972 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-t26mx" Jul 12 00:39:53.457030 kubelet[1958]: E0712 00:39:53.456989 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-t26mx" Jul 12 00:39:53.460685 kubelet[1958]: E0712 00:39:53.457035 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-t26mx_calico-system(752c67a8-1e1d-4600-9633-efa79d989209)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-t26mx_calico-system(752c67a8-1e1d-4600-9633-efa79d989209)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-t26mx" podUID="752c67a8-1e1d-4600-9633-efa79d989209" Jul 12 00:39:53.469196 env[1222]: time="2025-07-12T00:39:53.469128085Z" level=error msg="Failed to destroy network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.469936 env[1222]: time="2025-07-12T00:39:53.469886765Z" level=error msg="encountered an error cleaning up failed sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.470102 env[1222]: time="2025-07-12T00:39:53.470058645Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dc9d689b8-c5vgk,Uid:b2b46589-3ded-452d-959c-f50f98e9b674,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.470476 kubelet[1958]: E0712 00:39:53.470425 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.470563 kubelet[1958]: E0712 00:39:53.470504 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" Jul 12 00:39:53.470563 kubelet[1958]: E0712 00:39:53.470524 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" Jul 12 00:39:53.470663 kubelet[1958]: E0712 00:39:53.470613 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6dc9d689b8-c5vgk_calico-system(b2b46589-3ded-452d-959c-f50f98e9b674)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6dc9d689b8-c5vgk_calico-system(b2b46589-3ded-452d-959c-f50f98e9b674)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" podUID="b2b46589-3ded-452d-959c-f50f98e9b674" Jul 12 00:39:53.476814 env[1222]: time="2025-07-12T00:39:53.476757330Z" level=error msg="Failed to destroy network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.477155 env[1222]: time="2025-07-12T00:39:53.477122770Z" level=error msg="encountered an error cleaning up failed sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.477201 env[1222]: time="2025-07-12T00:39:53.477177250Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-vgpzb,Uid:26468c6c-6406-46a2-89b5-765ca62c9c7a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.477417 kubelet[1958]: E0712 00:39:53.477382 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.477465 kubelet[1958]: E0712 00:39:53.477440 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" Jul 12 00:39:53.477490 kubelet[1958]: E0712 00:39:53.477460 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" Jul 12 00:39:53.477519 kubelet[1958]: E0712 00:39:53.477501 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5fcc9669f-vgpzb_calico-apiserver(26468c6c-6406-46a2-89b5-765ca62c9c7a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5fcc9669f-vgpzb_calico-apiserver(26468c6c-6406-46a2-89b5-765ca62c9c7a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" podUID="26468c6c-6406-46a2-89b5-765ca62c9c7a" Jul 12 00:39:53.480995 env[1222]: time="2025-07-12T00:39:53.480935452Z" level=error msg="Failed to destroy network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.481321 env[1222]: time="2025-07-12T00:39:53.481290692Z" level=error msg="encountered an error cleaning up failed sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.481387 env[1222]: time="2025-07-12T00:39:53.481360052Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dg9j,Uid:bb5b6643-082f-48ed-a008-dcfa21e5ea7a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.481602 kubelet[1958]: E0712 00:39:53.481553 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.481650 kubelet[1958]: E0712 00:39:53.481622 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-6dg9j" Jul 12 00:39:53.481679 kubelet[1958]: E0712 00:39:53.481651 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-6dg9j" Jul 12 00:39:53.481714 kubelet[1958]: E0712 00:39:53.481689 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-6dg9j_kube-system(bb5b6643-082f-48ed-a008-dcfa21e5ea7a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-6dg9j_kube-system(bb5b6643-082f-48ed-a008-dcfa21e5ea7a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-6dg9j" podUID="bb5b6643-082f-48ed-a008-dcfa21e5ea7a" Jul 12 00:39:53.871044 systemd[1]: Created slice kubepods-besteffort-pod04117f3b_9ff5_49df_b39c_0dfb22b7f6ce.slice. Jul 12 00:39:53.876437 env[1222]: time="2025-07-12T00:39:53.876376976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mb7w5,Uid:04117f3b-9ff5-49df-b39c-0dfb22b7f6ce,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:53.927791 env[1222]: time="2025-07-12T00:39:53.927744368Z" level=info msg="StopPodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\"" Jul 12 00:39:53.928014 kubelet[1958]: I0712 00:39:53.927974 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:39:53.932906 kubelet[1958]: I0712 00:39:53.932872 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:39:53.934844 env[1222]: time="2025-07-12T00:39:53.934801612Z" level=info msg="StopPodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\"" Jul 12 00:39:53.938247 kubelet[1958]: I0712 00:39:53.938215 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:39:53.938966 env[1222]: time="2025-07-12T00:39:53.938922535Z" level=info msg="StopPodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\"" Jul 12 00:39:53.940701 kubelet[1958]: I0712 00:39:53.940675 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:39:53.944690 env[1222]: time="2025-07-12T00:39:53.941282816Z" level=info msg="StopPodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\"" Jul 12 00:39:53.945730 kubelet[1958]: I0712 00:39:53.945702 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:39:53.946294 env[1222]: time="2025-07-12T00:39:53.946253179Z" level=info msg="StopPodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\"" Jul 12 00:39:53.946973 kubelet[1958]: I0712 00:39:53.946939 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:39:53.947818 env[1222]: time="2025-07-12T00:39:53.947686260Z" level=info msg="StopPodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\"" Jul 12 00:39:53.949018 kubelet[1958]: I0712 00:39:53.948995 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:39:53.949475 env[1222]: time="2025-07-12T00:39:53.949420781Z" level=info msg="StopPodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\"" Jul 12 00:39:53.958322 env[1222]: time="2025-07-12T00:39:53.958258067Z" level=error msg="Failed to destroy network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.958648 env[1222]: time="2025-07-12T00:39:53.958616627Z" level=error msg="encountered an error cleaning up failed sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.958718 env[1222]: time="2025-07-12T00:39:53.958666827Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mb7w5,Uid:04117f3b-9ff5-49df-b39c-0dfb22b7f6ce,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.958894 kubelet[1958]: E0712 00:39:53.958864 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.958958 kubelet[1958]: E0712 00:39:53.958915 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:53.958958 kubelet[1958]: E0712 00:39:53.958939 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-mb7w5" Jul 12 00:39:53.959019 kubelet[1958]: E0712 00:39:53.958979 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-mb7w5_calico-system(04117f3b-9ff5-49df-b39c-0dfb22b7f6ce)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-mb7w5_calico-system(04117f3b-9ff5-49df-b39c-0dfb22b7f6ce)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-mb7w5" podUID="04117f3b-9ff5-49df-b39c-0dfb22b7f6ce" Jul 12 00:39:53.993704 env[1222]: time="2025-07-12T00:39:53.993649529Z" level=error msg="StopPodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" failed" error="failed to destroy network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.995527 kubelet[1958]: E0712 00:39:53.995473 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:39:53.996776 kubelet[1958]: E0712 00:39:53.996708 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677"} Jul 12 00:39:53.996864 kubelet[1958]: E0712 00:39:53.996792 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"316e97b3-0094-475b-8d95-317e1102cb14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:53.996864 kubelet[1958]: E0712 00:39:53.996815 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"316e97b3-0094-475b-8d95-317e1102cb14\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-c8bbccd56-45z7t" podUID="316e97b3-0094-475b-8d95-317e1102cb14" Jul 12 00:39:53.997714 env[1222]: time="2025-07-12T00:39:53.997622331Z" level=error msg="StopPodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" failed" error="failed to destroy network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:53.997894 kubelet[1958]: E0712 00:39:53.997859 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:39:53.997963 kubelet[1958]: E0712 00:39:53.997898 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3"} Jul 12 00:39:53.997963 kubelet[1958]: E0712 00:39:53.997932 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"26468c6c-6406-46a2-89b5-765ca62c9c7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:53.997963 kubelet[1958]: E0712 00:39:53.997951 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"26468c6c-6406-46a2-89b5-765ca62c9c7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" podUID="26468c6c-6406-46a2-89b5-765ca62c9c7a" Jul 12 00:39:54.005729 env[1222]: time="2025-07-12T00:39:54.005675176Z" level=error msg="StopPodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" failed" error="failed to destroy network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:54.005889 kubelet[1958]: E0712 00:39:54.005857 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:39:54.005950 kubelet[1958]: E0712 00:39:54.005893 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645"} Jul 12 00:39:54.005950 kubelet[1958]: E0712 00:39:54.005919 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"216424c2-1c1e-4a37-bd40-df86a8d6aac3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:54.005950 kubelet[1958]: E0712 00:39:54.005941 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"216424c2-1c1e-4a37-bd40-df86a8d6aac3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" podUID="216424c2-1c1e-4a37-bd40-df86a8d6aac3" Jul 12 00:39:54.022969 env[1222]: time="2025-07-12T00:39:54.022912586Z" level=error msg="StopPodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" failed" error="failed to destroy network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:54.023415 kubelet[1958]: E0712 00:39:54.023365 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:39:54.023493 kubelet[1958]: E0712 00:39:54.023429 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61"} Jul 12 00:39:54.023493 kubelet[1958]: E0712 00:39:54.023464 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bb5b6643-082f-48ed-a008-dcfa21e5ea7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:54.023493 kubelet[1958]: E0712 00:39:54.023485 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bb5b6643-082f-48ed-a008-dcfa21e5ea7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-6dg9j" podUID="bb5b6643-082f-48ed-a008-dcfa21e5ea7a" Jul 12 00:39:54.028417 env[1222]: time="2025-07-12T00:39:54.028364949Z" level=error msg="StopPodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" failed" error="failed to destroy network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:54.028664 kubelet[1958]: E0712 00:39:54.028624 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:39:54.028728 kubelet[1958]: E0712 00:39:54.028673 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf"} Jul 12 00:39:54.028728 kubelet[1958]: E0712 00:39:54.028708 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b2b46589-3ded-452d-959c-f50f98e9b674\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:54.028728 kubelet[1958]: E0712 00:39:54.028728 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b2b46589-3ded-452d-959c-f50f98e9b674\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" podUID="b2b46589-3ded-452d-959c-f50f98e9b674" Jul 12 00:39:54.030167 env[1222]: time="2025-07-12T00:39:54.030080670Z" level=error msg="StopPodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" failed" error="failed to destroy network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:54.030314 kubelet[1958]: E0712 00:39:54.030280 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:39:54.030377 kubelet[1958]: E0712 00:39:54.030321 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48"} Jul 12 00:39:54.030377 kubelet[1958]: E0712 00:39:54.030356 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"752c67a8-1e1d-4600-9633-efa79d989209\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:54.030451 kubelet[1958]: E0712 00:39:54.030381 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"752c67a8-1e1d-4600-9633-efa79d989209\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-t26mx" podUID="752c67a8-1e1d-4600-9633-efa79d989209" Jul 12 00:39:54.044865 env[1222]: time="2025-07-12T00:39:54.044793679Z" level=error msg="StopPodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" failed" error="failed to destroy network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:54.045193 kubelet[1958]: E0712 00:39:54.045154 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:39:54.045272 kubelet[1958]: E0712 00:39:54.045208 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6"} Jul 12 00:39:54.045272 kubelet[1958]: E0712 00:39:54.045240 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7c47756a-d15a-4eb6-8064-223428db82b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:54.045362 kubelet[1958]: E0712 00:39:54.045265 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7c47756a-d15a-4eb6-8064-223428db82b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-fv96n" podUID="7c47756a-d15a-4eb6-8064-223428db82b1" Jul 12 00:39:54.084361 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645-shm.mount: Deactivated successfully. Jul 12 00:39:54.084455 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6-shm.mount: Deactivated successfully. Jul 12 00:39:54.084510 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf-shm.mount: Deactivated successfully. Jul 12 00:39:54.952680 kubelet[1958]: I0712 00:39:54.951931 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:39:54.953270 env[1222]: time="2025-07-12T00:39:54.953236844Z" level=info msg="StopPodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\"" Jul 12 00:39:54.978430 env[1222]: time="2025-07-12T00:39:54.978372259Z" level=error msg="StopPodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" failed" error="failed to destroy network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 12 00:39:54.978892 kubelet[1958]: E0712 00:39:54.978839 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:39:54.978988 kubelet[1958]: E0712 00:39:54.978888 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3"} Jul 12 00:39:54.978988 kubelet[1958]: E0712 00:39:54.978924 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 12 00:39:54.978988 kubelet[1958]: E0712 00:39:54.978944 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-mb7w5" podUID="04117f3b-9ff5-49df-b39c-0dfb22b7f6ce" Jul 12 00:39:57.239196 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4030932929.mount: Deactivated successfully. Jul 12 00:39:57.380817 env[1222]: time="2025-07-12T00:39:57.380769825Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:57.382826 env[1222]: time="2025-07-12T00:39:57.382785866Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:57.384196 env[1222]: time="2025-07-12T00:39:57.384166706Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:57.385580 env[1222]: time="2025-07-12T00:39:57.385527547Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:39:57.385991 env[1222]: time="2025-07-12T00:39:57.385956507Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 12 00:39:57.399144 env[1222]: time="2025-07-12T00:39:57.399099473Z" level=info msg="CreateContainer within sandbox \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 12 00:39:57.411151 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount539974522.mount: Deactivated successfully. Jul 12 00:39:57.413195 env[1222]: time="2025-07-12T00:39:57.413148320Z" level=info msg="CreateContainer within sandbox \"e9684f7a1d6423856cfc31d73e7adbfcff42d4aa1502cef44924557f03c82a95\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"03744d15fcb9970e7861e412dd769ac3114085dee1381cabb89d30530cc4281d\"" Jul 12 00:39:57.415071 env[1222]: time="2025-07-12T00:39:57.415025481Z" level=info msg="StartContainer for \"03744d15fcb9970e7861e412dd769ac3114085dee1381cabb89d30530cc4281d\"" Jul 12 00:39:57.432001 systemd[1]: Started cri-containerd-03744d15fcb9970e7861e412dd769ac3114085dee1381cabb89d30530cc4281d.scope. Jul 12 00:39:57.479000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.481966 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 12 00:39:57.482025 kernel: audit: type=1400 audit(1752280797.479:1002): avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.479000 audit[3169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2485 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:57.486152 kernel: audit: type=1300 audit(1752280797.479:1002): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2485 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:57.486240 kernel: audit: type=1327 audit(1752280797.479:1002): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033373434643135666362393937306537383631653431326464373639 Jul 12 00:39:57.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033373434643135666362393937306537383631653431326464373639 Jul 12 00:39:57.488501 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.491903 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.494057 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.494643 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.498309 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.498386 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.500128 kernel: audit: type=1400 audit(1752280797.480:1003): avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit: BPF prog-id=133 op=LOAD Jul 12 00:39:57.480000 audit[3169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2485 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:57.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033373434643135666362393937306537383631653431326464373639 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.480000 audit: BPF prog-id=134 op=LOAD Jul 12 00:39:57.480000 audit[3169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2485 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:57.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033373434643135666362393937306537383631653431326464373639 Jul 12 00:39:57.482000 audit: BPF prog-id=134 op=UNLOAD Jul 12 00:39:57.482000 audit: BPF prog-id=133 op=UNLOAD Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { perfmon } for pid=3169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit[3169]: AVC avc: denied { bpf } for pid=3169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:57.482000 audit: BPF prog-id=135 op=LOAD Jul 12 00:39:57.482000 audit[3169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2485 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:57.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033373434643135666362393937306537383631653431326464373639 Jul 12 00:39:57.513855 env[1222]: time="2025-07-12T00:39:57.513791008Z" level=info msg="StartContainer for \"03744d15fcb9970e7861e412dd769ac3114085dee1381cabb89d30530cc4281d\" returns successfully" Jul 12 00:39:57.775350 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 12 00:39:57.775494 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 12 00:39:57.881063 env[1222]: time="2025-07-12T00:39:57.881014063Z" level=info msg="StopPodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\"" Jul 12 00:39:58.007087 kubelet[1958]: I0712 00:39:58.007026 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-wswfg" podStartSLOduration=2.674819948 podStartE2EDuration="13.006999923s" podCreationTimestamp="2025-07-12 00:39:45 +0000 UTC" firstStartedPulling="2025-07-12 00:39:47.054776413 +0000 UTC m=+19.270579610" lastFinishedPulling="2025-07-12 00:39:57.386956388 +0000 UTC m=+29.602759585" observedRunningTime="2025-07-12 00:39:57.991095516 +0000 UTC m=+30.206898713" watchObservedRunningTime="2025-07-12 00:39:58.006999923 +0000 UTC m=+30.222803120" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.007 [INFO][3225] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.008 [INFO][3225] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" iface="eth0" netns="/var/run/netns/cni-a83ac6df-e163-e353-c7f0-9e880bfdd541" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.008 [INFO][3225] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" iface="eth0" netns="/var/run/netns/cni-a83ac6df-e163-e353-c7f0-9e880bfdd541" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.011 [INFO][3225] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" iface="eth0" netns="/var/run/netns/cni-a83ac6df-e163-e353-c7f0-9e880bfdd541" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.011 [INFO][3225] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.015 [INFO][3225] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.127 [INFO][3235] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.127 [INFO][3235] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.127 [INFO][3235] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.135 [WARNING][3235] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.135 [INFO][3235] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.137 [INFO][3235] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:39:58.140669 env[1222]: 2025-07-12 00:39:58.138 [INFO][3225] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:39:58.140669 env[1222]: time="2025-07-12T00:39:58.140560743Z" level=info msg="TearDown network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" successfully" Jul 12 00:39:58.140669 env[1222]: time="2025-07-12T00:39:58.140609343Z" level=info msg="StopPodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" returns successfully" Jul 12 00:39:58.193513 kubelet[1958]: I0712 00:39:58.193458 1958 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-5dcfb\" (UniqueName: \"kubernetes.io/projected/316e97b3-0094-475b-8d95-317e1102cb14-kube-api-access-5dcfb\") pod \"316e97b3-0094-475b-8d95-317e1102cb14\" (UID: \"316e97b3-0094-475b-8d95-317e1102cb14\") " Jul 12 00:39:58.193513 kubelet[1958]: I0712 00:39:58.193516 1958 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/316e97b3-0094-475b-8d95-317e1102cb14-whisker-ca-bundle\") pod \"316e97b3-0094-475b-8d95-317e1102cb14\" (UID: \"316e97b3-0094-475b-8d95-317e1102cb14\") " Jul 12 00:39:58.193732 kubelet[1958]: I0712 00:39:58.193556 1958 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/316e97b3-0094-475b-8d95-317e1102cb14-whisker-backend-key-pair\") pod \"316e97b3-0094-475b-8d95-317e1102cb14\" (UID: \"316e97b3-0094-475b-8d95-317e1102cb14\") " Jul 12 00:39:58.194053 kubelet[1958]: I0712 00:39:58.193930 1958 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/316e97b3-0094-475b-8d95-317e1102cb14-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "316e97b3-0094-475b-8d95-317e1102cb14" (UID: "316e97b3-0094-475b-8d95-317e1102cb14"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 12 00:39:58.194053 kubelet[1958]: I0712 00:39:58.194050 1958 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/316e97b3-0094-475b-8d95-317e1102cb14-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 12 00:39:58.197923 kubelet[1958]: I0712 00:39:58.197887 1958 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/316e97b3-0094-475b-8d95-317e1102cb14-kube-api-access-5dcfb" (OuterVolumeSpecName: "kube-api-access-5dcfb") pod "316e97b3-0094-475b-8d95-317e1102cb14" (UID: "316e97b3-0094-475b-8d95-317e1102cb14"). InnerVolumeSpecName "kube-api-access-5dcfb". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 12 00:39:58.198289 kubelet[1958]: I0712 00:39:58.198249 1958 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/316e97b3-0094-475b-8d95-317e1102cb14-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "316e97b3-0094-475b-8d95-317e1102cb14" (UID: "316e97b3-0094-475b-8d95-317e1102cb14"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 12 00:39:58.240046 systemd[1]: run-netns-cni\x2da83ac6df\x2de163\x2de353\x2dc7f0\x2d9e880bfdd541.mount: Deactivated successfully. Jul 12 00:39:58.240137 systemd[1]: var-lib-kubelet-pods-316e97b3\x2d0094\x2d475b\x2d8d95\x2d317e1102cb14-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d5dcfb.mount: Deactivated successfully. Jul 12 00:39:58.240199 systemd[1]: var-lib-kubelet-pods-316e97b3\x2d0094\x2d475b\x2d8d95\x2d317e1102cb14-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 12 00:39:58.294735 kubelet[1958]: I0712 00:39:58.294693 1958 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/316e97b3-0094-475b-8d95-317e1102cb14-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 12 00:39:58.294735 kubelet[1958]: I0712 00:39:58.294726 1958 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-5dcfb\" (UniqueName: \"kubernetes.io/projected/316e97b3-0094-475b-8d95-317e1102cb14-kube-api-access-5dcfb\") on node \"localhost\" DevicePath \"\"" Jul 12 00:39:58.975591 kubelet[1958]: I0712 00:39:58.975524 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:39:58.979945 systemd[1]: Removed slice kubepods-besteffort-pod316e97b3_0094_475b_8d95_317e1102cb14.slice. Jul 12 00:39:59.037391 systemd[1]: Created slice kubepods-besteffort-podb6cc8c78_f43d_40ed_a2fa_2e50b3ce53ab.slice. Jul 12 00:39:59.102427 kubelet[1958]: I0712 00:39:59.101838 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab-whisker-backend-key-pair\") pod \"whisker-958d645f6-nz2bh\" (UID: \"b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab\") " pod="calico-system/whisker-958d645f6-nz2bh" Jul 12 00:39:59.102427 kubelet[1958]: I0712 00:39:59.101898 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab-whisker-ca-bundle\") pod \"whisker-958d645f6-nz2bh\" (UID: \"b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab\") " pod="calico-system/whisker-958d645f6-nz2bh" Jul 12 00:39:59.102427 kubelet[1958]: I0712 00:39:59.101919 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c8rm5\" (UniqueName: \"kubernetes.io/projected/b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab-kube-api-access-c8rm5\") pod \"whisker-958d645f6-nz2bh\" (UID: \"b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab\") " pod="calico-system/whisker-958d645f6-nz2bh" Jul 12 00:39:59.112000 audit[3312]: AVC avc: denied { write } for pid=3312 comm="tee" name="fd" dev="proc" ino=19342 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.112000 audit[3312]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc07fd7ed a2=241 a3=1b6 items=1 ppid=3270 pid=3312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.112000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 12 00:39:59.112000 audit: PATH item=0 name="/dev/fd/63" inode=19339 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.112000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.115000 audit[3322]: AVC avc: denied { write } for pid=3322 comm="tee" name="fd" dev="proc" ino=19524 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.115000 audit[3322]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd5a7e7ed a2=241 a3=1b6 items=1 ppid=3271 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.115000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 12 00:39:59.115000 audit: PATH item=0 name="/dev/fd/63" inode=17371 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.115000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.116000 audit[3321]: AVC avc: denied { write } for pid=3321 comm="tee" name="fd" dev="proc" ino=19528 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.116000 audit[3321]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd589d7ee a2=241 a3=1b6 items=1 ppid=3263 pid=3321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.116000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 12 00:39:59.116000 audit: PATH item=0 name="/dev/fd/63" inode=18145 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.116000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.123000 audit[3293]: AVC avc: denied { write } for pid=3293 comm="tee" name="fd" dev="proc" ino=18148 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.123000 audit[3293]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff31247ef a2=241 a3=1b6 items=1 ppid=3266 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.123000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 12 00:39:59.123000 audit: PATH item=0 name="/dev/fd/63" inode=18140 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.130000 audit[3309]: AVC avc: denied { write } for pid=3309 comm="tee" name="fd" dev="proc" ino=17376 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.130000 audit[3309]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc5ea07dd a2=241 a3=1b6 items=1 ppid=3265 pid=3309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.130000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 12 00:39:59.130000 audit: PATH item=0 name="/dev/fd/63" inode=19517 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.130000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.144000 audit[3336]: AVC avc: denied { write } for pid=3336 comm="tee" name="fd" dev="proc" ino=19541 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.144000 audit[3336]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc02d17de a2=241 a3=1b6 items=1 ppid=3272 pid=3336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.144000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 12 00:39:59.144000 audit: PATH item=0 name="/dev/fd/63" inode=19536 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.144000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.157000 audit[3342]: AVC avc: denied { write } for pid=3342 comm="tee" name="fd" dev="proc" ino=19351 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 12 00:39:59.157000 audit[3342]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffca3c87ed a2=241 a3=1b6 items=1 ppid=3264 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.157000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 12 00:39:59.157000 audit: PATH item=0 name="/dev/fd/63" inode=19348 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 12 00:39:59.157000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 12 00:39:59.340688 env[1222]: time="2025-07-12T00:39:59.340634110Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-958d645f6-nz2bh,Uid:b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab,Namespace:calico-system,Attempt:0,}" Jul 12 00:39:59.518030 systemd-networkd[1045]: cali9177d95e3e1: Link UP Jul 12 00:39:59.520025 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:39:59.520072 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9177d95e3e1: link becomes ready Jul 12 00:39:59.519500 systemd-networkd[1045]: cali9177d95e3e1: Gained carrier Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.413 [INFO][3356] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.426 [INFO][3356] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--958d645f6--nz2bh-eth0 whisker-958d645f6- calico-system b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab 878 0 2025-07-12 00:39:59 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:958d645f6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-958d645f6-nz2bh eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali9177d95e3e1 [] [] }} ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.426 [INFO][3356] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.459 [INFO][3370] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" HandleID="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Workload="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.460 [INFO][3370] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" HandleID="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Workload="localhost-k8s-whisker--958d645f6--nz2bh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd510), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-958d645f6-nz2bh", "timestamp":"2025-07-12 00:39:59.45980992 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.460 [INFO][3370] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.460 [INFO][3370] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.460 [INFO][3370] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.473 [INFO][3370] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.486 [INFO][3370] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.490 [INFO][3370] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.492 [INFO][3370] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.494 [INFO][3370] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.494 [INFO][3370] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.496 [INFO][3370] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.499 [INFO][3370] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.504 [INFO][3370] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.504 [INFO][3370] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" host="localhost" Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.504 [INFO][3370] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:39:59.530901 env[1222]: 2025-07-12 00:39:59.504 [INFO][3370] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" HandleID="k8s-pod-network.feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Workload="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.532011 env[1222]: 2025-07-12 00:39:59.506 [INFO][3356] cni-plugin/k8s.go 418: Populated endpoint ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--958d645f6--nz2bh-eth0", GenerateName:"whisker-958d645f6-", Namespace:"calico-system", SelfLink:"", UID:"b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"958d645f6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-958d645f6-nz2bh", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali9177d95e3e1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:39:59.532011 env[1222]: 2025-07-12 00:39:59.506 [INFO][3356] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.532011 env[1222]: 2025-07-12 00:39:59.508 [INFO][3356] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9177d95e3e1 ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.532011 env[1222]: 2025-07-12 00:39:59.519 [INFO][3356] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.532011 env[1222]: 2025-07-12 00:39:59.519 [INFO][3356] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--958d645f6--nz2bh-eth0", GenerateName:"whisker-958d645f6-", Namespace:"calico-system", SelfLink:"", UID:"b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"958d645f6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a", Pod:"whisker-958d645f6-nz2bh", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali9177d95e3e1", MAC:"7a:a5:c4:57:95:23", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:39:59.532011 env[1222]: 2025-07-12 00:39:59.528 [INFO][3356] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a" Namespace="calico-system" Pod="whisker-958d645f6-nz2bh" WorkloadEndpoint="localhost-k8s-whisker--958d645f6--nz2bh-eth0" Jul 12 00:39:59.541538 env[1222]: time="2025-07-12T00:39:59.541442434Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:39:59.541538 env[1222]: time="2025-07-12T00:39:59.541494754Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:39:59.541538 env[1222]: time="2025-07-12T00:39:59.541505074Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:39:59.541990 env[1222]: time="2025-07-12T00:39:59.541944714Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a pid=3395 runtime=io.containerd.runc.v2 Jul 12 00:39:59.557728 systemd[1]: Started cri-containerd-feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a.scope. Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.618000 audit: BPF prog-id=136 op=LOAD Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3395 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665636132383535313265386538663430623163346161643938313864 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3395 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665636132383535313265386538663430623163346161643938313864 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.620000 audit: BPF prog-id=137 op=LOAD Jul 12 00:39:59.620000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3395 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665636132383535313265386538663430623163346161643938313864 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.621000 audit: BPF prog-id=138 op=LOAD Jul 12 00:39:59.621000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3395 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665636132383535313265386538663430623163346161643938313864 Jul 12 00:39:59.621000 audit: BPF prog-id=138 op=UNLOAD Jul 12 00:39:59.621000 audit: BPF prog-id=137 op=UNLOAD Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { perfmon } for pid=3405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit[3405]: AVC avc: denied { bpf } for pid=3405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:39:59.622000 audit: BPF prog-id=139 op=LOAD Jul 12 00:39:59.622000 audit[3405]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3395 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:39:59.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665636132383535313265386538663430623163346161643938313864 Jul 12 00:39:59.624725 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:39:59.641960 env[1222]: time="2025-07-12T00:39:59.641887956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-958d645f6-nz2bh,Uid:b6cc8c78-f43d-40ed-a2fa-2e50b3ce53ab,Namespace:calico-system,Attempt:0,} returns sandbox id \"feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a\"" Jul 12 00:39:59.643491 env[1222]: time="2025-07-12T00:39:59.643457157Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 12 00:39:59.868285 kubelet[1958]: I0712 00:39:59.868240 1958 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="316e97b3-0094-475b-8d95-317e1102cb14" path="/var/lib/kubelet/pods/316e97b3-0094-475b-8d95-317e1102cb14/volumes" Jul 12 00:40:00.867793 env[1222]: time="2025-07-12T00:40:00.867749008Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:00.869208 env[1222]: time="2025-07-12T00:40:00.869178648Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:00.871314 env[1222]: time="2025-07-12T00:40:00.871280689Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:00.872954 env[1222]: time="2025-07-12T00:40:00.872924490Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:00.873651 env[1222]: time="2025-07-12T00:40:00.873622370Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 12 00:40:00.876016 env[1222]: time="2025-07-12T00:40:00.875981811Z" level=info msg="CreateContainer within sandbox \"feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 12 00:40:00.889653 env[1222]: time="2025-07-12T00:40:00.889606456Z" level=info msg="CreateContainer within sandbox \"feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"e8837678f956c481c31195688cc0e81f5802fdc26d1685876ddf5297fdc6c338\"" Jul 12 00:40:00.890229 env[1222]: time="2025-07-12T00:40:00.890191896Z" level=info msg="StartContainer for \"e8837678f956c481c31195688cc0e81f5802fdc26d1685876ddf5297fdc6c338\"" Jul 12 00:40:00.914168 systemd[1]: run-containerd-runc-k8s.io-e8837678f956c481c31195688cc0e81f5802fdc26d1685876ddf5297fdc6c338-runc.5IOGEs.mount: Deactivated successfully. Jul 12 00:40:00.916849 systemd[1]: Started cri-containerd-e8837678f956c481c31195688cc0e81f5802fdc26d1685876ddf5297fdc6c338.scope. Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.934000 audit: BPF prog-id=140 op=LOAD Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3395 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:00.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383337363738663935366334383163333131393536383863633065 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3395 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:00.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383337363738663935366334383163333131393536383863633065 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit: BPF prog-id=141 op=LOAD Jul 12 00:40:00.935000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3395 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:00.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383337363738663935366334383163333131393536383863633065 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit: BPF prog-id=142 op=LOAD Jul 12 00:40:00.935000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3395 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:00.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383337363738663935366334383163333131393536383863633065 Jul 12 00:40:00.935000 audit: BPF prog-id=142 op=UNLOAD Jul 12 00:40:00.935000 audit: BPF prog-id=141 op=UNLOAD Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:00.935000 audit: BPF prog-id=143 op=LOAD Jul 12 00:40:00.935000 audit[3461]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3395 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:00.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538383337363738663935366334383163333131393536383863633065 Jul 12 00:40:00.956436 env[1222]: time="2025-07-12T00:40:00.956385602Z" level=info msg="StartContainer for \"e8837678f956c481c31195688cc0e81f5802fdc26d1685876ddf5297fdc6c338\" returns successfully" Jul 12 00:40:00.957590 env[1222]: time="2025-07-12T00:40:00.957536523Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 12 00:40:00.977000 audit[3472]: AVC avc: denied { search } for pid=3472 comm="nginx" name="crypto" dev="proc" ino=20524 scontext=system_u:system_r:svirt_lxc_net_t:s0:c897,c996 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 12 00:40:00.977000 audit[3472]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff98931958 a2=0 a3=0 items=0 ppid=3395 pid=3472 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c897,c996 key=(null) Jul 12 00:40:00.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 12 00:40:01.116703 systemd-networkd[1045]: cali9177d95e3e1: Gained IPv6LL Jul 12 00:40:03.106171 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1191087685.mount: Deactivated successfully. Jul 12 00:40:03.141871 env[1222]: time="2025-07-12T00:40:03.141816459Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:03.143661 env[1222]: time="2025-07-12T00:40:03.143623500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:03.144974 env[1222]: time="2025-07-12T00:40:03.144940900Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:03.146419 env[1222]: time="2025-07-12T00:40:03.146389061Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:03.146926 env[1222]: time="2025-07-12T00:40:03.146894101Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 12 00:40:03.148861 env[1222]: time="2025-07-12T00:40:03.148823342Z" level=info msg="CreateContainer within sandbox \"feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 12 00:40:03.161416 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount112750781.mount: Deactivated successfully. Jul 12 00:40:03.163080 env[1222]: time="2025-07-12T00:40:03.163040946Z" level=info msg="CreateContainer within sandbox \"feca285512e8e8f40b1c4aad9818d962453319f74d6553f1b9b53ce864aa970a\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"333c3855b0df9cb8372c6ac99205fce40e4d4dd9e04ace829f6fc5da0af64d49\"" Jul 12 00:40:03.163869 env[1222]: time="2025-07-12T00:40:03.163829106Z" level=info msg="StartContainer for \"333c3855b0df9cb8372c6ac99205fce40e4d4dd9e04ace829f6fc5da0af64d49\"" Jul 12 00:40:03.185506 systemd[1]: Started cri-containerd-333c3855b0df9cb8372c6ac99205fce40e4d4dd9e04ace829f6fc5da0af64d49.scope. Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230290 kernel: kauditd_printk_skb: 185 callbacks suppressed Jul 12 00:40:03.230368 kernel: audit: type=1400 audit(1752280803.226:1052): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230393 kernel: audit: type=1400 audit(1752280803.226:1053): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.232097 kernel: audit: type=1400 audit(1752280803.226:1054): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.236039 kernel: audit: type=1400 audit(1752280803.226:1055): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.236119 kernel: audit: type=1400 audit(1752280803.226:1056): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.239650 kernel: audit: type=1400 audit(1752280803.226:1057): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.239711 kernel: audit: type=1400 audit(1752280803.226:1058): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.243630 kernel: audit: type=1400 audit(1752280803.226:1059): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.243691 kernel: audit: type=1400 audit(1752280803.226:1060): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.245398 kernel: audit: type=1400 audit(1752280803.226:1061): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.226000 audit: BPF prog-id=144 op=LOAD Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3395 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:03.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333336333383535623064663963623833373263366163393932303566 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3395 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:03.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333336333383535623064663963623833373263366163393932303566 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.227000 audit: BPF prog-id=145 op=LOAD Jul 12 00:40:03.227000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3395 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:03.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333336333383535623064663963623833373263366163393932303566 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.228000 audit: BPF prog-id=146 op=LOAD Jul 12 00:40:03.228000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3395 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:03.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333336333383535623064663963623833373263366163393932303566 Jul 12 00:40:03.230000 audit: BPF prog-id=146 op=UNLOAD Jul 12 00:40:03.230000 audit: BPF prog-id=145 op=UNLOAD Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { perfmon } for pid=3551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit[3551]: AVC avc: denied { bpf } for pid=3551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:03.230000 audit: BPF prog-id=147 op=LOAD Jul 12 00:40:03.230000 audit[3551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3395 pid=3551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:03.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333336333383535623064663963623833373263366163393932303566 Jul 12 00:40:03.264340 env[1222]: time="2025-07-12T00:40:03.261700298Z" level=info msg="StartContainer for \"333c3855b0df9cb8372c6ac99205fce40e4d4dd9e04ace829f6fc5da0af64d49\" returns successfully" Jul 12 00:40:04.009852 kubelet[1958]: I0712 00:40:04.009790 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-958d645f6-nz2bh" podStartSLOduration=1.505338396 podStartE2EDuration="5.00977166s" podCreationTimestamp="2025-07-12 00:39:59 +0000 UTC" firstStartedPulling="2025-07-12 00:39:59.643211357 +0000 UTC m=+31.859014554" lastFinishedPulling="2025-07-12 00:40:03.147644621 +0000 UTC m=+35.363447818" observedRunningTime="2025-07-12 00:40:04.00865674 +0000 UTC m=+36.224459937" watchObservedRunningTime="2025-07-12 00:40:04.00977166 +0000 UTC m=+36.225574817" Jul 12 00:40:04.058000 audit[3605]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3605 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:04.058000 audit[3605]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc66465b0 a2=0 a3=1 items=0 ppid=2065 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:04.058000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:04.066000 audit[3605]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3605 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:04.066000 audit[3605]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffc66465b0 a2=0 a3=1 items=0 ppid=2065 pid=3605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:04.066000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:05.249901 systemd[1]: Started sshd@7-10.0.0.133:22-10.0.0.1:43724.service. Jul 12 00:40:05.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.133:22-10.0.0.1:43724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:05.291000 audit[3636]: USER_ACCT pid=3636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:05.293772 sshd[3636]: Accepted publickey for core from 10.0.0.1 port 43724 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:05.293000 audit[3636]: CRED_ACQ pid=3636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:05.293000 audit[3636]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd252270 a2=3 a3=1 items=0 ppid=1 pid=3636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:05.293000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:05.295129 sshd[3636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:05.299422 systemd-logind[1208]: New session 8 of user core. Jul 12 00:40:05.299784 systemd[1]: Started session-8.scope. Jul 12 00:40:05.301000 audit[3636]: USER_START pid=3636 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:05.303000 audit[3638]: CRED_ACQ pid=3638 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:05.477255 sshd[3636]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:05.476000 audit[3636]: USER_END pid=3636 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:05.476000 audit[3636]: CRED_DISP pid=3636 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:05.479830 systemd[1]: sshd@7-10.0.0.133:22-10.0.0.1:43724.service: Deactivated successfully. Jul 12 00:40:05.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.133:22-10.0.0.1:43724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:05.480600 systemd[1]: session-8.scope: Deactivated successfully. Jul 12 00:40:05.481071 systemd-logind[1208]: Session 8 logged out. Waiting for processes to exit. Jul 12 00:40:05.481750 systemd-logind[1208]: Removed session 8. Jul 12 00:40:05.834646 kubelet[1958]: I0712 00:40:05.833939 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:40:05.867484 env[1222]: time="2025-07-12T00:40:05.867444768Z" level=info msg="StopPodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\"" Jul 12 00:40:05.868746 env[1222]: time="2025-07-12T00:40:05.867719008Z" level=info msg="StopPodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\"" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.932 [INFO][3713] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.932 [INFO][3713] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" iface="eth0" netns="/var/run/netns/cni-029bab05-60b1-a7f3-374b-437fcf6ee607" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.933 [INFO][3713] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" iface="eth0" netns="/var/run/netns/cni-029bab05-60b1-a7f3-374b-437fcf6ee607" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.934 [INFO][3713] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" iface="eth0" netns="/var/run/netns/cni-029bab05-60b1-a7f3-374b-437fcf6ee607" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.934 [INFO][3713] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.934 [INFO][3713] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.958 [INFO][3742] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.958 [INFO][3742] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.958 [INFO][3742] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.974 [WARNING][3742] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.974 [INFO][3742] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.981 [INFO][3742] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:05.989736 env[1222]: 2025-07-12 00:40:05.987 [INFO][3713] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:05.992374 env[1222]: time="2025-07-12T00:40:05.992320043Z" level=info msg="TearDown network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" successfully" Jul 12 00:40:05.992480 env[1222]: time="2025-07-12T00:40:05.992364323Z" level=info msg="StopPodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" returns successfully" Jul 12 00:40:05.994091 systemd[1]: run-netns-cni\x2d029bab05\x2d60b1\x2da7f3\x2d374b\x2d437fcf6ee607.mount: Deactivated successfully. Jul 12 00:40:05.996270 env[1222]: time="2025-07-12T00:40:05.996085804Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-t26mx,Uid:752c67a8-1e1d-4600-9633-efa79d989209,Namespace:calico-system,Attempt:1,}" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.922 [INFO][3712] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.922 [INFO][3712] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" iface="eth0" netns="/var/run/netns/cni-a0b9d332-fd41-99ef-5e39-b9ea8b56ae6f" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.923 [INFO][3712] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" iface="eth0" netns="/var/run/netns/cni-a0b9d332-fd41-99ef-5e39-b9ea8b56ae6f" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.924 [INFO][3712] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" iface="eth0" netns="/var/run/netns/cni-a0b9d332-fd41-99ef-5e39-b9ea8b56ae6f" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.924 [INFO][3712] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.924 [INFO][3712] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.963 [INFO][3734] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.963 [INFO][3734] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.981 [INFO][3734] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.991 [WARNING][3734] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.991 [INFO][3734] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.996 [INFO][3734] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:06.001521 env[1222]: 2025-07-12 00:40:05.998 [INFO][3712] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:06.002142 env[1222]: time="2025-07-12T00:40:06.002115686Z" level=info msg="TearDown network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" successfully" Jul 12 00:40:06.002231 env[1222]: time="2025-07-12T00:40:06.002215326Z" level=info msg="StopPodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" returns successfully" Jul 12 00:40:06.004048 systemd[1]: run-netns-cni\x2da0b9d332\x2dfd41\x2d99ef\x2d5e39\x2db9ea8b56ae6f.mount: Deactivated successfully. Jul 12 00:40:06.005261 env[1222]: time="2025-07-12T00:40:06.005225647Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-2jgsc,Uid:216424c2-1c1e-4a37-bd40-df86a8d6aac3,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:40:06.160899 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:40:06.161015 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif77468b96d8: link becomes ready Jul 12 00:40:06.159546 systemd-networkd[1045]: calif77468b96d8: Link UP Jul 12 00:40:06.160924 systemd-networkd[1045]: calif77468b96d8: Gained carrier Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.072 [INFO][3772] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.086 [INFO][3772] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--t26mx-eth0 goldmane-768f4c5c69- calico-system 752c67a8-1e1d-4600-9633-efa79d989209 945 0 2025-07-12 00:39:45 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-t26mx eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calif77468b96d8 [] [] }} ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.086 [INFO][3772] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.112 [INFO][3802] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" HandleID="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.112 [INFO][3802] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" HandleID="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3010), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-t26mx", "timestamp":"2025-07-12 00:40:06.112785916 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.112 [INFO][3802] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.113 [INFO][3802] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.113 [INFO][3802] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.125 [INFO][3802] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.133 [INFO][3802] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.137 [INFO][3802] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.138 [INFO][3802] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.140 [INFO][3802] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.141 [INFO][3802] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.142 [INFO][3802] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.146 [INFO][3802] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.153 [INFO][3802] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.153 [INFO][3802] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" host="localhost" Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.153 [INFO][3802] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:06.176203 env[1222]: 2025-07-12 00:40:06.153 [INFO][3802] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" HandleID="k8s-pod-network.cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.176829 env[1222]: 2025-07-12 00:40:06.157 [INFO][3772] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--t26mx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"752c67a8-1e1d-4600-9633-efa79d989209", ResourceVersion:"945", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-t26mx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif77468b96d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:06.176829 env[1222]: 2025-07-12 00:40:06.157 [INFO][3772] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.176829 env[1222]: 2025-07-12 00:40:06.157 [INFO][3772] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif77468b96d8 ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.176829 env[1222]: 2025-07-12 00:40:06.164 [INFO][3772] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.176829 env[1222]: 2025-07-12 00:40:06.165 [INFO][3772] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--t26mx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"752c67a8-1e1d-4600-9633-efa79d989209", ResourceVersion:"945", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e", Pod:"goldmane-768f4c5c69-t26mx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif77468b96d8", MAC:"ee:d4:ce:a3:3a:20", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:06.176829 env[1222]: 2025-07-12 00:40:06.174 [INFO][3772] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e" Namespace="calico-system" Pod="goldmane-768f4c5c69-t26mx" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:06.185783 env[1222]: time="2025-07-12T00:40:06.185708535Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:06.185783 env[1222]: time="2025-07-12T00:40:06.185752215Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:06.185783 env[1222]: time="2025-07-12T00:40:06.185762735Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:06.186073 env[1222]: time="2025-07-12T00:40:06.186034135Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e pid=3836 runtime=io.containerd.runc.v2 Jul 12 00:40:06.195960 systemd[1]: Started cri-containerd-cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e.scope. Jul 12 00:40:06.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit: BPF prog-id=148 op=LOAD Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3836 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313234636231633762343865656261663437666634623166373535 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3836 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313234636231633762343865656261663437666634623166373535 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit: BPF prog-id=149 op=LOAD Jul 12 00:40:06.211000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3836 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313234636231633762343865656261663437666634623166373535 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit: BPF prog-id=150 op=LOAD Jul 12 00:40:06.211000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3836 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313234636231633762343865656261663437666634623166373535 Jul 12 00:40:06.211000 audit: BPF prog-id=150 op=UNLOAD Jul 12 00:40:06.211000 audit: BPF prog-id=149 op=UNLOAD Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.211000 audit: BPF prog-id=151 op=LOAD Jul 12 00:40:06.211000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3836 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313234636231633762343865656261663437666634623166373535 Jul 12 00:40:06.213991 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:06.232564 env[1222]: time="2025-07-12T00:40:06.232516307Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-t26mx,Uid:752c67a8-1e1d-4600-9633-efa79d989209,Namespace:calico-system,Attempt:1,} returns sandbox id \"cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e\"" Jul 12 00:40:06.235911 env[1222]: time="2025-07-12T00:40:06.235883788Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 12 00:40:06.257956 systemd-networkd[1045]: calic8de7be936b: Link UP Jul 12 00:40:06.258639 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic8de7be936b: link becomes ready Jul 12 00:40:06.258674 systemd-networkd[1045]: calic8de7be936b: Gained carrier Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.076 [INFO][3783] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.099 [INFO][3783] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0 calico-apiserver-5fcc9669f- calico-apiserver 216424c2-1c1e-4a37-bd40-df86a8d6aac3 944 0 2025-07-12 00:39:42 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5fcc9669f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5fcc9669f-2jgsc eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic8de7be936b [] [] }} ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.099 [INFO][3783] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.136 [INFO][3809] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" HandleID="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.137 [INFO][3809] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" HandleID="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d8e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5fcc9669f-2jgsc", "timestamp":"2025-07-12 00:40:06.136953882 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.137 [INFO][3809] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.153 [INFO][3809] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.153 [INFO][3809] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.224 [INFO][3809] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.234 [INFO][3809] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.239 [INFO][3809] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.240 [INFO][3809] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.242 [INFO][3809] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.242 [INFO][3809] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.245 [INFO][3809] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.249 [INFO][3809] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.254 [INFO][3809] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.254 [INFO][3809] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" host="localhost" Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.254 [INFO][3809] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:06.270524 env[1222]: 2025-07-12 00:40:06.254 [INFO][3809] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" HandleID="k8s-pod-network.d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.271196 env[1222]: 2025-07-12 00:40:06.256 [INFO][3783] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"216424c2-1c1e-4a37-bd40-df86a8d6aac3", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5fcc9669f-2jgsc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic8de7be936b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:06.271196 env[1222]: 2025-07-12 00:40:06.256 [INFO][3783] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.271196 env[1222]: 2025-07-12 00:40:06.256 [INFO][3783] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic8de7be936b ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.271196 env[1222]: 2025-07-12 00:40:06.258 [INFO][3783] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.271196 env[1222]: 2025-07-12 00:40:06.259 [INFO][3783] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"216424c2-1c1e-4a37-bd40-df86a8d6aac3", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a", Pod:"calico-apiserver-5fcc9669f-2jgsc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic8de7be936b", MAC:"ce:47:09:4c:ea:72", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:06.271196 env[1222]: 2025-07-12 00:40:06.268 [INFO][3783] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-2jgsc" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:06.279485 env[1222]: time="2025-07-12T00:40:06.279410520Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:06.279485 env[1222]: time="2025-07-12T00:40:06.279449320Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:06.279485 env[1222]: time="2025-07-12T00:40:06.279460320Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:06.279957 env[1222]: time="2025-07-12T00:40:06.279923240Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a pid=3885 runtime=io.containerd.runc.v2 Jul 12 00:40:06.290098 systemd[1]: Started cri-containerd-d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a.scope. Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit: BPF prog-id=152 op=LOAD Jul 12 00:40:06.306000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[3895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3885 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643839386137326463383934393437633735643361653861396433 Jul 12 00:40:06.306000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.306000 audit[3895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3885 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643839386137326463383934393437633735643361653861396433 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit: BPF prog-id=153 op=LOAD Jul 12 00:40:06.307000 audit[3895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3885 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643839386137326463383934393437633735643361653861396433 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit: BPF prog-id=154 op=LOAD Jul 12 00:40:06.307000 audit[3895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3885 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643839386137326463383934393437633735643361653861396433 Jul 12 00:40:06.307000 audit: BPF prog-id=154 op=UNLOAD Jul 12 00:40:06.307000 audit: BPF prog-id=153 op=UNLOAD Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { perfmon } for pid=3895 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit[3895]: AVC avc: denied { bpf } for pid=3895 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:06.307000 audit: BPF prog-id=155 op=LOAD Jul 12 00:40:06.307000 audit[3895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3885 pid=3895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:06.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643839386137326463383934393437633735643361653861396433 Jul 12 00:40:06.309309 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:06.325144 env[1222]: time="2025-07-12T00:40:06.325106252Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-2jgsc,Uid:216424c2-1c1e-4a37-bd40-df86a8d6aac3,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a\"" Jul 12 00:40:06.868162 env[1222]: time="2025-07-12T00:40:06.868122037Z" level=info msg="StopPodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\"" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.911 [INFO][3952] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.911 [INFO][3952] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" iface="eth0" netns="/var/run/netns/cni-ea815087-4324-b1ad-7d1b-4a3bbd3a4840" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.911 [INFO][3952] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" iface="eth0" netns="/var/run/netns/cni-ea815087-4324-b1ad-7d1b-4a3bbd3a4840" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.911 [INFO][3952] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" iface="eth0" netns="/var/run/netns/cni-ea815087-4324-b1ad-7d1b-4a3bbd3a4840" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.911 [INFO][3952] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.911 [INFO][3952] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.931 [INFO][3960] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.932 [INFO][3960] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.932 [INFO][3960] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.940 [WARNING][3960] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.940 [INFO][3960] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.941 [INFO][3960] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:06.945353 env[1222]: 2025-07-12 00:40:06.943 [INFO][3952] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:06.947101 env[1222]: time="2025-07-12T00:40:06.945480098Z" level=info msg="TearDown network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" successfully" Jul 12 00:40:06.947101 env[1222]: time="2025-07-12T00:40:06.945509338Z" level=info msg="StopPodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" returns successfully" Jul 12 00:40:06.947158 kubelet[1958]: E0712 00:40:06.945796 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:06.947398 env[1222]: time="2025-07-12T00:40:06.947099258Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dg9j,Uid:bb5b6643-082f-48ed-a008-dcfa21e5ea7a,Namespace:kube-system,Attempt:1,}" Jul 12 00:40:06.947548 systemd[1]: run-netns-cni\x2dea815087\x2d4324\x2db1ad\x2d7d1b\x2d4a3bbd3a4840.mount: Deactivated successfully. Jul 12 00:40:07.150414 systemd-networkd[1045]: cali2b2661d9751: Link UP Jul 12 00:40:07.154263 systemd-networkd[1045]: cali2b2661d9751: Gained carrier Jul 12 00:40:07.154898 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2b2661d9751: link becomes ready Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.001 [INFO][3967] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.048 [INFO][3967] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0 coredns-668d6bf9bc- kube-system bb5b6643-082f-48ed-a008-dcfa21e5ea7a 962 0 2025-07-12 00:39:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-6dg9j eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2b2661d9751 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.048 [INFO][3967] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.100 [INFO][3981] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" HandleID="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.100 [INFO][3981] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" HandleID="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d7a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-6dg9j", "timestamp":"2025-07-12 00:40:07.100333737 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.100 [INFO][3981] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.101 [INFO][3981] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.101 [INFO][3981] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.118 [INFO][3981] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.124 [INFO][3981] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.130 [INFO][3981] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.131 [INFO][3981] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.134 [INFO][3981] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.134 [INFO][3981] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.135 [INFO][3981] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920 Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.140 [INFO][3981] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.146 [INFO][3981] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.146 [INFO][3981] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" host="localhost" Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.146 [INFO][3981] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:07.166766 env[1222]: 2025-07-12 00:40:07.146 [INFO][3981] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" HandleID="k8s-pod-network.a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.167397 env[1222]: 2025-07-12 00:40:07.148 [INFO][3967] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"bb5b6643-082f-48ed-a008-dcfa21e5ea7a", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-6dg9j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2b2661d9751", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:07.167397 env[1222]: 2025-07-12 00:40:07.148 [INFO][3967] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.167397 env[1222]: 2025-07-12 00:40:07.148 [INFO][3967] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2b2661d9751 ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.167397 env[1222]: 2025-07-12 00:40:07.154 [INFO][3967] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.167397 env[1222]: 2025-07-12 00:40:07.155 [INFO][3967] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"bb5b6643-082f-48ed-a008-dcfa21e5ea7a", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920", Pod:"coredns-668d6bf9bc-6dg9j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2b2661d9751", MAC:"16:5c:b3:2d:7e:da", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:07.167397 env[1222]: 2025-07-12 00:40:07.164 [INFO][3967] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920" Namespace="kube-system" Pod="coredns-668d6bf9bc-6dg9j" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:07.184180 env[1222]: time="2025-07-12T00:40:07.184102878Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:07.184180 env[1222]: time="2025-07-12T00:40:07.184143558Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:07.184180 env[1222]: time="2025-07-12T00:40:07.184154118Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:07.184649 env[1222]: time="2025-07-12T00:40:07.184490838Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920 pid=4006 runtime=io.containerd.runc.v2 Jul 12 00:40:07.194825 systemd[1]: Started cri-containerd-a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920.scope. Jul 12 00:40:07.198097 systemd-networkd[1045]: calif77468b96d8: Gained IPv6LL Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.214000 audit: BPF prog-id=156 op=LOAD Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4006 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323339303635376561336538386432346234313332346137373531 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4006 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323339303635376561336538386432346234313332346137373531 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.215000 audit: BPF prog-id=157 op=LOAD Jul 12 00:40:07.215000 audit[4015]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4006 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323339303635376561336538386432346234313332346137373531 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.216000 audit: BPF prog-id=158 op=LOAD Jul 12 00:40:07.216000 audit[4015]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4006 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323339303635376561336538386432346234313332346137373531 Jul 12 00:40:07.217000 audit: BPF prog-id=158 op=UNLOAD Jul 12 00:40:07.217000 audit: BPF prog-id=157 op=UNLOAD Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { perfmon } for pid=4015 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit[4015]: AVC avc: denied { bpf } for pid=4015 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.217000 audit: BPF prog-id=159 op=LOAD Jul 12 00:40:07.217000 audit[4015]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4006 pid=4015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.217000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130323339303635376561336538386432346234313332346137373531 Jul 12 00:40:07.219835 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:07.239545 env[1222]: time="2025-07-12T00:40:07.239177692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-6dg9j,Uid:bb5b6643-082f-48ed-a008-dcfa21e5ea7a,Namespace:kube-system,Attempt:1,} returns sandbox id \"a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920\"" Jul 12 00:40:07.241742 kubelet[1958]: E0712 00:40:07.240379 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:07.244861 env[1222]: time="2025-07-12T00:40:07.244824614Z" level=info msg="CreateContainer within sandbox \"a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:40:07.284682 env[1222]: time="2025-07-12T00:40:07.284622343Z" level=info msg="CreateContainer within sandbox \"a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"b17c52fe8c17a5177f7cd5e321002f392a13a43d375827f72fab39e0c0f98383\"" Jul 12 00:40:07.285626 env[1222]: time="2025-07-12T00:40:07.285600464Z" level=info msg="StartContainer for \"b17c52fe8c17a5177f7cd5e321002f392a13a43d375827f72fab39e0c0f98383\"" Jul 12 00:40:07.301598 systemd[1]: Started cri-containerd-b17c52fe8c17a5177f7cd5e321002f392a13a43d375827f72fab39e0c0f98383.scope. Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit: BPF prog-id=160 op=LOAD Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4006 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376335326665386331376135313737663763643565333231303032 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4006 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376335326665386331376135313737663763643565333231303032 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit: BPF prog-id=161 op=LOAD Jul 12 00:40:07.322000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4006 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376335326665386331376135313737663763643565333231303032 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit: BPF prog-id=162 op=LOAD Jul 12 00:40:07.322000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4006 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376335326665386331376135313737663763643565333231303032 Jul 12 00:40:07.322000 audit: BPF prog-id=162 op=UNLOAD Jul 12 00:40:07.322000 audit: BPF prog-id=161 op=UNLOAD Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:07.322000 audit: BPF prog-id=163 op=LOAD Jul 12 00:40:07.322000 audit[4045]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4006 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:07.322000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231376335326665386331376135313737663763643565333231303032 Jul 12 00:40:07.338380 env[1222]: time="2025-07-12T00:40:07.338308637Z" level=info msg="StartContainer for \"b17c52fe8c17a5177f7cd5e321002f392a13a43d375827f72fab39e0c0f98383\" returns successfully" Jul 12 00:40:07.389342 systemd-networkd[1045]: calic8de7be936b: Gained IPv6LL Jul 12 00:40:07.398000 audit[4054]: AVC avc: denied { getattr } for pid=4054 comm="coredns" path="cgroup:[4026532665]" dev="nsfs" ino=4026532665 scontext=system_u:system_r:svirt_lxc_net_t:s0:c107,c377 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:40:07.398000 audit[4054]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=4006 pid=4054 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c107,c377 key=(null) Jul 12 00:40:07.398000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:40:07.852193 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount895196047.mount: Deactivated successfully. Jul 12 00:40:08.016086 kubelet[1958]: E0712 00:40:08.016015 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:08.042000 audit[4102]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=4102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:08.042000 audit[4102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc1d30d60 a2=0 a3=1 items=0 ppid=2065 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:08.049000 audit[4102]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=4102 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:08.049000 audit[4102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc1d30d60 a2=0 a3=1 items=0 ppid=2065 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:08.061258 kubelet[1958]: I0712 00:40:08.061188 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-6dg9j" podStartSLOduration=34.061172057 podStartE2EDuration="34.061172057s" podCreationTimestamp="2025-07-12 00:39:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:40:08.047817694 +0000 UTC m=+40.263620931" watchObservedRunningTime="2025-07-12 00:40:08.061172057 +0000 UTC m=+40.276975254" Jul 12 00:40:08.075000 audit[4104]: NETFILTER_CFG table=filter:103 family=2 entries=17 op=nft_register_rule pid=4104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:08.075000 audit[4104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcdef2e30 a2=0 a3=1 items=0 ppid=2065 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:08.087000 audit[4104]: NETFILTER_CFG table=nat:104 family=2 entries=35 op=nft_register_chain pid=4104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:08.087000 audit[4104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffcdef2e30 a2=0 a3=1 items=0 ppid=2065 pid=4104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:08.591828 env[1222]: time="2025-07-12T00:40:08.591756781Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:08.593210 env[1222]: time="2025-07-12T00:40:08.593173462Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:08.595434 env[1222]: time="2025-07-12T00:40:08.595404342Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:08.597902 env[1222]: time="2025-07-12T00:40:08.597867143Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:08.598481 env[1222]: time="2025-07-12T00:40:08.598438023Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 12 00:40:08.600362 env[1222]: time="2025-07-12T00:40:08.600327183Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:40:08.601443 env[1222]: time="2025-07-12T00:40:08.601404663Z" level=info msg="CreateContainer within sandbox \"cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 12 00:40:08.611648 env[1222]: time="2025-07-12T00:40:08.611576506Z" level=info msg="CreateContainer within sandbox \"cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"33fc88b3a2292209b9cbe1a388573ac9b0424dcd86fa265376a19b43c63315bd\"" Jul 12 00:40:08.616768 env[1222]: time="2025-07-12T00:40:08.616732987Z" level=info msg="StartContainer for \"33fc88b3a2292209b9cbe1a388573ac9b0424dcd86fa265376a19b43c63315bd\"" Jul 12 00:40:08.647265 systemd[1]: Started cri-containerd-33fc88b3a2292209b9cbe1a388573ac9b0424dcd86fa265376a19b43c63315bd.scope. Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727241 kernel: kauditd_printk_skb: 307 callbacks suppressed Jul 12 00:40:08.727349 kernel: audit: type=1400 audit(1752280808.723:1158): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727519 kernel: audit: type=1400 audit(1752280808.723:1159): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.731490 kernel: audit: type=1400 audit(1752280808.723:1160): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.731549 kernel: audit: type=1400 audit(1752280808.723:1161): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.735639 kernel: audit: type=1400 audit(1752280808.723:1162): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.735694 kernel: audit: type=1400 audit(1752280808.723:1163): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.740309 kernel: audit: type=1400 audit(1752280808.723:1164): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.740390 kernel: audit: type=1400 audit(1752280808.723:1165): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.744172 kernel: audit: type=1400 audit(1752280808.723:1166): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.744226 kernel: audit: type=1400 audit(1752280808.723:1167): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.723000 audit: BPF prog-id=164 op=LOAD Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3836 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666338386233613232393232303962396362653161333838353733 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3836 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666338386233613232393232303962396362653161333838353733 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.724000 audit: BPF prog-id=165 op=LOAD Jul 12 00:40:08.724000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3836 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666338386233613232393232303962396362653161333838353733 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.726000 audit: BPF prog-id=166 op=LOAD Jul 12 00:40:08.726000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3836 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666338386233613232393232303962396362653161333838353733 Jul 12 00:40:08.727000 audit: BPF prog-id=166 op=UNLOAD Jul 12 00:40:08.727000 audit: BPF prog-id=165 op=UNLOAD Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { perfmon } for pid=4114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit[4114]: AVC avc: denied { bpf } for pid=4114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:08.727000 audit: BPF prog-id=167 op=LOAD Jul 12 00:40:08.727000 audit[4114]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3836 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:08.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333666338386233613232393232303962396362653161333838353733 Jul 12 00:40:08.758104 env[1222]: time="2025-07-12T00:40:08.758060300Z" level=info msg="StartContainer for \"33fc88b3a2292209b9cbe1a388573ac9b0424dcd86fa265376a19b43c63315bd\" returns successfully" Jul 12 00:40:08.869400 env[1222]: time="2025-07-12T00:40:08.866766886Z" level=info msg="StopPodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\"" Jul 12 00:40:08.870968 env[1222]: time="2025-07-12T00:40:08.866762966Z" level=info msg="StopPodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\"" Jul 12 00:40:08.870968 env[1222]: time="2025-07-12T00:40:08.866762966Z" level=info msg="StopPodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\"" Jul 12 00:40:08.870968 env[1222]: time="2025-07-12T00:40:08.866795006Z" level=info msg="StopPodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\"" Jul 12 00:40:09.020429 kubelet[1958]: E0712 00:40:09.020384 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:09.052978 systemd-networkd[1045]: cali2b2661d9751: Gained IPv6LL Jul 12 00:40:09.053519 kubelet[1958]: I0712 00:40:09.053229 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-t26mx" podStartSLOduration=21.687899494 podStartE2EDuration="24.053211929s" podCreationTimestamp="2025-07-12 00:39:45 +0000 UTC" firstStartedPulling="2025-07-12 00:40:06.234347428 +0000 UTC m=+38.450150625" lastFinishedPulling="2025-07-12 00:40:08.599659903 +0000 UTC m=+40.815463060" observedRunningTime="2025-07-12 00:40:09.052981409 +0000 UTC m=+41.268784606" watchObservedRunningTime="2025-07-12 00:40:09.053211929 +0000 UTC m=+41.269015126" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:08.974 [INFO][4199] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:08.975 [INFO][4199] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" iface="eth0" netns="/var/run/netns/cni-c9b412fc-c812-90b2-c70a-79551cc8d4f8" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:08.975 [INFO][4199] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" iface="eth0" netns="/var/run/netns/cni-c9b412fc-c812-90b2-c70a-79551cc8d4f8" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:08.975 [INFO][4199] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" iface="eth0" netns="/var/run/netns/cni-c9b412fc-c812-90b2-c70a-79551cc8d4f8" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:08.975 [INFO][4199] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:08.975 [INFO][4199] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.021 [INFO][4246] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.022 [INFO][4246] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.022 [INFO][4246] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.042 [WARNING][4246] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.042 [INFO][4246] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.053 [INFO][4246] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.059087 env[1222]: 2025-07-12 00:40:09.055 [INFO][4199] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:09.061334 systemd[1]: run-netns-cni\x2dc9b412fc\x2dc812\x2d90b2\x2dc70a\x2d79551cc8d4f8.mount: Deactivated successfully. Jul 12 00:40:09.062527 env[1222]: time="2025-07-12T00:40:09.062484691Z" level=info msg="TearDown network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" successfully" Jul 12 00:40:09.062649 env[1222]: time="2025-07-12T00:40:09.062526451Z" level=info msg="StopPodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" returns successfully" Jul 12 00:40:09.063595 env[1222]: time="2025-07-12T00:40:09.063546771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mb7w5,Uid:04117f3b-9ff5-49df-b39c-0dfb22b7f6ce,Namespace:calico-system,Attempt:1,}" Jul 12 00:40:09.069000 audit[4273]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=4273 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:09.069000 audit[4273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffeaf03510 a2=0 a3=1 items=0 ppid=2065 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:09.075000 audit[4273]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=4273 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:09.075000 audit[4273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffeaf03510 a2=0 a3=1 items=0 ppid=2065 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:08.954 [INFO][4193] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:08.954 [INFO][4193] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" iface="eth0" netns="/var/run/netns/cni-45ef3375-a0dc-2118-c1c1-aca56fd57143" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:08.954 [INFO][4193] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" iface="eth0" netns="/var/run/netns/cni-45ef3375-a0dc-2118-c1c1-aca56fd57143" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:08.954 [INFO][4193] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" iface="eth0" netns="/var/run/netns/cni-45ef3375-a0dc-2118-c1c1-aca56fd57143" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:08.954 [INFO][4193] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:08.954 [INFO][4193] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.058 [INFO][4236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.058 [INFO][4236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.058 [INFO][4236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.072 [WARNING][4236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.072 [INFO][4236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.075 [INFO][4236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.088670 env[1222]: 2025-07-12 00:40:09.080 [INFO][4193] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:09.090471 env[1222]: time="2025-07-12T00:40:09.088810536Z" level=info msg="TearDown network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" successfully" Jul 12 00:40:09.090471 env[1222]: time="2025-07-12T00:40:09.088845056Z" level=info msg="StopPodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" returns successfully" Jul 12 00:40:09.092827 systemd[1]: run-netns-cni\x2d45ef3375\x2da0dc\x2d2118\x2dc1c1\x2daca56fd57143.mount: Deactivated successfully. Jul 12 00:40:09.096435 env[1222]: time="2025-07-12T00:40:09.092933417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-vgpzb,Uid:26468c6c-6406-46a2-89b5-765ca62c9c7a,Namespace:calico-apiserver,Attempt:1,}" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.031 [INFO][4203] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.031 [INFO][4203] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" iface="eth0" netns="/var/run/netns/cni-d22bbd0d-6f9a-2c96-7043-d2c004ba8249" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.032 [INFO][4203] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" iface="eth0" netns="/var/run/netns/cni-d22bbd0d-6f9a-2c96-7043-d2c004ba8249" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.034 [INFO][4203] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" iface="eth0" netns="/var/run/netns/cni-d22bbd0d-6f9a-2c96-7043-d2c004ba8249" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.034 [INFO][4203] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.034 [INFO][4203] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.088 [INFO][4262] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.088 [INFO][4262] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.088 [INFO][4262] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.100 [WARNING][4262] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.100 [INFO][4262] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.103 [INFO][4262] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.110315 env[1222]: 2025-07-12 00:40:09.105 [INFO][4203] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:09.110866 systemd[1]: run-netns-cni\x2dd22bbd0d\x2d6f9a\x2d2c96\x2d7043\x2dd2c004ba8249.mount: Deactivated successfully. Jul 12 00:40:09.111079 env[1222]: time="2025-07-12T00:40:09.111037381Z" level=info msg="TearDown network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" successfully" Jul 12 00:40:09.111124 env[1222]: time="2025-07-12T00:40:09.111079221Z" level=info msg="StopPodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" returns successfully" Jul 12 00:40:09.111456 kubelet[1958]: E0712 00:40:09.111413 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:09.112249 env[1222]: time="2025-07-12T00:40:09.112219222Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fv96n,Uid:7c47756a-d15a-4eb6-8064-223428db82b1,Namespace:kube-system,Attempt:1,}" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:08.995 [INFO][4198] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:08.996 [INFO][4198] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" iface="eth0" netns="/var/run/netns/cni-ceb1355c-37e4-1d77-7d96-3a5bd271e1fd" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.007 [INFO][4198] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" iface="eth0" netns="/var/run/netns/cni-ceb1355c-37e4-1d77-7d96-3a5bd271e1fd" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.008 [INFO][4198] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" iface="eth0" netns="/var/run/netns/cni-ceb1355c-37e4-1d77-7d96-3a5bd271e1fd" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.008 [INFO][4198] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.008 [INFO][4198] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.102 [INFO][4255] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.103 [INFO][4255] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.103 [INFO][4255] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.121 [WARNING][4255] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.121 [INFO][4255] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.124 [INFO][4255] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.142240 env[1222]: 2025-07-12 00:40:09.137 [INFO][4198] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:09.147690 env[1222]: time="2025-07-12T00:40:09.147641589Z" level=info msg="TearDown network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" successfully" Jul 12 00:40:09.147843 env[1222]: time="2025-07-12T00:40:09.147822669Z" level=info msg="StopPodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" returns successfully" Jul 12 00:40:09.153170 env[1222]: time="2025-07-12T00:40:09.153130151Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dc9d689b8-c5vgk,Uid:b2b46589-3ded-452d-959c-f50f98e9b674,Namespace:calico-system,Attempt:1,}" Jul 12 00:40:09.269052 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 12 00:40:09.269482 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia5a18a3afb9: link becomes ready Jul 12 00:40:09.269154 systemd-networkd[1045]: calia5a18a3afb9: Link UP Jul 12 00:40:09.269764 systemd-networkd[1045]: calia5a18a3afb9: Gained carrier Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.151 [INFO][4282] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.167 [INFO][4282] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--mb7w5-eth0 csi-node-driver- calico-system 04117f3b-9ff5-49df-b39c-0dfb22b7f6ce 1003 0 2025-07-12 00:39:45 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-mb7w5 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calia5a18a3afb9 [] [] }} ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.168 [INFO][4282] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.214 [INFO][4321] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" HandleID="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.214 [INFO][4321] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" HandleID="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400012e4e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-mb7w5", "timestamp":"2025-07-12 00:40:09.214362644 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.214 [INFO][4321] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.215 [INFO][4321] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.215 [INFO][4321] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.228 [INFO][4321] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.234 [INFO][4321] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.240 [INFO][4321] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.242 [INFO][4321] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.245 [INFO][4321] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.245 [INFO][4321] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.247 [INFO][4321] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7 Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.253 [INFO][4321] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.259 [INFO][4321] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.259 [INFO][4321] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" host="localhost" Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.259 [INFO][4321] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.281300 env[1222]: 2025-07-12 00:40:09.259 [INFO][4321] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" HandleID="k8s-pod-network.73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.281947 env[1222]: 2025-07-12 00:40:09.262 [INFO][4282] cni-plugin/k8s.go 418: Populated endpoint ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--mb7w5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-mb7w5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia5a18a3afb9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.281947 env[1222]: 2025-07-12 00:40:09.262 [INFO][4282] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.281947 env[1222]: 2025-07-12 00:40:09.262 [INFO][4282] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia5a18a3afb9 ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.281947 env[1222]: 2025-07-12 00:40:09.270 [INFO][4282] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.281947 env[1222]: 2025-07-12 00:40:09.270 [INFO][4282] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--mb7w5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7", Pod:"csi-node-driver-mb7w5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia5a18a3afb9", MAC:"f2:09:95:cf:9a:4e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.281947 env[1222]: 2025-07-12 00:40:09.279 [INFO][4282] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7" Namespace="calico-system" Pod="csi-node-driver-mb7w5" WorkloadEndpoint="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:09.289947 env[1222]: time="2025-07-12T00:40:09.289877101Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:09.289947 env[1222]: time="2025-07-12T00:40:09.289922581Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:09.290079 env[1222]: time="2025-07-12T00:40:09.289947421Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:09.290253 env[1222]: time="2025-07-12T00:40:09.290203021Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7 pid=4387 runtime=io.containerd.runc.v2 Jul 12 00:40:09.300681 systemd[1]: Started cri-containerd-73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7.scope. Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.339000 audit: BPF prog-id=168 op=LOAD Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4387 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663039663830353639343832333630666337393236623137343535 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4387 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663039663830353639343832333630666337393236623137343535 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit: BPF prog-id=169 op=LOAD Jul 12 00:40:09.340000 audit[4399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4387 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663039663830353639343832333630666337393236623137343535 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit: BPF prog-id=170 op=LOAD Jul 12 00:40:09.340000 audit[4399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4387 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663039663830353639343832333630666337393236623137343535 Jul 12 00:40:09.340000 audit: BPF prog-id=170 op=UNLOAD Jul 12 00:40:09.340000 audit: BPF prog-id=169 op=UNLOAD Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { perfmon } for pid=4399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit[4399]: AVC avc: denied { bpf } for pid=4399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.340000 audit: BPF prog-id=171 op=LOAD Jul 12 00:40:09.340000 audit[4399]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4387 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733663039663830353639343832333630666337393236623137343535 Jul 12 00:40:09.343921 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:09.360551 env[1222]: time="2025-07-12T00:40:09.360509516Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-mb7w5,Uid:04117f3b-9ff5-49df-b39c-0dfb22b7f6ce,Namespace:calico-system,Attempt:1,} returns sandbox id \"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7\"" Jul 12 00:40:09.368670 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali87f40afd306: link becomes ready Jul 12 00:40:09.368344 systemd-networkd[1045]: cali87f40afd306: Link UP Jul 12 00:40:09.368555 systemd-networkd[1045]: cali87f40afd306: Gained carrier Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.175 [INFO][4292] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.194 [INFO][4292] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0 calico-apiserver-5fcc9669f- calico-apiserver 26468c6c-6406-46a2-89b5-765ca62c9c7a 1002 0 2025-07-12 00:39:42 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5fcc9669f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5fcc9669f-vgpzb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali87f40afd306 [] [] }} ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.194 [INFO][4292] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.240 [INFO][4346] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" HandleID="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.240 [INFO][4346] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" HandleID="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a3740), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5fcc9669f-vgpzb", "timestamp":"2025-07-12 00:40:09.24015193 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.240 [INFO][4346] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.259 [INFO][4346] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.260 [INFO][4346] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.330 [INFO][4346] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.336 [INFO][4346] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.341 [INFO][4346] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.343 [INFO][4346] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.347 [INFO][4346] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.347 [INFO][4346] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.350 [INFO][4346] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98 Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.354 [INFO][4346] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.361 [INFO][4346] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.361 [INFO][4346] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" host="localhost" Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.361 [INFO][4346] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.380535 env[1222]: 2025-07-12 00:40:09.361 [INFO][4346] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" HandleID="k8s-pod-network.6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.381128 env[1222]: 2025-07-12 00:40:09.364 [INFO][4292] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"26468c6c-6406-46a2-89b5-765ca62c9c7a", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5fcc9669f-vgpzb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali87f40afd306", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.381128 env[1222]: 2025-07-12 00:40:09.364 [INFO][4292] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.381128 env[1222]: 2025-07-12 00:40:09.364 [INFO][4292] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali87f40afd306 ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.381128 env[1222]: 2025-07-12 00:40:09.369 [INFO][4292] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.381128 env[1222]: 2025-07-12 00:40:09.369 [INFO][4292] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"26468c6c-6406-46a2-89b5-765ca62c9c7a", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98", Pod:"calico-apiserver-5fcc9669f-vgpzb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali87f40afd306", MAC:"9a:45:25:fd:b9:4e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.381128 env[1222]: 2025-07-12 00:40:09.378 [INFO][4292] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98" Namespace="calico-apiserver" Pod="calico-apiserver-5fcc9669f-vgpzb" WorkloadEndpoint="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:09.394609 env[1222]: time="2025-07-12T00:40:09.392952083Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:09.394609 env[1222]: time="2025-07-12T00:40:09.393003643Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:09.394609 env[1222]: time="2025-07-12T00:40:09.393014763Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:09.395114 env[1222]: time="2025-07-12T00:40:09.395052644Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98 pid=4435 runtime=io.containerd.runc.v2 Jul 12 00:40:09.407278 systemd[1]: Started cri-containerd-6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98.scope. Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.435000 audit: BPF prog-id=172 op=LOAD Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4435 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662353032353436613930306165386463356530396162633833383736 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4435 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662353032353436613930306165386463356530396162633833383736 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit: BPF prog-id=173 op=LOAD Jul 12 00:40:09.436000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4435 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662353032353436613930306165386463356530396162633833383736 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit: BPF prog-id=174 op=LOAD Jul 12 00:40:09.436000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4435 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662353032353436613930306165386463356530396162633833383736 Jul 12 00:40:09.436000 audit: BPF prog-id=174 op=UNLOAD Jul 12 00:40:09.436000 audit: BPF prog-id=173 op=UNLOAD Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { perfmon } for pid=4445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit[4445]: AVC avc: denied { bpf } for pid=4445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.436000 audit: BPF prog-id=175 op=LOAD Jul 12 00:40:09.436000 audit[4445]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4435 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662353032353436613930306165386463356530396162633833383736 Jul 12 00:40:09.439536 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:09.456757 env[1222]: time="2025-07-12T00:40:09.456713817Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5fcc9669f-vgpzb,Uid:26468c6c-6406-46a2-89b5-765ca62c9c7a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98\"" Jul 12 00:40:09.476722 systemd-networkd[1045]: calib67ff82e748: Link UP Jul 12 00:40:09.477781 systemd-networkd[1045]: calib67ff82e748: Gained carrier Jul 12 00:40:09.478674 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib67ff82e748: link becomes ready Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.176 [INFO][4302] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.196 [INFO][4302] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--fv96n-eth0 coredns-668d6bf9bc- kube-system 7c47756a-d15a-4eb6-8064-223428db82b1 1005 0 2025-07-12 00:39:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-fv96n eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib67ff82e748 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.197 [INFO][4302] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.244 [INFO][4348] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" HandleID="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.244 [INFO][4348] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" HandleID="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d7a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-fv96n", "timestamp":"2025-07-12 00:40:09.244447131 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.244 [INFO][4348] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.361 [INFO][4348] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.361 [INFO][4348] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.429 [INFO][4348] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.435 [INFO][4348] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.445 [INFO][4348] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.449 [INFO][4348] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.453 [INFO][4348] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.453 [INFO][4348] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.455 [INFO][4348] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2 Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.460 [INFO][4348] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.468 [INFO][4348] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.468 [INFO][4348] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" host="localhost" Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.468 [INFO][4348] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.492152 env[1222]: 2025-07-12 00:40:09.468 [INFO][4348] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" HandleID="k8s-pod-network.b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.492781 env[1222]: 2025-07-12 00:40:09.474 [INFO][4302] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fv96n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7c47756a-d15a-4eb6-8064-223428db82b1", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-fv96n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib67ff82e748", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.492781 env[1222]: 2025-07-12 00:40:09.474 [INFO][4302] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.492781 env[1222]: 2025-07-12 00:40:09.474 [INFO][4302] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib67ff82e748 ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.492781 env[1222]: 2025-07-12 00:40:09.478 [INFO][4302] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.492781 env[1222]: 2025-07-12 00:40:09.478 [INFO][4302] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fv96n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7c47756a-d15a-4eb6-8064-223428db82b1", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2", Pod:"coredns-668d6bf9bc-fv96n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib67ff82e748", MAC:"0a:1e:4d:31:06:46", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.492781 env[1222]: 2025-07-12 00:40:09.488 [INFO][4302] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2" Namespace="kube-system" Pod="coredns-668d6bf9bc-fv96n" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:09.508100 env[1222]: time="2025-07-12T00:40:09.508026589Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:09.508260 env[1222]: time="2025-07-12T00:40:09.508100589Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:09.508260 env[1222]: time="2025-07-12T00:40:09.508130309Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:09.508369 env[1222]: time="2025-07-12T00:40:09.508290469Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2 pid=4480 runtime=io.containerd.runc.v2 Jul 12 00:40:09.518256 systemd[1]: Started cri-containerd-b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2.scope. Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit: BPF prog-id=176 op=LOAD Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4480 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303232636261643930336562316430383862316266316534326434 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4480 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303232636261643930336562316430383862316266316534326434 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit: BPF prog-id=177 op=LOAD Jul 12 00:40:09.546000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4480 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303232636261643930336562316430383862316266316534326434 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit: BPF prog-id=178 op=LOAD Jul 12 00:40:09.546000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4480 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303232636261643930336562316430383862316266316534326434 Jul 12 00:40:09.546000 audit: BPF prog-id=178 op=UNLOAD Jul 12 00:40:09.546000 audit: BPF prog-id=177 op=UNLOAD Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.546000 audit: BPF prog-id=179 op=LOAD Jul 12 00:40:09.546000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4480 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235303232636261643930336562316430383862316266316534326434 Jul 12 00:40:09.550914 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:09.569147 env[1222]: time="2025-07-12T00:40:09.569101402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fv96n,Uid:7c47756a-d15a-4eb6-8064-223428db82b1,Namespace:kube-system,Attempt:1,} returns sandbox id \"b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2\"" Jul 12 00:40:09.570594 kubelet[1958]: E0712 00:40:09.570378 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:09.572876 env[1222]: time="2025-07-12T00:40:09.572836323Z" level=info msg="CreateContainer within sandbox \"b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 12 00:40:09.590658 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9dea3f0cee4: link becomes ready Jul 12 00:40:09.590855 systemd-networkd[1045]: cali9dea3f0cee4: Link UP Jul 12 00:40:09.591045 systemd-networkd[1045]: cali9dea3f0cee4: Gained carrier Jul 12 00:40:09.599006 env[1222]: time="2025-07-12T00:40:09.598360048Z" level=info msg="CreateContainer within sandbox \"b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"425c45aad4ad3feb838dc5916c4e6e236bf6819b1b6c95b2dedc1da7be7eb0cf\"" Jul 12 00:40:09.600081 env[1222]: time="2025-07-12T00:40:09.600049169Z" level=info msg="StartContainer for \"425c45aad4ad3feb838dc5916c4e6e236bf6819b1b6c95b2dedc1da7be7eb0cf\"" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.211 [INFO][4332] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.225 [INFO][4332] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0 calico-kube-controllers-6dc9d689b8- calico-system b2b46589-3ded-452d-959c-f50f98e9b674 1004 0 2025-07-12 00:39:46 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6dc9d689b8 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6dc9d689b8-c5vgk eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali9dea3f0cee4 [] [] }} ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.225 [INFO][4332] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.282 [INFO][4365] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" HandleID="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.282 [INFO][4365] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" HandleID="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d560), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6dc9d689b8-c5vgk", "timestamp":"2025-07-12 00:40:09.282363539 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.282 [INFO][4365] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.468 [INFO][4365] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.468 [INFO][4365] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.531 [INFO][4365] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.543 [INFO][4365] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.549 [INFO][4365] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.560 [INFO][4365] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.563 [INFO][4365] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.563 [INFO][4365] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.565 [INFO][4365] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6 Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.576 [INFO][4365] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.583 [INFO][4365] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.583 [INFO][4365] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" host="localhost" Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.583 [INFO][4365] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:09.611905 env[1222]: 2025-07-12 00:40:09.583 [INFO][4365] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" HandleID="k8s-pod-network.ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.612486 env[1222]: 2025-07-12 00:40:09.585 [INFO][4332] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0", GenerateName:"calico-kube-controllers-6dc9d689b8-", Namespace:"calico-system", SelfLink:"", UID:"b2b46589-3ded-452d-959c-f50f98e9b674", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dc9d689b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6dc9d689b8-c5vgk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dea3f0cee4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.612486 env[1222]: 2025-07-12 00:40:09.586 [INFO][4332] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.612486 env[1222]: 2025-07-12 00:40:09.586 [INFO][4332] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9dea3f0cee4 ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.612486 env[1222]: 2025-07-12 00:40:09.590 [INFO][4332] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.612486 env[1222]: 2025-07-12 00:40:09.591 [INFO][4332] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0", GenerateName:"calico-kube-controllers-6dc9d689b8-", Namespace:"calico-system", SelfLink:"", UID:"b2b46589-3ded-452d-959c-f50f98e9b674", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dc9d689b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6", Pod:"calico-kube-controllers-6dc9d689b8-c5vgk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dea3f0cee4", MAC:"12:64:3b:6a:7d:b4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:09.612486 env[1222]: 2025-07-12 00:40:09.609 [INFO][4332] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6" Namespace="calico-system" Pod="calico-kube-controllers-6dc9d689b8-c5vgk" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:09.617234 systemd[1]: Started cri-containerd-425c45aad4ad3feb838dc5916c4e6e236bf6819b1b6c95b2dedc1da7be7eb0cf.scope. Jul 12 00:40:09.628656 env[1222]: time="2025-07-12T00:40:09.628564375Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 12 00:40:09.628828 env[1222]: time="2025-07-12T00:40:09.628680335Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 12 00:40:09.628828 env[1222]: time="2025-07-12T00:40:09.628709935Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 12 00:40:09.629010 env[1222]: time="2025-07-12T00:40:09.628923575Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6 pid=4550 runtime=io.containerd.runc.v2 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.643000 audit: BPF prog-id=180 op=LOAD Jul 12 00:40:09.648505 systemd[1]: Started cri-containerd-ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6.scope. Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4480 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432356334356161643461643366656238333864633539313663346536 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4480 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432356334356161643461643366656238333864633539313663346536 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit: BPF prog-id=181 op=LOAD Jul 12 00:40:09.648000 audit[4521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4480 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432356334356161643461643366656238333864633539313663346536 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit: BPF prog-id=182 op=LOAD Jul 12 00:40:09.648000 audit[4521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4480 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432356334356161643461643366656238333864633539313663346536 Jul 12 00:40:09.648000 audit: BPF prog-id=182 op=UNLOAD Jul 12 00:40:09.648000 audit: BPF prog-id=181 op=UNLOAD Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { perfmon } for pid=4521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit[4521]: AVC avc: denied { bpf } for pid=4521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.648000 audit: BPF prog-id=183 op=LOAD Jul 12 00:40:09.648000 audit[4521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4480 pid=4521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.648000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432356334356161643461643366656238333864633539313663346536 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.669000 audit: BPF prog-id=184 op=LOAD Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4550 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164306630316336333062663333616538306234343537633561303361 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4550 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164306630316336333062663333616538306234343537633561303361 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.670000 audit: BPF prog-id=185 op=LOAD Jul 12 00:40:09.670000 audit[4561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4550 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164306630316336333062663333616538306234343537633561303361 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.671000 audit: BPF prog-id=186 op=LOAD Jul 12 00:40:09.671000 audit[4561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4550 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164306630316336333062663333616538306234343537633561303361 Jul 12 00:40:09.672000 audit: BPF prog-id=186 op=UNLOAD Jul 12 00:40:09.672000 audit: BPF prog-id=185 op=UNLOAD Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { perfmon } for pid=4561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit[4561]: AVC avc: denied { bpf } for pid=4561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:09.672000 audit: BPF prog-id=187 op=LOAD Jul 12 00:40:09.672000 audit[4561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4550 pid=4561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:09.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164306630316336333062663333616538306234343537633561303361 Jul 12 00:40:09.675812 env[1222]: time="2025-07-12T00:40:09.675769546Z" level=info msg="StartContainer for \"425c45aad4ad3feb838dc5916c4e6e236bf6819b1b6c95b2dedc1da7be7eb0cf\" returns successfully" Jul 12 00:40:09.675915 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 12 00:40:09.678000 audit[4541]: AVC avc: denied { getattr } for pid=4541 comm="coredns" path="cgroup:[4026532691]" dev="nsfs" ino=4026532691 scontext=system_u:system_r:svirt_lxc_net_t:s0:c237,c549 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 12 00:40:09.678000 audit[4541]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a50 a2=40001ce578 a3=0 items=0 ppid=4480 pid=4541 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c237,c549 key=(null) Jul 12 00:40:09.678000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 12 00:40:09.697832 env[1222]: time="2025-07-12T00:40:09.697781710Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6dc9d689b8-c5vgk,Uid:b2b46589-3ded-452d-959c-f50f98e9b674,Namespace:calico-system,Attempt:1,} returns sandbox id \"ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6\"" Jul 12 00:40:09.839647 kubelet[1958]: I0712 00:40:09.839598 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:40:09.839969 kubelet[1958]: E0712 00:40:09.839951 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:10.027963 kubelet[1958]: E0712 00:40:10.027924 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:10.031218 kubelet[1958]: E0712 00:40:10.031175 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:10.032187 kubelet[1958]: E0712 00:40:10.032158 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:10.040530 kubelet[1958]: I0712 00:40:10.040470 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-fv96n" podStartSLOduration=36.040454385 podStartE2EDuration="36.040454385s" podCreationTimestamp="2025-07-12 00:39:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-12 00:40:10.037627185 +0000 UTC m=+42.253430382" watchObservedRunningTime="2025-07-12 00:40:10.040454385 +0000 UTC m=+42.256257582" Jul 12 00:40:10.055000 audit[4650]: NETFILTER_CFG table=filter:107 family=2 entries=13 op=nft_register_rule pid=4650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:10.055000 audit[4650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc8b158e0 a2=0 a3=1 items=0 ppid=2065 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.055000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:10.066163 systemd[1]: run-netns-cni\x2dceb1355c\x2d37e4\x2d1d77\x2d7d96\x2d3a5bd271e1fd.mount: Deactivated successfully. Jul 12 00:40:10.071000 audit[4650]: NETFILTER_CFG table=nat:108 family=2 entries=51 op=nft_register_chain pid=4650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:10.071000 audit[4650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=17772 a0=3 a1=ffffc8b158e0 a2=0 a3=1 items=0 ppid=2065 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.071000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:10.483075 systemd[1]: Started sshd@8-10.0.0.133:22-10.0.0.1:43736.service. Jul 12 00:40:10.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.133:22-10.0.0.1:43736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:10.496324 env[1222]: time="2025-07-12T00:40:10.496276639Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:10.497620 env[1222]: time="2025-07-12T00:40:10.497589759Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:10.499448 env[1222]: time="2025-07-12T00:40:10.499416000Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:10.501480 env[1222]: time="2025-07-12T00:40:10.501443160Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:40:10.501904 env[1222]: time="2025-07-12T00:40:10.501875760Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:10.503348 env[1222]: time="2025-07-12T00:40:10.503316601Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 12 00:40:10.505839 env[1222]: time="2025-07-12T00:40:10.505804921Z" level=info msg="CreateContainer within sandbox \"d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:40:10.521902 env[1222]: time="2025-07-12T00:40:10.521843444Z" level=info msg="CreateContainer within sandbox \"d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"5f7a85dce10ad9c01e4b3b10a54e2e56e1a05d32f961fdec5e6349ab7f293812\"" Jul 12 00:40:10.523174 env[1222]: time="2025-07-12T00:40:10.522462084Z" level=info msg="StartContainer for \"5f7a85dce10ad9c01e4b3b10a54e2e56e1a05d32f961fdec5e6349ab7f293812\"" Jul 12 00:40:10.527000 audit[4704]: USER_ACCT pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:10.529358 sshd[4704]: Accepted publickey for core from 10.0.0.1 port 43736 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:10.530000 audit[4704]: CRED_ACQ pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:10.530000 audit[4704]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3962120 a2=3 a3=1 items=0 ppid=1 pid=4704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.530000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:10.532900 sshd[4704]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:10.536221 systemd-logind[1208]: New session 9 of user core. Jul 12 00:40:10.537238 systemd[1]: Started session-9.scope. Jul 12 00:40:10.539000 audit[4704]: USER_START pid=4704 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:10.546000 audit[4724]: CRED_ACQ pid=4724 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:10.553326 systemd[1]: Started cri-containerd-5f7a85dce10ad9c01e4b3b10a54e2e56e1a05d32f961fdec5e6349ab7f293812.scope. Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.577000 audit: BPF prog-id=188 op=LOAD Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=3885 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566376138356463653130616439633031653462336231306135346532 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3885 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566376138356463653130616439633031653462336231306135346532 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit: BPF prog-id=189 op=LOAD Jul 12 00:40:10.578000 audit[4714]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3885 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566376138356463653130616439633031653462336231306135346532 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit: BPF prog-id=190 op=LOAD Jul 12 00:40:10.578000 audit[4714]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3885 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566376138356463653130616439633031653462336231306135346532 Jul 12 00:40:10.578000 audit: BPF prog-id=190 op=UNLOAD Jul 12 00:40:10.578000 audit: BPF prog-id=189 op=UNLOAD Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { perfmon } for pid=4714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit[4714]: AVC avc: denied { bpf } for pid=4714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.578000 audit: BPF prog-id=191 op=LOAD Jul 12 00:40:10.578000 audit[4714]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3885 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566376138356463653130616439633031653462336231306135346532 Jul 12 00:40:10.618792 env[1222]: time="2025-07-12T00:40:10.618743504Z" level=info msg="StartContainer for \"5f7a85dce10ad9c01e4b3b10a54e2e56e1a05d32f961fdec5e6349ab7f293812\" returns successfully" Jul 12 00:40:10.735621 sshd[4704]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:10.735000 audit[4704]: USER_END pid=4704 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:10.735000 audit[4704]: CRED_DISP pid=4704 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:10.739285 systemd[1]: sshd@8-10.0.0.133:22-10.0.0.1:43736.service: Deactivated successfully. Jul 12 00:40:10.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.133:22-10.0.0.1:43736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:10.740102 systemd[1]: session-9.scope: Deactivated successfully. Jul 12 00:40:10.740646 systemd-logind[1208]: Session 9 logged out. Waiting for processes to exit. Jul 12 00:40:10.741480 systemd-logind[1208]: Removed session 9. Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.745000 audit: BPF prog-id=192 op=LOAD Jul 12 00:40:10.745000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7bdd918 a2=98 a3=fffff7bdd908 items=0 ppid=4732 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.745000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:40:10.746000 audit: BPF prog-id=192 op=UNLOAD Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit: BPF prog-id=193 op=LOAD Jul 12 00:40:10.746000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7bdd7c8 a2=74 a3=95 items=0 ppid=4732 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.746000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:40:10.746000 audit: BPF prog-id=193 op=UNLOAD Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.746000 audit: BPF prog-id=194 op=LOAD Jul 12 00:40:10.746000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff7bdd7f8 a2=40 a3=fffff7bdd828 items=0 ppid=4732 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.746000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:40:10.747000 audit: BPF prog-id=194 op=UNLOAD Jul 12 00:40:10.747000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.747000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff7bdd910 a2=50 a3=0 items=0 ppid=4732 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.747000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.750000 audit: BPF prog-id=195 op=LOAD Jul 12 00:40:10.750000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffec93058 a2=98 a3=fffffec93048 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.750000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.750000 audit: BPF prog-id=195 op=UNLOAD Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit: BPF prog-id=196 op=LOAD Jul 12 00:40:10.756000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffec92ce8 a2=74 a3=95 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.756000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.756000 audit: BPF prog-id=196 op=UNLOAD Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.756000 audit: BPF prog-id=197 op=LOAD Jul 12 00:40:10.756000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffec92d48 a2=94 a3=2 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.756000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.756000 audit: BPF prog-id=197 op=UNLOAD Jul 12 00:40:10.780687 systemd-networkd[1045]: cali87f40afd306: Gained IPv6LL Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.842000 audit: BPF prog-id=198 op=LOAD Jul 12 00:40:10.842000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffffec92d08 a2=40 a3=fffffec92d38 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.842000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.843000 audit: BPF prog-id=198 op=UNLOAD Jul 12 00:40:10.843000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.843000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffffec92e20 a2=50 a3=0 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.843000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffec92d78 a2=28 a3=fffffec92ea8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffec92da8 a2=28 a3=fffffec92ed8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffec92c58 a2=28 a3=fffffec92d88 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffec92dc8 a2=28 a3=fffffec92ef8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffec92da8 a2=28 a3=fffffec92ed8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffec92d98 a2=28 a3=fffffec92ec8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffec92dc8 a2=28 a3=fffffec92ef8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffec92da8 a2=28 a3=fffffec92ed8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffec92dc8 a2=28 a3=fffffec92ef8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffec92d98 a2=28 a3=fffffec92ec8 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffffec92e18 a2=28 a3=fffffec92f58 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffffec92b50 a2=50 a3=0 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.851000 audit: BPF prog-id=199 op=LOAD Jul 12 00:40:10.851000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffec92b58 a2=94 a3=5 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.851000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.852000 audit: BPF prog-id=199 op=UNLOAD Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffffec92c60 a2=50 a3=0 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.852000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffffec92da8 a2=4 a3=3 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.852000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { confidentiality } for pid=4779 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:40:10.852000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffec92d88 a2=94 a3=6 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.852000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { confidentiality } for pid=4779 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:40:10.852000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffec92558 a2=94 a3=83 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.852000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { bpf } for pid=4779 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: AVC avc: denied { perfmon } for pid=4779 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.852000 audit[4779]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffffec92558 a2=94 a3=83 items=0 ppid=4732 pid=4779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.852000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.868000 audit: BPF prog-id=200 op=LOAD Jul 12 00:40:10.868000 audit[4782]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff86fb2f8 a2=98 a3=fffff86fb2e8 items=0 ppid=4732 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.868000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:40:10.868000 audit: BPF prog-id=200 op=UNLOAD Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit: BPF prog-id=201 op=LOAD Jul 12 00:40:10.869000 audit[4782]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff86fb1a8 a2=74 a3=95 items=0 ppid=4732 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.869000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:40:10.869000 audit: BPF prog-id=201 op=UNLOAD Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { perfmon } for pid=4782 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit[4782]: AVC avc: denied { bpf } for pid=4782 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.869000 audit: BPF prog-id=202 op=LOAD Jul 12 00:40:10.869000 audit[4782]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff86fb1d8 a2=40 a3=fffff86fb208 items=0 ppid=4732 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.869000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 12 00:40:10.869000 audit: BPF prog-id=202 op=UNLOAD Jul 12 00:40:10.908977 systemd-networkd[1045]: cali9dea3f0cee4: Gained IPv6LL Jul 12 00:40:10.963679 systemd-networkd[1045]: vxlan.calico: Link UP Jul 12 00:40:10.963689 systemd-networkd[1045]: vxlan.calico: Gained carrier Jul 12 00:40:10.972838 systemd-networkd[1045]: calia5a18a3afb9: Gained IPv6LL Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit: BPF prog-id=203 op=LOAD Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9353da8 a2=98 a3=ffffe9353d98 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit: BPF prog-id=203 op=UNLOAD Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit: BPF prog-id=204 op=LOAD Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9353a88 a2=74 a3=95 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit: BPF prog-id=204 op=UNLOAD Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit: BPF prog-id=205 op=LOAD Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9353ae8 a2=94 a3=2 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit: BPF prog-id=205 op=UNLOAD Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9353b18 a2=28 a3=ffffe9353c48 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9353b48 a2=28 a3=ffffe9353c78 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe93539f8 a2=28 a3=ffffe9353b28 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9353b68 a2=28 a3=ffffe9353c98 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9353b48 a2=28 a3=ffffe9353c78 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9353b38 a2=28 a3=ffffe9353c68 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9353b68 a2=28 a3=ffffe9353c98 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9353b48 a2=28 a3=ffffe9353c78 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9353b68 a2=28 a3=ffffe9353c98 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.985000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.985000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9353b38 a2=28 a3=ffffe9353c68 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.985000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9353bb8 a2=28 a3=ffffe9353cf8 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.986000 audit: BPF prog-id=206 op=LOAD Jul 12 00:40:10.986000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe93539d8 a2=40 a3=ffffe9353a08 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.986000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.986000 audit: BPF prog-id=206 op=UNLOAD Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe9353a00 a2=50 a3=0 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe9353a00 a2=50 a3=0 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit: BPF prog-id=207 op=LOAD Jul 12 00:40:10.987000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9353168 a2=94 a3=2 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.987000 audit: BPF prog-id=207 op=UNLOAD Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { perfmon } for pid=4806 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit[4806]: AVC avc: denied { bpf } for pid=4806 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.987000 audit: BPF prog-id=208 op=LOAD Jul 12 00:40:10.987000 audit[4806]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe93532f8 a2=94 a3=30 items=0 ppid=4732 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.987000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit: BPF prog-id=209 op=LOAD Jul 12 00:40:10.997000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd68041f8 a2=98 a3=ffffd68041e8 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.997000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:10.997000 audit: BPF prog-id=209 op=UNLOAD Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit: BPF prog-id=210 op=LOAD Jul 12 00:40:10.997000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6803e88 a2=74 a3=95 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.997000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:10.997000 audit: BPF prog-id=210 op=UNLOAD Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:10.997000 audit: BPF prog-id=211 op=LOAD Jul 12 00:40:10.997000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6803ee8 a2=94 a3=2 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:10.997000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:10.997000 audit: BPF prog-id=211 op=UNLOAD Jul 12 00:40:11.035303 kubelet[1958]: E0712 00:40:11.035251 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:11.077000 audit[4832]: NETFILTER_CFG table=filter:109 family=2 entries=12 op=nft_register_rule pid=4832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:11.077000 audit[4832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffc44add0 a2=0 a3=1 items=0 ppid=2065 pid=4832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.077000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit: BPF prog-id=212 op=LOAD Jul 12 00:40:11.093000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6803ea8 a2=40 a3=ffffd6803ed8 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.093000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.093000 audit: BPF prog-id=212 op=UNLOAD Jul 12 00:40:11.093000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.093000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd6803fc0 a2=50 a3=0 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.093000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.100000 audit[4832]: NETFILTER_CFG table=nat:110 family=2 entries=58 op=nft_register_chain pid=4832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:11.100000 audit[4832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=fffffc44add0 a2=0 a3=1 items=0 ppid=2065 pid=4832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6803f18 a2=28 a3=ffffd6804048 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd6803f48 a2=28 a3=ffffd6804078 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd6803df8 a2=28 a3=ffffd6803f28 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6803f68 a2=28 a3=ffffd6804098 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6803f48 a2=28 a3=ffffd6804078 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6803f38 a2=28 a3=ffffd6804068 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6803f68 a2=28 a3=ffffd6804098 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd6803f48 a2=28 a3=ffffd6804078 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd6803f68 a2=28 a3=ffffd6804098 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd6803f38 a2=28 a3=ffffd6804068 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6803fb8 a2=28 a3=ffffd68040f8 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd6803cf0 a2=50 a3=0 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit: BPF prog-id=213 op=LOAD Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd6803cf8 a2=94 a3=5 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit: BPF prog-id=213 op=UNLOAD Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd6803e00 a2=50 a3=0 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd6803f48 a2=4 a3=3 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.104000 audit[4811]: AVC avc: denied { confidentiality } for pid=4811 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:40:11.104000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd6803f28 a2=94 a3=6 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.104000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { confidentiality } for pid=4811 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:40:11.105000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd68036f8 a2=94 a3=83 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.105000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { perfmon } for pid=4811 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { confidentiality } for pid=4811 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 12 00:40:11.105000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd68036f8 a2=94 a3=83 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.105000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.105000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.105000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd6805138 a2=10 a3=ffffd6805228 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.105000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.106000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.106000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd6804ff8 a2=10 a3=ffffd68050e8 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.106000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.106000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.106000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd6804f68 a2=10 a3=ffffd68050e8 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.106000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.106000 audit[4811]: AVC avc: denied { bpf } for pid=4811 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.106000 audit[4811]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd6804f68 a2=10 a3=ffffd68050e8 items=0 ppid=4732 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.106000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 12 00:40:11.113000 audit: BPF prog-id=208 op=UNLOAD Jul 12 00:40:11.196000 audit[4869]: NETFILTER_CFG table=raw:111 family=2 entries=21 op=nft_register_chain pid=4869 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:40:11.196000 audit[4869]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff0299ec0 a2=0 a3=ffffaa7cefa8 items=0 ppid=4732 pid=4869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.196000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:40:11.197000 audit[4870]: NETFILTER_CFG table=mangle:112 family=2 entries=16 op=nft_register_chain pid=4870 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:40:11.197000 audit[4870]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd4177640 a2=0 a3=ffff83db9fa8 items=0 ppid=4732 pid=4870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.197000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:40:11.208000 audit[4872]: NETFILTER_CFG table=nat:113 family=2 entries=15 op=nft_register_chain pid=4872 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:40:11.208000 audit[4872]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe7edd640 a2=0 a3=ffff81aa0fa8 items=0 ppid=4732 pid=4872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.208000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:40:11.210000 audit[4871]: NETFILTER_CFG table=filter:114 family=2 entries=321 op=nft_register_chain pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 12 00:40:11.210000 audit[4871]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=190616 a0=3 a1=ffffe4e8eca0 a2=0 a3=ffffa0949fa8 items=0 ppid=4732 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.210000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 12 00:40:11.357010 systemd-networkd[1045]: calib67ff82e748: Gained IPv6LL Jul 12 00:40:11.673488 env[1222]: time="2025-07-12T00:40:11.673389833Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.675316 env[1222]: time="2025-07-12T00:40:11.675270873Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.677062 env[1222]: time="2025-07-12T00:40:11.677036994Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.678399 env[1222]: time="2025-07-12T00:40:11.678364514Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.678932 env[1222]: time="2025-07-12T00:40:11.678904354Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 12 00:40:11.680799 env[1222]: time="2025-07-12T00:40:11.680766114Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 12 00:40:11.682243 env[1222]: time="2025-07-12T00:40:11.681614955Z" level=info msg="CreateContainer within sandbox \"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 12 00:40:11.703086 env[1222]: time="2025-07-12T00:40:11.702979599Z" level=info msg="CreateContainer within sandbox \"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"335460633f9d70ff5b5c2be2f9045a0304082f9b464e94036c146cf2b194a8e5\"" Jul 12 00:40:11.703742 env[1222]: time="2025-07-12T00:40:11.703687679Z" level=info msg="StartContainer for \"335460633f9d70ff5b5c2be2f9045a0304082f9b464e94036c146cf2b194a8e5\"" Jul 12 00:40:11.726096 systemd[1]: Started cri-containerd-335460633f9d70ff5b5c2be2f9045a0304082f9b464e94036c146cf2b194a8e5.scope. Jul 12 00:40:11.743000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.743000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014f5a0 a2=3c a3=0 items=0 ppid=4387 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353436303633336639643730666635623563326265326639303435 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit: BPF prog-id=214 op=LOAD Jul 12 00:40:11.744000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014f8e0 a2=78 a3=0 items=0 ppid=4387 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353436303633336639643730666635623563326265326639303435 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.744000 audit: BPF prog-id=215 op=LOAD Jul 12 00:40:11.744000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400014f670 a2=78 a3=0 items=0 ppid=4387 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353436303633336639643730666635623563326265326639303435 Jul 12 00:40:11.745000 audit: BPF prog-id=215 op=UNLOAD Jul 12 00:40:11.745000 audit: BPF prog-id=214 op=UNLOAD Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { perfmon } for pid=4891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit[4891]: AVC avc: denied { bpf } for pid=4891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.745000 audit: BPF prog-id=216 op=LOAD Jul 12 00:40:11.745000 audit[4891]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400014fb40 a2=78 a3=0 items=0 ppid=4387 pid=4891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353436303633336639643730666635623563326265326639303435 Jul 12 00:40:11.759860 env[1222]: time="2025-07-12T00:40:11.759816970Z" level=info msg="StartContainer for \"335460633f9d70ff5b5c2be2f9045a0304082f9b464e94036c146cf2b194a8e5\" returns successfully" Jul 12 00:40:11.930636 env[1222]: time="2025-07-12T00:40:11.930521563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.932062 env[1222]: time="2025-07-12T00:40:11.932030243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.934088 env[1222]: time="2025-07-12T00:40:11.934049203Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.935866 env[1222]: time="2025-07-12T00:40:11.935833684Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:11.936064 env[1222]: time="2025-07-12T00:40:11.936042084Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 12 00:40:11.934000 audit[4726]: AVC avc: denied { watch } for pid=4726 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_39_52.1990646497/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c941 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c409,c941 tclass=file permissive=0 Jul 12 00:40:11.934000 audit[4726]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000873320 a2=fc6 a3=0 items=0 ppid=3885 pid=4726 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c941 key=(null) Jul 12 00:40:11.934000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:40:11.938248 env[1222]: time="2025-07-12T00:40:11.938198724Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 12 00:40:11.939089 env[1222]: time="2025-07-12T00:40:11.939051564Z" level=info msg="CreateContainer within sandbox \"6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 12 00:40:11.948342 env[1222]: time="2025-07-12T00:40:11.948299126Z" level=info msg="CreateContainer within sandbox \"6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"6d7a6b25688bfcaca1970707c75c3264f53e17e491ce9185b1a8b10f110a09c8\"" Jul 12 00:40:11.948786 env[1222]: time="2025-07-12T00:40:11.948748806Z" level=info msg="StartContainer for \"6d7a6b25688bfcaca1970707c75c3264f53e17e491ce9185b1a8b10f110a09c8\"" Jul 12 00:40:11.965340 systemd[1]: Started cri-containerd-6d7a6b25688bfcaca1970707c75c3264f53e17e491ce9185b1a8b10f110a09c8.scope. Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.978000 audit: BPF prog-id=217 op=LOAD Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4435 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664376136623235363838626663616361313937303730376337356333 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4435 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664376136623235363838626663616361313937303730376337356333 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.979000 audit: BPF prog-id=218 op=LOAD Jul 12 00:40:11.979000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4435 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664376136623235363838626663616361313937303730376337356333 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.980000 audit: BPF prog-id=219 op=LOAD Jul 12 00:40:11.980000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4435 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664376136623235363838626663616361313937303730376337356333 Jul 12 00:40:11.982000 audit: BPF prog-id=219 op=UNLOAD Jul 12 00:40:11.982000 audit: BPF prog-id=218 op=UNLOAD Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { perfmon } for pid=4926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit[4926]: AVC avc: denied { bpf } for pid=4926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:11.982000 audit: BPF prog-id=220 op=LOAD Jul 12 00:40:11.982000 audit[4926]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4435 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:11.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664376136623235363838626663616361313937303730376337356333 Jul 12 00:40:12.002044 env[1222]: time="2025-07-12T00:40:12.002003137Z" level=info msg="StartContainer for \"6d7a6b25688bfcaca1970707c75c3264f53e17e491ce9185b1a8b10f110a09c8\" returns successfully" Jul 12 00:40:12.050105 kubelet[1958]: I0712 00:40:12.047979 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:40:12.050105 kubelet[1958]: E0712 00:40:12.048018 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:12.054818 kubelet[1958]: I0712 00:40:12.054165 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5fcc9669f-2jgsc" podStartSLOduration=25.877465158 podStartE2EDuration="30.054149426s" podCreationTimestamp="2025-07-12 00:39:42 +0000 UTC" firstStartedPulling="2025-07-12 00:40:06.326485533 +0000 UTC m=+38.542288730" lastFinishedPulling="2025-07-12 00:40:10.503169801 +0000 UTC m=+42.718972998" observedRunningTime="2025-07-12 00:40:11.064620595 +0000 UTC m=+43.280423792" watchObservedRunningTime="2025-07-12 00:40:12.054149426 +0000 UTC m=+44.269952663" Jul 12 00:40:12.066000 audit[4961]: NETFILTER_CFG table=filter:115 family=2 entries=12 op=nft_register_rule pid=4961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:12.066000 audit[4961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdfd72a60 a2=0 a3=1 items=0 ppid=2065 pid=4961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:12.066000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:12.077000 audit[4961]: NETFILTER_CFG table=nat:116 family=2 entries=22 op=nft_register_rule pid=4961 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:12.077000 audit[4961]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffdfd72a60 a2=0 a3=1 items=0 ppid=2065 pid=4961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:12.077000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:12.829146 systemd-networkd[1045]: vxlan.calico: Gained IPv6LL Jul 12 00:40:13.049657 kubelet[1958]: I0712 00:40:13.049618 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:40:13.125000 audit[4937]: AVC avc: denied { watch } for pid=4937 comm="apiserver" path="/calico-apiserver-certs/..2025_07_12_00_39_52.2828788442/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c315,c480 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c315,c480 tclass=file permissive=0 Jul 12 00:40:13.125000 audit[4937]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f6f8e0 a2=fc6 a3=0 items=0 ppid=4435 pid=4937 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c315,c480 key=(null) Jul 12 00:40:13.125000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 12 00:40:14.092715 env[1222]: time="2025-07-12T00:40:14.092649742Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:14.094168 env[1222]: time="2025-07-12T00:40:14.094141582Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:14.095707 env[1222]: time="2025-07-12T00:40:14.095672302Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:14.097095 env[1222]: time="2025-07-12T00:40:14.097059063Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:14.097737 env[1222]: time="2025-07-12T00:40:14.097708623Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 12 00:40:14.100126 env[1222]: time="2025-07-12T00:40:14.100095743Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 12 00:40:14.115197 env[1222]: time="2025-07-12T00:40:14.115142665Z" level=info msg="CreateContainer within sandbox \"ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 12 00:40:14.141372 env[1222]: time="2025-07-12T00:40:14.141325030Z" level=info msg="CreateContainer within sandbox \"ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"1ec6c1334356f4ec333a87792aa72d2a793f38f21ea9226134414337eaca7cc7\"" Jul 12 00:40:14.142365 env[1222]: time="2025-07-12T00:40:14.142338550Z" level=info msg="StartContainer for \"1ec6c1334356f4ec333a87792aa72d2a793f38f21ea9226134414337eaca7cc7\"" Jul 12 00:40:14.171332 systemd[1]: Started cri-containerd-1ec6c1334356f4ec333a87792aa72d2a793f38f21ea9226134414337eaca7cc7.scope. Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198713 kernel: kauditd_printk_skb: 1061 callbacks suppressed Jul 12 00:40:14.198794 kernel: audit: type=1400 audit(1752280814.196:1430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.202504 kernel: audit: type=1400 audit(1752280814.196:1431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.202562 kernel: audit: type=1400 audit(1752280814.196:1432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.206217 kernel: audit: type=1400 audit(1752280814.196:1433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.206257 kernel: audit: type=1400 audit(1752280814.196:1434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.210116 kernel: audit: type=1400 audit(1752280814.196:1435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.210187 kernel: audit: type=1400 audit(1752280814.196:1436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.213936 kernel: audit: type=1400 audit(1752280814.196:1437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.214000 kernel: audit: type=1400 audit(1752280814.196:1438): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.217718 kernel: audit: type=1400 audit(1752280814.197:1439): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.197000 audit: BPF prog-id=221 op=LOAD Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4550 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:14.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165633663313333343335366634656333333361383737393261613732 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4550 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:14.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165633663313333343335366634656333333361383737393261613732 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit: BPF prog-id=222 op=LOAD Jul 12 00:40:14.198000 audit[4974]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4550 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:14.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165633663313333343335366634656333333361383737393261613732 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.198000 audit: BPF prog-id=223 op=LOAD Jul 12 00:40:14.198000 audit[4974]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4550 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:14.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165633663313333343335366634656333333361383737393261613732 Jul 12 00:40:14.199000 audit: BPF prog-id=223 op=UNLOAD Jul 12 00:40:14.199000 audit: BPF prog-id=222 op=UNLOAD Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { perfmon } for pid=4974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit[4974]: AVC avc: denied { bpf } for pid=4974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:14.199000 audit: BPF prog-id=224 op=LOAD Jul 12 00:40:14.199000 audit[4974]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4550 pid=4974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:14.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165633663313333343335366634656333333361383737393261613732 Jul 12 00:40:14.234723 env[1222]: time="2025-07-12T00:40:14.234598645Z" level=info msg="StartContainer for \"1ec6c1334356f4ec333a87792aa72d2a793f38f21ea9226134414337eaca7cc7\" returns successfully" Jul 12 00:40:15.070105 kubelet[1958]: I0712 00:40:15.069957 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5fcc9669f-vgpzb" podStartSLOduration=30.592051231 podStartE2EDuration="33.069932537s" podCreationTimestamp="2025-07-12 00:39:42 +0000 UTC" firstStartedPulling="2025-07-12 00:40:09.459628698 +0000 UTC m=+41.675431895" lastFinishedPulling="2025-07-12 00:40:11.937510004 +0000 UTC m=+44.153313201" observedRunningTime="2025-07-12 00:40:12.054515226 +0000 UTC m=+44.270318423" watchObservedRunningTime="2025-07-12 00:40:15.069932537 +0000 UTC m=+47.285735734" Jul 12 00:40:15.120891 kubelet[1958]: I0712 00:40:15.120813 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6dc9d689b8-c5vgk" podStartSLOduration=24.721248872 podStartE2EDuration="29.120795824s" podCreationTimestamp="2025-07-12 00:39:46 +0000 UTC" firstStartedPulling="2025-07-12 00:40:09.699309511 +0000 UTC m=+41.915112708" lastFinishedPulling="2025-07-12 00:40:14.098856503 +0000 UTC m=+46.314659660" observedRunningTime="2025-07-12 00:40:15.071477017 +0000 UTC m=+47.287280214" watchObservedRunningTime="2025-07-12 00:40:15.120795824 +0000 UTC m=+47.336599021" Jul 12 00:40:15.229606 env[1222]: time="2025-07-12T00:40:15.229540921Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:15.231483 env[1222]: time="2025-07-12T00:40:15.231452241Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:15.233968 env[1222]: time="2025-07-12T00:40:15.233937361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:15.238066 env[1222]: time="2025-07-12T00:40:15.238025362Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 12 00:40:15.238726 env[1222]: time="2025-07-12T00:40:15.238696922Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 12 00:40:15.243033 env[1222]: time="2025-07-12T00:40:15.242992883Z" level=info msg="CreateContainer within sandbox \"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 12 00:40:15.254606 env[1222]: time="2025-07-12T00:40:15.253288524Z" level=info msg="CreateContainer within sandbox \"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"cb92950007f14776ec0c98599b0f14bac075a52bf405200c532924f9f75af4d7\"" Jul 12 00:40:15.254859 env[1222]: time="2025-07-12T00:40:15.254801804Z" level=info msg="StartContainer for \"cb92950007f14776ec0c98599b0f14bac075a52bf405200c532924f9f75af4d7\"" Jul 12 00:40:15.285032 systemd[1]: Started cri-containerd-cb92950007f14776ec0c98599b0f14bac075a52bf405200c532924f9f75af4d7.scope. Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4387 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:15.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393239353030303766313437373665633063393835393962306631 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit: BPF prog-id=225 op=LOAD Jul 12 00:40:15.305000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4387 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:15.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393239353030303766313437373665633063393835393962306631 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit: BPF prog-id=226 op=LOAD Jul 12 00:40:15.305000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4387 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:15.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393239353030303766313437373665633063393835393962306631 Jul 12 00:40:15.305000 audit: BPF prog-id=226 op=UNLOAD Jul 12 00:40:15.305000 audit: BPF prog-id=225 op=UNLOAD Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { perfmon } for pid=5042 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit[5042]: AVC avc: denied { bpf } for pid=5042 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 12 00:40:15.305000 audit: BPF prog-id=227 op=LOAD Jul 12 00:40:15.305000 audit[5042]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4387 pid=5042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:15.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393239353030303766313437373665633063393835393962306631 Jul 12 00:40:15.318742 env[1222]: time="2025-07-12T00:40:15.318699574Z" level=info msg="StartContainer for \"cb92950007f14776ec0c98599b0f14bac075a52bf405200c532924f9f75af4d7\" returns successfully" Jul 12 00:40:15.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.133:22-10.0.0.1:34638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:15.740368 systemd[1]: Started sshd@9-10.0.0.133:22-10.0.0.1:34638.service. Jul 12 00:40:15.782000 audit[5072]: USER_ACCT pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:15.784937 sshd[5072]: Accepted publickey for core from 10.0.0.1 port 34638 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:15.783000 audit[5072]: CRED_ACQ pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:15.783000 audit[5072]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeba445a0 a2=3 a3=1 items=0 ppid=1 pid=5072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:15.783000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:15.786238 sshd[5072]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:15.792901 systemd-logind[1208]: New session 10 of user core. Jul 12 00:40:15.793731 systemd[1]: Started session-10.scope. Jul 12 00:40:15.795000 audit[5072]: USER_START pid=5072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:15.796000 audit[5074]: CRED_ACQ pid=5074 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:15.928658 kubelet[1958]: I0712 00:40:15.928610 1958 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 12 00:40:15.931502 kubelet[1958]: I0712 00:40:15.931465 1958 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 12 00:40:16.009735 sshd[5072]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:16.009000 audit[5072]: USER_END pid=5072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.009000 audit[5072]: CRED_DISP pid=5072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.013067 systemd-logind[1208]: Session 10 logged out. Waiting for processes to exit. Jul 12 00:40:16.014288 systemd[1]: Started sshd@10-10.0.0.133:22-10.0.0.1:34654.service. Jul 12 00:40:16.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.133:22-10.0.0.1:34654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:16.014865 systemd[1]: sshd@9-10.0.0.133:22-10.0.0.1:34638.service: Deactivated successfully. Jul 12 00:40:16.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.133:22-10.0.0.1:34638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:16.015620 systemd[1]: session-10.scope: Deactivated successfully. Jul 12 00:40:16.016205 systemd-logind[1208]: Removed session 10. Jul 12 00:40:16.052000 audit[5086]: USER_ACCT pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.054381 sshd[5086]: Accepted publickey for core from 10.0.0.1 port 34654 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:16.054000 audit[5086]: CRED_ACQ pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.054000 audit[5086]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6eeccd0 a2=3 a3=1 items=0 ppid=1 pid=5086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:16.054000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:16.056152 sshd[5086]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:16.060721 systemd-logind[1208]: New session 11 of user core. Jul 12 00:40:16.061322 systemd[1]: Started session-11.scope. Jul 12 00:40:16.073000 audit[5086]: USER_START pid=5086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.078060 kubelet[1958]: I0712 00:40:16.077637 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-mb7w5" podStartSLOduration=25.200701642 podStartE2EDuration="31.077614727s" podCreationTimestamp="2025-07-12 00:39:45 +0000 UTC" firstStartedPulling="2025-07-12 00:40:09.363000477 +0000 UTC m=+41.578803674" lastFinishedPulling="2025-07-12 00:40:15.239913562 +0000 UTC m=+47.455716759" observedRunningTime="2025-07-12 00:40:16.076696446 +0000 UTC m=+48.292499643" watchObservedRunningTime="2025-07-12 00:40:16.077614727 +0000 UTC m=+48.293417924" Jul 12 00:40:16.077000 audit[5089]: CRED_ACQ pid=5089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.106490 systemd[1]: run-containerd-runc-k8s.io-cb92950007f14776ec0c98599b0f14bac075a52bf405200c532924f9f75af4d7-runc.8XQ8zp.mount: Deactivated successfully. Jul 12 00:40:16.259345 sshd[5086]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:16.258000 audit[5086]: USER_END pid=5086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.258000 audit[5086]: CRED_DISP pid=5086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.263587 systemd[1]: Started sshd@11-10.0.0.133:22-10.0.0.1:34668.service. Jul 12 00:40:16.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.133:22-10.0.0.1:34668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:16.264109 systemd[1]: sshd@10-10.0.0.133:22-10.0.0.1:34654.service: Deactivated successfully. Jul 12 00:40:16.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.133:22-10.0.0.1:34654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:16.266240 systemd[1]: session-11.scope: Deactivated successfully. Jul 12 00:40:16.268640 systemd-logind[1208]: Session 11 logged out. Waiting for processes to exit. Jul 12 00:40:16.269630 systemd-logind[1208]: Removed session 11. Jul 12 00:40:16.307000 audit[5105]: USER_ACCT pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.309155 sshd[5105]: Accepted publickey for core from 10.0.0.1 port 34668 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:16.308000 audit[5105]: CRED_ACQ pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.308000 audit[5105]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc07e7510 a2=3 a3=1 items=0 ppid=1 pid=5105 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:16.308000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:16.310239 sshd[5105]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:16.314313 systemd[1]: Started session-12.scope. Jul 12 00:40:16.314467 systemd-logind[1208]: New session 12 of user core. Jul 12 00:40:16.316000 audit[5105]: USER_START pid=5105 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.317000 audit[5108]: CRED_ACQ pid=5108 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.433388 sshd[5105]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:16.432000 audit[5105]: USER_END pid=5105 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.432000 audit[5105]: CRED_DISP pid=5105 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:16.435921 systemd[1]: sshd@11-10.0.0.133:22-10.0.0.1:34668.service: Deactivated successfully. Jul 12 00:40:16.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.133:22-10.0.0.1:34668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:16.436711 systemd[1]: session-12.scope: Deactivated successfully. Jul 12 00:40:16.437228 systemd-logind[1208]: Session 12 logged out. Waiting for processes to exit. Jul 12 00:40:16.437915 systemd-logind[1208]: Removed session 12. Jul 12 00:40:21.438606 systemd[1]: Started sshd@12-10.0.0.133:22-10.0.0.1:34670.service. Jul 12 00:40:21.441610 kernel: kauditd_printk_skb: 123 callbacks suppressed Jul 12 00:40:21.441813 kernel: audit: type=1130 audit(1752280821.437:1481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.133:22-10.0.0.1:34670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:21.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.133:22-10.0.0.1:34670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:21.482000 audit[5132]: USER_ACCT pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.483901 sshd[5132]: Accepted publickey for core from 10.0.0.1 port 34670 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:21.486589 kernel: audit: type=1101 audit(1752280821.482:1482): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.485000 audit[5132]: CRED_ACQ pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.489918 sshd[5132]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:21.491152 kernel: audit: type=1103 audit(1752280821.485:1483): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.491197 kernel: audit: type=1006 audit(1752280821.486:1484): pid=5132 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 12 00:40:21.491214 kernel: audit: type=1300 audit(1752280821.486:1484): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca96ab90 a2=3 a3=1 items=0 ppid=1 pid=5132 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:21.486000 audit[5132]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca96ab90 a2=3 a3=1 items=0 ppid=1 pid=5132 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:21.486000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:21.494654 kernel: audit: type=1327 audit(1752280821.486:1484): proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:21.496655 systemd-logind[1208]: New session 13 of user core. Jul 12 00:40:21.497136 systemd[1]: Started session-13.scope. Jul 12 00:40:21.499000 audit[5132]: USER_START pid=5132 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.503639 kernel: audit: type=1105 audit(1752280821.499:1485): pid=5132 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.502000 audit[5134]: CRED_ACQ pid=5134 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.506602 kernel: audit: type=1103 audit(1752280821.502:1486): pid=5134 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.652352 sshd[5132]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:21.651000 audit[5132]: USER_END pid=5132 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.651000 audit[5132]: CRED_DISP pid=5132 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.658158 kernel: audit: type=1106 audit(1752280821.651:1487): pid=5132 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.658204 kernel: audit: type=1104 audit(1752280821.651:1488): pid=5132 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:21.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.133:22-10.0.0.1:34670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:21.660178 systemd[1]: sshd@12-10.0.0.133:22-10.0.0.1:34670.service: Deactivated successfully. Jul 12 00:40:21.661005 systemd[1]: session-13.scope: Deactivated successfully. Jul 12 00:40:21.661755 systemd-logind[1208]: Session 13 logged out. Waiting for processes to exit. Jul 12 00:40:21.662412 systemd-logind[1208]: Removed session 13. Jul 12 00:40:22.261699 kubelet[1958]: I0712 00:40:22.261650 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:40:22.297000 audit[5145]: NETFILTER_CFG table=filter:117 family=2 entries=11 op=nft_register_rule pid=5145 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:22.297000 audit[5145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdd3cac60 a2=0 a3=1 items=0 ppid=2065 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:22.297000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:22.304000 audit[5145]: NETFILTER_CFG table=nat:118 family=2 entries=29 op=nft_register_chain pid=5145 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:22.304000 audit[5145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffdd3cac60 a2=0 a3=1 items=0 ppid=2065 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:22.304000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:25.321000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.321000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400d1b45d0 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:40:25.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:40:25.321000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7307 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.321000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=400ba51260 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:40:25.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:40:25.327000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7313 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.327000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400bbd97d0 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:40:25.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:40:25.340000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.340000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400c6dd860 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:40:25.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:40:25.356000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.356000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.356000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=400d1b4690 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:40:25.356000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:40:25.356000 audit[1848]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400def29a0 a2=fc6 a3=0 items=0 ppid=1676 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c356,c701 key=(null) Jul 12 00:40:25.356000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313333002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 12 00:40:25.602000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.602000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:25.602000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40005716a0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:40:25.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:40:25.602000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001892750 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:40:25.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:40:26.656810 systemd[1]: Started sshd@13-10.0.0.133:22-10.0.0.1:60818.service. Jul 12 00:40:26.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.133:22-10.0.0.1:60818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:26.659528 kernel: kauditd_printk_skb: 31 callbacks suppressed Jul 12 00:40:26.659625 kernel: audit: type=1130 audit(1752280826.655:1500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.133:22-10.0.0.1:60818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:26.697000 audit[5148]: USER_ACCT pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.699663 sshd[5148]: Accepted publickey for core from 10.0.0.1 port 60818 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:26.701276 sshd[5148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:26.699000 audit[5148]: CRED_ACQ pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.703964 kernel: audit: type=1101 audit(1752280826.697:1501): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.704034 kernel: audit: type=1103 audit(1752280826.699:1502): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.704069 kernel: audit: type=1006 audit(1752280826.699:1503): pid=5148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 12 00:40:26.699000 audit[5148]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2d19bd0 a2=3 a3=1 items=0 ppid=1 pid=5148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:26.707860 kernel: audit: type=1300 audit(1752280826.699:1503): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2d19bd0 a2=3 a3=1 items=0 ppid=1 pid=5148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:26.699000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:26.709015 kernel: audit: type=1327 audit(1752280826.699:1503): proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:26.709702 systemd-logind[1208]: New session 14 of user core. Jul 12 00:40:26.710501 systemd[1]: Started session-14.scope. Jul 12 00:40:26.712000 audit[5148]: USER_START pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.715000 audit[5150]: CRED_ACQ pid=5150 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.719222 kernel: audit: type=1105 audit(1752280826.712:1504): pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.719268 kernel: audit: type=1103 audit(1752280826.715:1505): pid=5150 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.841353 sshd[5148]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:26.840000 audit[5148]: USER_END pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.844030 systemd-logind[1208]: Session 14 logged out. Waiting for processes to exit. Jul 12 00:40:26.844270 systemd[1]: sshd@13-10.0.0.133:22-10.0.0.1:60818.service: Deactivated successfully. Jul 12 00:40:26.840000 audit[5148]: CRED_DISP pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.845052 systemd[1]: session-14.scope: Deactivated successfully. Jul 12 00:40:26.845646 systemd-logind[1208]: Removed session 14. Jul 12 00:40:26.847056 kernel: audit: type=1106 audit(1752280826.840:1506): pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.847117 kernel: audit: type=1104 audit(1752280826.840:1507): pid=5148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:26.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.133:22-10.0.0.1:60818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:27.864297 env[1222]: time="2025-07-12T00:40:27.863933073Z" level=info msg="StopPodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\"" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.906 [WARNING][5170] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"bb5b6643-082f-48ed-a008-dcfa21e5ea7a", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920", Pod:"coredns-668d6bf9bc-6dg9j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2b2661d9751", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.907 [INFO][5170] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.907 [INFO][5170] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" iface="eth0" netns="" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.907 [INFO][5170] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.907 [INFO][5170] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.928 [INFO][5181] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.928 [INFO][5181] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.928 [INFO][5181] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.937 [WARNING][5181] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.937 [INFO][5181] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.938 [INFO][5181] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:27.941772 env[1222]: 2025-07-12 00:40:27.940 [INFO][5170] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:27.942198 env[1222]: time="2025-07-12T00:40:27.941795079Z" level=info msg="TearDown network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" successfully" Jul 12 00:40:27.942198 env[1222]: time="2025-07-12T00:40:27.941826159Z" level=info msg="StopPodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" returns successfully" Jul 12 00:40:27.942837 env[1222]: time="2025-07-12T00:40:27.942801719Z" level=info msg="RemovePodSandbox for \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\"" Jul 12 00:40:27.942901 env[1222]: time="2025-07-12T00:40:27.942848319Z" level=info msg="Forcibly stopping sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\"" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.976 [WARNING][5200] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"bb5b6643-082f-48ed-a008-dcfa21e5ea7a", ResourceVersion:"985", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a02390657ea3e88d24b41324a77511c10c7e854a45efcf77217b01e8801f0920", Pod:"coredns-668d6bf9bc-6dg9j", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2b2661d9751", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.976 [INFO][5200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.976 [INFO][5200] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" iface="eth0" netns="" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.976 [INFO][5200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.976 [INFO][5200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.994 [INFO][5210] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.995 [INFO][5210] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:27.995 [INFO][5210] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:28.003 [WARNING][5210] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:28.003 [INFO][5210] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" HandleID="k8s-pod-network.22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Workload="localhost-k8s-coredns--668d6bf9bc--6dg9j-eth0" Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:28.004 [INFO][5210] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.008222 env[1222]: 2025-07-12 00:40:28.006 [INFO][5200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61" Jul 12 00:40:28.008688 env[1222]: time="2025-07-12T00:40:28.008253963Z" level=info msg="TearDown network for sandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" successfully" Jul 12 00:40:28.011336 env[1222]: time="2025-07-12T00:40:28.011296763Z" level=info msg="RemovePodSandbox \"22465aa490198950b5bd0a67f631017196df58b812d8c1ccd93f16805af19a61\" returns successfully" Jul 12 00:40:28.011964 env[1222]: time="2025-07-12T00:40:28.011924963Z" level=info msg="StopPodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\"" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.049 [WARNING][5227] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0", GenerateName:"calico-kube-controllers-6dc9d689b8-", Namespace:"calico-system", SelfLink:"", UID:"b2b46589-3ded-452d-959c-f50f98e9b674", ResourceVersion:"1108", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dc9d689b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6", Pod:"calico-kube-controllers-6dc9d689b8-c5vgk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dea3f0cee4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.049 [INFO][5227] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.049 [INFO][5227] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" iface="eth0" netns="" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.049 [INFO][5227] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.049 [INFO][5227] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.075 [INFO][5236] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.075 [INFO][5236] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.075 [INFO][5236] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.088 [WARNING][5236] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.088 [INFO][5236] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.089 [INFO][5236] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.093959 env[1222]: 2025-07-12 00:40:28.092 [INFO][5227] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.094491 env[1222]: time="2025-07-12T00:40:28.094456169Z" level=info msg="TearDown network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" successfully" Jul 12 00:40:28.094651 env[1222]: time="2025-07-12T00:40:28.094624009Z" level=info msg="StopPodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" returns successfully" Jul 12 00:40:28.095149 env[1222]: time="2025-07-12T00:40:28.095100289Z" level=info msg="RemovePodSandbox for \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\"" Jul 12 00:40:28.095215 env[1222]: time="2025-07-12T00:40:28.095154209Z" level=info msg="Forcibly stopping sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\"" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.127 [WARNING][5255] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0", GenerateName:"calico-kube-controllers-6dc9d689b8-", Namespace:"calico-system", SelfLink:"", UID:"b2b46589-3ded-452d-959c-f50f98e9b674", ResourceVersion:"1108", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6dc9d689b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ad0f01c630bf33ae80b4457c5a03a3d79e7a56a9992272f4ff74d77ea44bccf6", Pod:"calico-kube-controllers-6dc9d689b8-c5vgk", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dea3f0cee4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.127 [INFO][5255] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.127 [INFO][5255] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" iface="eth0" netns="" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.127 [INFO][5255] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.127 [INFO][5255] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.145 [INFO][5264] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.145 [INFO][5264] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.145 [INFO][5264] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.155 [WARNING][5264] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.155 [INFO][5264] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" HandleID="k8s-pod-network.161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Workload="localhost-k8s-calico--kube--controllers--6dc9d689b8--c5vgk-eth0" Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.157 [INFO][5264] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.161247 env[1222]: 2025-07-12 00:40:28.158 [INFO][5255] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf" Jul 12 00:40:28.161247 env[1222]: time="2025-07-12T00:40:28.160309493Z" level=info msg="TearDown network for sandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" successfully" Jul 12 00:40:28.163304 env[1222]: time="2025-07-12T00:40:28.163261653Z" level=info msg="RemovePodSandbox \"161512f2c69ecb8a68ec4af8b52dd2eacaea233af289b3b43596692054de9cbf\" returns successfully" Jul 12 00:40:28.163773 env[1222]: time="2025-07-12T00:40:28.163742533Z" level=info msg="StopPodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\"" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.195 [WARNING][5282] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fv96n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7c47756a-d15a-4eb6-8064-223428db82b1", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2", Pod:"coredns-668d6bf9bc-fv96n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib67ff82e748", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.195 [INFO][5282] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.195 [INFO][5282] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" iface="eth0" netns="" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.195 [INFO][5282] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.195 [INFO][5282] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.218 [INFO][5291] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.218 [INFO][5291] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.219 [INFO][5291] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.228 [WARNING][5291] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.228 [INFO][5291] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.230 [INFO][5291] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.233400 env[1222]: 2025-07-12 00:40:28.232 [INFO][5282] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.234065 env[1222]: time="2025-07-12T00:40:28.234030178Z" level=info msg="TearDown network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" successfully" Jul 12 00:40:28.234133 env[1222]: time="2025-07-12T00:40:28.234117778Z" level=info msg="StopPodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" returns successfully" Jul 12 00:40:28.234767 env[1222]: time="2025-07-12T00:40:28.234728018Z" level=info msg="RemovePodSandbox for \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\"" Jul 12 00:40:28.234841 env[1222]: time="2025-07-12T00:40:28.234773538Z" level=info msg="Forcibly stopping sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\"" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.285 [WARNING][5308] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fv96n-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"7c47756a-d15a-4eb6-8064-223428db82b1", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5022cbad903eb1d088b1bf1e42d407cafb64b4ac51e01ae68fc6b41b26986c2", Pod:"coredns-668d6bf9bc-fv96n", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib67ff82e748", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.285 [INFO][5308] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.285 [INFO][5308] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" iface="eth0" netns="" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.285 [INFO][5308] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.285 [INFO][5308] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.304 [INFO][5316] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.305 [INFO][5316] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.305 [INFO][5316] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.320 [WARNING][5316] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.321 [INFO][5316] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" HandleID="k8s-pod-network.5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Workload="localhost-k8s-coredns--668d6bf9bc--fv96n-eth0" Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.329 [INFO][5316] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.338657 env[1222]: 2025-07-12 00:40:28.333 [INFO][5308] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6" Jul 12 00:40:28.339312 env[1222]: time="2025-07-12T00:40:28.339272224Z" level=info msg="TearDown network for sandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" successfully" Jul 12 00:40:28.342258 env[1222]: time="2025-07-12T00:40:28.342215025Z" level=info msg="RemovePodSandbox \"5452c1222661c9b00dca1794c70c572454dde81bfac8257a771124530d1d66c6\" returns successfully" Jul 12 00:40:28.342858 env[1222]: time="2025-07-12T00:40:28.342826145Z" level=info msg="StopPodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\"" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.379 [WARNING][5334] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--t26mx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"752c67a8-1e1d-4600-9633-efa79d989209", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e", Pod:"goldmane-768f4c5c69-t26mx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif77468b96d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.380 [INFO][5334] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.380 [INFO][5334] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" iface="eth0" netns="" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.380 [INFO][5334] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.380 [INFO][5334] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.399 [INFO][5343] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.399 [INFO][5343] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.399 [INFO][5343] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.412 [WARNING][5343] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.412 [INFO][5343] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.414 [INFO][5343] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.418930 env[1222]: 2025-07-12 00:40:28.416 [INFO][5334] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.418930 env[1222]: time="2025-07-12T00:40:28.418704710Z" level=info msg="TearDown network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" successfully" Jul 12 00:40:28.418930 env[1222]: time="2025-07-12T00:40:28.418745870Z" level=info msg="StopPodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" returns successfully" Jul 12 00:40:28.419873 env[1222]: time="2025-07-12T00:40:28.419835670Z" level=info msg="RemovePodSandbox for \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\"" Jul 12 00:40:28.419954 env[1222]: time="2025-07-12T00:40:28.419879910Z" level=info msg="Forcibly stopping sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\"" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.456 [WARNING][5360] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--t26mx-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"752c67a8-1e1d-4600-9633-efa79d989209", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cd124cb1c7b48eebaf47ff4b1f755aaae050688a5fa2d8c4c7a8fa8b59c5230e", Pod:"goldmane-768f4c5c69-t26mx", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif77468b96d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.457 [INFO][5360] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.457 [INFO][5360] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" iface="eth0" netns="" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.457 [INFO][5360] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.457 [INFO][5360] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.480 [INFO][5369] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.484 [INFO][5369] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.488 [INFO][5369] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.500 [WARNING][5369] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.500 [INFO][5369] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" HandleID="k8s-pod-network.c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Workload="localhost-k8s-goldmane--768f4c5c69--t26mx-eth0" Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.509 [INFO][5369] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.514463 env[1222]: 2025-07-12 00:40:28.512 [INFO][5360] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48" Jul 12 00:40:28.514978 env[1222]: time="2025-07-12T00:40:28.514476716Z" level=info msg="TearDown network for sandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" successfully" Jul 12 00:40:28.580197 env[1222]: time="2025-07-12T00:40:28.580146760Z" level=info msg="RemovePodSandbox \"c236b0d130d8b05a7d5df10d1c23e95061026117c5204cf8f84c2273d8c5ad48\" returns successfully" Jul 12 00:40:28.580795 env[1222]: time="2025-07-12T00:40:28.580768920Z" level=info msg="StopPodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\"" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.616 [WARNING][5386] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"216424c2-1c1e-4a37-bd40-df86a8d6aac3", ResourceVersion:"1168", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a", Pod:"calico-apiserver-5fcc9669f-2jgsc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic8de7be936b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.617 [INFO][5386] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.617 [INFO][5386] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" iface="eth0" netns="" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.617 [INFO][5386] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.617 [INFO][5386] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.636 [INFO][5394] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.636 [INFO][5394] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.637 [INFO][5394] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.645 [WARNING][5394] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.645 [INFO][5394] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.647 [INFO][5394] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.650524 env[1222]: 2025-07-12 00:40:28.648 [INFO][5386] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.650980 env[1222]: time="2025-07-12T00:40:28.650563525Z" level=info msg="TearDown network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" successfully" Jul 12 00:40:28.650980 env[1222]: time="2025-07-12T00:40:28.650608645Z" level=info msg="StopPodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" returns successfully" Jul 12 00:40:28.651067 env[1222]: time="2025-07-12T00:40:28.651041005Z" level=info msg="RemovePodSandbox for \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\"" Jul 12 00:40:28.651118 env[1222]: time="2025-07-12T00:40:28.651077005Z" level=info msg="Forcibly stopping sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\"" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.684 [WARNING][5413] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"216424c2-1c1e-4a37-bd40-df86a8d6aac3", ResourceVersion:"1168", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7d898a72dc894947c75d3ae8a9d3da6340e76993c5bf9f3d4c5d6ef3d99b14a", Pod:"calico-apiserver-5fcc9669f-2jgsc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic8de7be936b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.684 [INFO][5413] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.684 [INFO][5413] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" iface="eth0" netns="" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.685 [INFO][5413] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.685 [INFO][5413] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.704 [INFO][5423] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.704 [INFO][5423] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.704 [INFO][5423] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.717 [WARNING][5423] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.717 [INFO][5423] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" HandleID="k8s-pod-network.f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Workload="localhost-k8s-calico--apiserver--5fcc9669f--2jgsc-eth0" Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.719 [INFO][5423] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.723618 env[1222]: 2025-07-12 00:40:28.721 [INFO][5413] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645" Jul 12 00:40:28.723618 env[1222]: time="2025-07-12T00:40:28.723054649Z" level=info msg="TearDown network for sandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" successfully" Jul 12 00:40:28.726874 env[1222]: time="2025-07-12T00:40:28.726823090Z" level=info msg="RemovePodSandbox \"f66e9eca17344017d13dc67b550abb48f22c6c8319f96c88eb311bf8c36a4645\" returns successfully" Jul 12 00:40:28.727381 env[1222]: time="2025-07-12T00:40:28.727349570Z" level=info msg="StopPodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\"" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.763 [WARNING][5441] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--mb7w5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7", Pod:"csi-node-driver-mb7w5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia5a18a3afb9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.764 [INFO][5441] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.764 [INFO][5441] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" iface="eth0" netns="" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.764 [INFO][5441] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.764 [INFO][5441] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.783 [INFO][5450] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.784 [INFO][5450] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.784 [INFO][5450] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.792 [WARNING][5450] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.793 [INFO][5450] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.794 [INFO][5450] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.798174 env[1222]: 2025-07-12 00:40:28.796 [INFO][5441] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.798970 env[1222]: time="2025-07-12T00:40:28.798926494Z" level=info msg="TearDown network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" successfully" Jul 12 00:40:28.799051 env[1222]: time="2025-07-12T00:40:28.799034814Z" level=info msg="StopPodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" returns successfully" Jul 12 00:40:28.799621 env[1222]: time="2025-07-12T00:40:28.799594574Z" level=info msg="RemovePodSandbox for \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\"" Jul 12 00:40:28.799923 env[1222]: time="2025-07-12T00:40:28.799885574Z" level=info msg="Forcibly stopping sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\"" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.832 [WARNING][5468] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--mb7w5-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"04117f3b-9ff5-49df-b39c-0dfb22b7f6ce", ResourceVersion:"1122", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"73f09f80569482360fc7926b17455d0f2669232937159bb726b5704394d50bc7", Pod:"csi-node-driver-mb7w5", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calia5a18a3afb9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.832 [INFO][5468] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.833 [INFO][5468] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" iface="eth0" netns="" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.833 [INFO][5468] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.833 [INFO][5468] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.850 [INFO][5477] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.850 [INFO][5477] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.850 [INFO][5477] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.861 [WARNING][5477] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.861 [INFO][5477] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" HandleID="k8s-pod-network.65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Workload="localhost-k8s-csi--node--driver--mb7w5-eth0" Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.863 [INFO][5477] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.866839 env[1222]: 2025-07-12 00:40:28.865 [INFO][5468] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3" Jul 12 00:40:28.867536 env[1222]: time="2025-07-12T00:40:28.867500939Z" level=info msg="TearDown network for sandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" successfully" Jul 12 00:40:28.870627 env[1222]: time="2025-07-12T00:40:28.870542739Z" level=info msg="RemovePodSandbox \"65ba3df082815fab7c0af0b2e8bed33e24d87e9866efafe1499d2615b8d95ec3\" returns successfully" Jul 12 00:40:28.871196 env[1222]: time="2025-07-12T00:40:28.871167819Z" level=info msg="StopPodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\"" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.904 [WARNING][5494] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" WorkloadEndpoint="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.904 [INFO][5494] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.904 [INFO][5494] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" iface="eth0" netns="" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.904 [INFO][5494] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.904 [INFO][5494] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.923 [INFO][5502] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.923 [INFO][5502] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.923 [INFO][5502] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.932 [WARNING][5502] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.932 [INFO][5502] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.933 [INFO][5502] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:28.937182 env[1222]: 2025-07-12 00:40:28.935 [INFO][5494] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:28.937595 env[1222]: time="2025-07-12T00:40:28.937194143Z" level=info msg="TearDown network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" successfully" Jul 12 00:40:28.937595 env[1222]: time="2025-07-12T00:40:28.937244543Z" level=info msg="StopPodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" returns successfully" Jul 12 00:40:28.937678 env[1222]: time="2025-07-12T00:40:28.937642703Z" level=info msg="RemovePodSandbox for \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\"" Jul 12 00:40:28.937714 env[1222]: time="2025-07-12T00:40:28.937682583Z" level=info msg="Forcibly stopping sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\"" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.969 [WARNING][5521] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" WorkloadEndpoint="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.969 [INFO][5521] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.969 [INFO][5521] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" iface="eth0" netns="" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.969 [INFO][5521] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.969 [INFO][5521] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.997 [INFO][5529] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.997 [INFO][5529] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:28.997 [INFO][5529] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:29.008 [WARNING][5529] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:29.008 [INFO][5529] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" HandleID="k8s-pod-network.1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Workload="localhost-k8s-whisker--c8bbccd56--45z7t-eth0" Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:29.009 [INFO][5529] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:29.012714 env[1222]: 2025-07-12 00:40:29.011 [INFO][5521] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677" Jul 12 00:40:29.013096 env[1222]: time="2025-07-12T00:40:29.012739988Z" level=info msg="TearDown network for sandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" successfully" Jul 12 00:40:29.017938 env[1222]: time="2025-07-12T00:40:29.017900508Z" level=info msg="RemovePodSandbox \"1d58bada1e8ab95d80b97dd6ca4f6b9df4c9dc6e7c9dfc9baaded52730b4a677\" returns successfully" Jul 12 00:40:29.018444 env[1222]: time="2025-07-12T00:40:29.018413988Z" level=info msg="StopPodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\"" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.051 [WARNING][5546] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"26468c6c-6406-46a2-89b5-765ca62c9c7a", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98", Pod:"calico-apiserver-5fcc9669f-vgpzb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali87f40afd306", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.052 [INFO][5546] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.052 [INFO][5546] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" iface="eth0" netns="" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.052 [INFO][5546] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.052 [INFO][5546] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.070 [INFO][5555] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.070 [INFO][5555] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.070 [INFO][5555] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.079 [WARNING][5555] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.079 [INFO][5555] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.080 [INFO][5555] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:29.083801 env[1222]: 2025-07-12 00:40:29.082 [INFO][5546] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.084235 env[1222]: time="2025-07-12T00:40:29.083830672Z" level=info msg="TearDown network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" successfully" Jul 12 00:40:29.084235 env[1222]: time="2025-07-12T00:40:29.083860992Z" level=info msg="StopPodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" returns successfully" Jul 12 00:40:29.084323 env[1222]: time="2025-07-12T00:40:29.084292072Z" level=info msg="RemovePodSandbox for \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\"" Jul 12 00:40:29.084359 env[1222]: time="2025-07-12T00:40:29.084330472Z" level=info msg="Forcibly stopping sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\"" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.124 [WARNING][5572] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0", GenerateName:"calico-apiserver-5fcc9669f-", Namespace:"calico-apiserver", SelfLink:"", UID:"26468c6c-6406-46a2-89b5-765ca62c9c7a", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.July, 12, 0, 39, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5fcc9669f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6b502546a900ae8dc5e09abc83876244d02a1cc4434f270ca4ceb7a6e349de98", Pod:"calico-apiserver-5fcc9669f-vgpzb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali87f40afd306", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.124 [INFO][5572] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.124 [INFO][5572] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" iface="eth0" netns="" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.124 [INFO][5572] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.124 [INFO][5572] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.142 [INFO][5581] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.142 [INFO][5581] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.142 [INFO][5581] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.150 [WARNING][5581] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.150 [INFO][5581] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" HandleID="k8s-pod-network.bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Workload="localhost-k8s-calico--apiserver--5fcc9669f--vgpzb-eth0" Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.152 [INFO][5581] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 12 00:40:29.155668 env[1222]: 2025-07-12 00:40:29.153 [INFO][5572] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3" Jul 12 00:40:29.156098 env[1222]: time="2025-07-12T00:40:29.155700517Z" level=info msg="TearDown network for sandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" successfully" Jul 12 00:40:29.158339 env[1222]: time="2025-07-12T00:40:29.158307157Z" level=info msg="RemovePodSandbox \"bb649c62263f78f36c75e0078d07b9663f7316a3beb92b2be1a728940e3b1bb3\" returns successfully" Jul 12 00:40:29.999000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:29.999000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40023cc660 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:40:29.999000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:29.999000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000571dc0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:40:29.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:40:29.999000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:29.999000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000571e00 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:40:29.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:40:29.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:40:30.000000 audit[1842]: AVC avc: denied { watch } for pid=1842 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7305 scontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 12 00:40:30.000000 audit[1842]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001f6f1e0 a2=fc6 a3=0 items=0 ppid=1673 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c352,c740 key=(null) Jul 12 00:40:30.000000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 12 00:40:31.845920 systemd[1]: Started sshd@14-10.0.0.133:22-10.0.0.1:60828.service. Jul 12 00:40:31.846954 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 12 00:40:31.847040 kernel: audit: type=1130 audit(1752280831.844:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.133:22-10.0.0.1:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:31.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.133:22-10.0.0.1:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:31.891000 audit[5599]: USER_ACCT pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.893695 sshd[5599]: Accepted publickey for core from 10.0.0.1 port 60828 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:31.894000 audit[5599]: CRED_ACQ pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.898912 kernel: audit: type=1101 audit(1752280831.891:1514): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.899267 kernel: audit: type=1103 audit(1752280831.894:1515): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.899312 kernel: audit: type=1006 audit(1752280831.894:1516): pid=5599 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 12 00:40:31.899165 sshd[5599]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:31.894000 audit[5599]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff69c0dd0 a2=3 a3=1 items=0 ppid=1 pid=5599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:31.903266 kernel: audit: type=1300 audit(1752280831.894:1516): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff69c0dd0 a2=3 a3=1 items=0 ppid=1 pid=5599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:31.903364 kernel: audit: type=1327 audit(1752280831.894:1516): proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:31.894000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:31.906462 systemd-logind[1208]: New session 15 of user core. Jul 12 00:40:31.906859 systemd[1]: Started session-15.scope. Jul 12 00:40:31.908000 audit[5599]: USER_START pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.913955 kernel: audit: type=1105 audit(1752280831.908:1517): pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.914025 kernel: audit: type=1103 audit(1752280831.911:1518): pid=5601 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:31.911000 audit[5601]: CRED_ACQ pid=5601 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:32.088797 sshd[5599]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:32.088000 audit[5599]: USER_END pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:32.091235 systemd[1]: session-15.scope: Deactivated successfully. Jul 12 00:40:32.091805 systemd[1]: sshd@14-10.0.0.133:22-10.0.0.1:60828.service: Deactivated successfully. Jul 12 00:40:32.088000 audit[5599]: CRED_DISP pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:32.092866 systemd-logind[1208]: Session 15 logged out. Waiting for processes to exit. Jul 12 00:40:32.093448 systemd-logind[1208]: Removed session 15. Jul 12 00:40:32.094401 kernel: audit: type=1106 audit(1752280832.088:1519): pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:32.094443 kernel: audit: type=1104 audit(1752280832.088:1520): pid=5599 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:32.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.133:22-10.0.0.1:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:35.951049 systemd[1]: run-containerd-runc-k8s.io-03744d15fcb9970e7861e412dd769ac3114085dee1381cabb89d30530cc4281d-runc.E2VpK5.mount: Deactivated successfully. Jul 12 00:40:37.093788 systemd[1]: Started sshd@15-10.0.0.133:22-10.0.0.1:49112.service. Jul 12 00:40:37.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.133:22-10.0.0.1:49112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:37.096596 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:40:37.096651 kernel: audit: type=1130 audit(1752280837.093:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.133:22-10.0.0.1:49112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:37.137000 audit[5656]: USER_ACCT pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.137981 sshd[5656]: Accepted publickey for core from 10.0.0.1 port 49112 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:37.138000 audit[5656]: CRED_ACQ pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.140389 sshd[5656]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:37.142332 kernel: audit: type=1101 audit(1752280837.137:1523): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.142402 kernel: audit: type=1103 audit(1752280837.138:1524): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.142427 kernel: audit: type=1006 audit(1752280837.138:1525): pid=5656 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 12 00:40:37.143660 kernel: audit: type=1300 audit(1752280837.138:1525): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbb06660 a2=3 a3=1 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:37.138000 audit[5656]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbb06660 a2=3 a3=1 items=0 ppid=1 pid=5656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:37.145463 systemd-logind[1208]: New session 16 of user core. Jul 12 00:40:37.146088 kernel: audit: type=1327 audit(1752280837.138:1525): proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:37.138000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:37.146319 systemd[1]: Started session-16.scope. Jul 12 00:40:37.154274 kernel: audit: type=1105 audit(1752280837.149:1526): pid=5656 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.154336 kernel: audit: type=1103 audit(1752280837.150:1527): pid=5658 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.149000 audit[5656]: USER_START pid=5656 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.150000 audit[5658]: CRED_ACQ pid=5658 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.302537 sshd[5656]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:37.308517 kernel: audit: type=1106 audit(1752280837.303:1528): pid=5656 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.308617 kernel: audit: type=1104 audit(1752280837.303:1529): pid=5656 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.303000 audit[5656]: USER_END pid=5656 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.303000 audit[5656]: CRED_DISP pid=5656 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.133:22-10.0.0.1:49126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:37.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.133:22-10.0.0.1:49112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:37.305791 systemd[1]: Started sshd@16-10.0.0.133:22-10.0.0.1:49126.service. Jul 12 00:40:37.306329 systemd[1]: sshd@15-10.0.0.133:22-10.0.0.1:49112.service: Deactivated successfully. Jul 12 00:40:37.307080 systemd[1]: session-16.scope: Deactivated successfully. Jul 12 00:40:37.307636 systemd-logind[1208]: Session 16 logged out. Waiting for processes to exit. Jul 12 00:40:37.308432 systemd-logind[1208]: Removed session 16. Jul 12 00:40:37.346000 audit[5668]: USER_ACCT pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.346989 sshd[5668]: Accepted publickey for core from 10.0.0.1 port 49126 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:37.347000 audit[5668]: CRED_ACQ pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.347000 audit[5668]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe62217e0 a2=3 a3=1 items=0 ppid=1 pid=5668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:37.347000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:37.348040 sshd[5668]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:37.351562 systemd-logind[1208]: New session 17 of user core. Jul 12 00:40:37.352395 systemd[1]: Started session-17.scope. Jul 12 00:40:37.355000 audit[5668]: USER_START pid=5668 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.357000 audit[5671]: CRED_ACQ pid=5671 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.561446 sshd[5668]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:37.562000 audit[5668]: USER_END pid=5668 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.562000 audit[5668]: CRED_DISP pid=5668 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.565294 systemd[1]: Started sshd@17-10.0.0.133:22-10.0.0.1:49138.service. Jul 12 00:40:37.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.133:22-10.0.0.1:49138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:37.565893 systemd[1]: sshd@16-10.0.0.133:22-10.0.0.1:49126.service: Deactivated successfully. Jul 12 00:40:37.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.133:22-10.0.0.1:49126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:37.566707 systemd[1]: session-17.scope: Deactivated successfully. Jul 12 00:40:37.567541 systemd-logind[1208]: Session 17 logged out. Waiting for processes to exit. Jul 12 00:40:37.569101 systemd-logind[1208]: Removed session 17. Jul 12 00:40:37.608000 audit[5679]: USER_ACCT pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.609485 sshd[5679]: Accepted publickey for core from 10.0.0.1 port 49138 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:37.609000 audit[5679]: CRED_ACQ pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.610000 audit[5679]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe379fff0 a2=3 a3=1 items=0 ppid=1 pid=5679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:37.610000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:37.611179 sshd[5679]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:37.614847 systemd-logind[1208]: New session 18 of user core. Jul 12 00:40:37.615735 systemd[1]: Started session-18.scope. Jul 12 00:40:37.619000 audit[5679]: USER_START pid=5679 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:37.620000 audit[5682]: CRED_ACQ pid=5682 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.291000 audit[5694]: NETFILTER_CFG table=filter:119 family=2 entries=22 op=nft_register_rule pid=5694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:38.291000 audit[5694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=fffffd35abb0 a2=0 a3=1 items=0 ppid=2065 pid=5694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:38.291000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:38.297000 audit[5694]: NETFILTER_CFG table=nat:120 family=2 entries=24 op=nft_register_rule pid=5694 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:38.297000 audit[5694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=fffffd35abb0 a2=0 a3=1 items=0 ppid=2065 pid=5694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:38.297000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:38.306729 sshd[5679]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:38.310765 systemd[1]: Started sshd@18-10.0.0.133:22-10.0.0.1:49152.service. Jul 12 00:40:38.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.133:22-10.0.0.1:49152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:38.312000 audit[5679]: USER_END pid=5679 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.312000 audit[5679]: CRED_DISP pid=5679 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.314747 systemd[1]: sshd@17-10.0.0.133:22-10.0.0.1:49138.service: Deactivated successfully. Jul 12 00:40:38.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.133:22-10.0.0.1:49138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:38.315445 systemd[1]: session-18.scope: Deactivated successfully. Jul 12 00:40:38.316484 systemd-logind[1208]: Session 18 logged out. Waiting for processes to exit. Jul 12 00:40:38.315000 audit[5698]: NETFILTER_CFG table=filter:121 family=2 entries=34 op=nft_register_rule pid=5698 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:38.315000 audit[5698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffea3a5c40 a2=0 a3=1 items=0 ppid=2065 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:38.315000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:38.319321 systemd-logind[1208]: Removed session 18. Jul 12 00:40:38.321000 audit[5698]: NETFILTER_CFG table=nat:122 family=2 entries=24 op=nft_register_rule pid=5698 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:38.321000 audit[5698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffea3a5c40 a2=0 a3=1 items=0 ppid=2065 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:38.321000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:38.350000 audit[5697]: USER_ACCT pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.351278 sshd[5697]: Accepted publickey for core from 10.0.0.1 port 49152 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:38.351000 audit[5697]: CRED_ACQ pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.351000 audit[5697]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3f96bf0 a2=3 a3=1 items=0 ppid=1 pid=5697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:38.351000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:38.352502 sshd[5697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:38.356824 systemd[1]: Started session-19.scope. Jul 12 00:40:38.357499 systemd-logind[1208]: New session 19 of user core. Jul 12 00:40:38.360000 audit[5697]: USER_START pid=5697 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.361000 audit[5701]: CRED_ACQ pid=5701 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.698715 sshd[5697]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:38.700000 audit[5697]: USER_END pid=5697 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.700000 audit[5697]: CRED_DISP pid=5697 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.702745 systemd[1]: Started sshd@19-10.0.0.133:22-10.0.0.1:49158.service. Jul 12 00:40:38.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.133:22-10.0.0.1:49158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:38.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.133:22-10.0.0.1:49152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:38.709311 systemd[1]: sshd@18-10.0.0.133:22-10.0.0.1:49152.service: Deactivated successfully. Jul 12 00:40:38.710095 systemd[1]: session-19.scope: Deactivated successfully. Jul 12 00:40:38.712111 systemd-logind[1208]: Session 19 logged out. Waiting for processes to exit. Jul 12 00:40:38.713394 systemd-logind[1208]: Removed session 19. Jul 12 00:40:38.748000 audit[5709]: USER_ACCT pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.749424 sshd[5709]: Accepted publickey for core from 10.0.0.1 port 49158 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:38.750000 audit[5709]: CRED_ACQ pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.750000 audit[5709]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff08a37d0 a2=3 a3=1 items=0 ppid=1 pid=5709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:38.750000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:38.751041 sshd[5709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:38.756398 systemd-logind[1208]: New session 20 of user core. Jul 12 00:40:38.757111 systemd[1]: Started session-20.scope. Jul 12 00:40:38.760000 audit[5709]: USER_START pid=5709 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.761000 audit[5712]: CRED_ACQ pid=5712 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.892000 audit[5709]: USER_END pid=5709 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.892000 audit[5709]: CRED_DISP pid=5709 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:38.892103 sshd[5709]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:38.894455 systemd[1]: sshd@19-10.0.0.133:22-10.0.0.1:49158.service: Deactivated successfully. Jul 12 00:40:38.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.133:22-10.0.0.1:49158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:38.895220 systemd[1]: session-20.scope: Deactivated successfully. Jul 12 00:40:38.896028 systemd-logind[1208]: Session 20 logged out. Waiting for processes to exit. Jul 12 00:40:38.896826 systemd-logind[1208]: Removed session 20. Jul 12 00:40:41.055067 systemd[1]: run-containerd-runc-k8s.io-33fc88b3a2292209b9cbe1a388573ac9b0424dcd86fa265376a19b43c63315bd-runc.x5XhhO.mount: Deactivated successfully. Jul 12 00:40:41.134000 audit[5745]: NETFILTER_CFG table=filter:123 family=2 entries=33 op=nft_register_rule pid=5745 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:41.134000 audit[5745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffca40f350 a2=0 a3=1 items=0 ppid=2065 pid=5745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:41.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:41.146000 audit[5745]: NETFILTER_CFG table=nat:124 family=2 entries=31 op=nft_register_chain pid=5745 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:41.146000 audit[5745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffca40f350 a2=0 a3=1 items=0 ppid=2065 pid=5745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:41.146000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:43.321000 audit[5747]: NETFILTER_CFG table=filter:125 family=2 entries=20 op=nft_register_rule pid=5747 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:43.324601 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 12 00:40:43.324688 kernel: audit: type=1325 audit(1752280843.321:1573): table=filter:125 family=2 entries=20 op=nft_register_rule pid=5747 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:43.324712 kernel: audit: type=1300 audit(1752280843.321:1573): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff2740260 a2=0 a3=1 items=0 ppid=2065 pid=5747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:43.321000 audit[5747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffff2740260 a2=0 a3=1 items=0 ppid=2065 pid=5747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:43.321000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:43.328699 kernel: audit: type=1327 audit(1752280843.321:1573): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:43.332000 audit[5747]: NETFILTER_CFG table=nat:126 family=2 entries=110 op=nft_register_chain pid=5747 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:43.332000 audit[5747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffff2740260 a2=0 a3=1 items=0 ppid=2065 pid=5747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:43.337802 kernel: audit: type=1325 audit(1752280843.332:1574): table=nat:126 family=2 entries=110 op=nft_register_chain pid=5747 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:43.337846 kernel: audit: type=1300 audit(1752280843.332:1574): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffff2740260 a2=0 a3=1 items=0 ppid=2065 pid=5747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:43.337867 kernel: audit: type=1327 audit(1752280843.332:1574): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:43.332000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:43.898508 systemd[1]: Started sshd@20-10.0.0.133:22-10.0.0.1:38836.service. Jul 12 00:40:43.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.133:22-10.0.0.1:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:43.901600 kernel: audit: type=1130 audit(1752280843.898:1575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.133:22-10.0.0.1:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:43.936000 audit[5749]: USER_ACCT pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:43.937648 sshd[5749]: Accepted publickey for core from 10.0.0.1 port 38836 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:43.939136 sshd[5749]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:43.938000 audit[5749]: CRED_ACQ pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:43.942100 kernel: audit: type=1101 audit(1752280843.936:1576): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:43.942166 kernel: audit: type=1103 audit(1752280843.938:1577): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:43.942187 kernel: audit: type=1006 audit(1752280843.938:1578): pid=5749 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 12 00:40:43.938000 audit[5749]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8428310 a2=3 a3=1 items=0 ppid=1 pid=5749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:43.938000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:43.945355 systemd-logind[1208]: New session 21 of user core. Jul 12 00:40:43.946172 systemd[1]: Started session-21.scope. Jul 12 00:40:43.949000 audit[5749]: USER_START pid=5749 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:43.950000 audit[5751]: CRED_ACQ pid=5751 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:44.082469 sshd[5749]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:44.082000 audit[5749]: USER_END pid=5749 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:44.082000 audit[5749]: CRED_DISP pid=5749 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:44.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.133:22-10.0.0.1:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:44.085051 systemd[1]: sshd@20-10.0.0.133:22-10.0.0.1:38836.service: Deactivated successfully. Jul 12 00:40:44.085852 systemd[1]: session-21.scope: Deactivated successfully. Jul 12 00:40:44.086641 systemd-logind[1208]: Session 21 logged out. Waiting for processes to exit. Jul 12 00:40:44.087271 systemd-logind[1208]: Removed session 21. Jul 12 00:40:45.070652 systemd[1]: run-containerd-runc-k8s.io-1ec6c1334356f4ec333a87792aa72d2a793f38f21ea9226134414337eaca7cc7-runc.aS4oiK.mount: Deactivated successfully. Jul 12 00:40:46.316862 kubelet[1958]: I0712 00:40:46.316822 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 12 00:40:46.351000 audit[5782]: NETFILTER_CFG table=filter:127 family=2 entries=8 op=nft_register_rule pid=5782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:46.351000 audit[5782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffddfe18e0 a2=0 a3=1 items=0 ppid=2065 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:46.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:46.357000 audit[5782]: NETFILTER_CFG table=nat:128 family=2 entries=62 op=nft_register_chain pid=5782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 12 00:40:46.357000 audit[5782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21988 a0=3 a1=ffffddfe18e0 a2=0 a3=1 items=0 ppid=2065 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:46.357000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 12 00:40:49.087197 systemd[1]: Started sshd@21-10.0.0.133:22-10.0.0.1:38848.service. Jul 12 00:40:49.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.133:22-10.0.0.1:38848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:49.090238 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 12 00:40:49.090319 kernel: audit: type=1130 audit(1752280849.086:1586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.133:22-10.0.0.1:38848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:49.131000 audit[5784]: USER_ACCT pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.131959 sshd[5784]: Accepted publickey for core from 10.0.0.1 port 38848 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:49.133367 sshd[5784]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:49.132000 audit[5784]: CRED_ACQ pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.136407 kernel: audit: type=1101 audit(1752280849.131:1587): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.136470 kernel: audit: type=1103 audit(1752280849.132:1588): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.136490 kernel: audit: type=1006 audit(1752280849.132:1589): pid=5784 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 12 00:40:49.138394 kernel: audit: type=1300 audit(1752280849.132:1589): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe7a48a0 a2=3 a3=1 items=0 ppid=1 pid=5784 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:49.132000 audit[5784]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe7a48a0 a2=3 a3=1 items=0 ppid=1 pid=5784 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:49.138736 systemd-logind[1208]: New session 22 of user core. Jul 12 00:40:49.139491 systemd[1]: Started session-22.scope. Jul 12 00:40:49.140211 kernel: audit: type=1327 audit(1752280849.132:1589): proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:49.132000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:49.143000 audit[5784]: USER_START pid=5784 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.144000 audit[5786]: CRED_ACQ pid=5786 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.148816 kernel: audit: type=1105 audit(1752280849.143:1590): pid=5784 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.148864 kernel: audit: type=1103 audit(1752280849.144:1591): pid=5786 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.336590 sshd[5784]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:49.336000 audit[5784]: USER_END pid=5784 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.339091 systemd[1]: sshd@21-10.0.0.133:22-10.0.0.1:38848.service: Deactivated successfully. Jul 12 00:40:49.339905 systemd[1]: session-22.scope: Deactivated successfully. Jul 12 00:40:49.337000 audit[5784]: CRED_DISP pid=5784 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.340409 systemd-logind[1208]: Session 22 logged out. Waiting for processes to exit. Jul 12 00:40:49.341199 systemd-logind[1208]: Removed session 22. Jul 12 00:40:49.342351 kernel: audit: type=1106 audit(1752280849.336:1592): pid=5784 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.342408 kernel: audit: type=1104 audit(1752280849.337:1593): pid=5784 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:49.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.133:22-10.0.0.1:38848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:51.866172 kubelet[1958]: E0712 00:40:51.866132 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:54.341618 systemd[1]: Started sshd@22-10.0.0.133:22-10.0.0.1:59910.service. Jul 12 00:40:54.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.133:22-10.0.0.1:59910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:54.344606 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 12 00:40:54.344677 kernel: audit: type=1130 audit(1752280854.341:1595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.133:22-10.0.0.1:59910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:54.384000 audit[5806]: USER_ACCT pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.385009 sshd[5806]: Accepted publickey for core from 10.0.0.1 port 59910 ssh2: RSA SHA256:lOTsI5S5omJPCdinbmTXhzZlC32lNQZJGtwxzlZSG1o Jul 12 00:40:54.387602 kernel: audit: type=1101 audit(1752280854.384:1596): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.387000 audit[5806]: CRED_ACQ pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.388797 sshd[5806]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 12 00:40:54.392108 kernel: audit: type=1103 audit(1752280854.387:1597): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.392167 kernel: audit: type=1006 audit(1752280854.387:1598): pid=5806 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 12 00:40:54.392196 kernel: audit: type=1300 audit(1752280854.387:1598): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaaab210 a2=3 a3=1 items=0 ppid=1 pid=5806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:54.387000 audit[5806]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaaab210 a2=3 a3=1 items=0 ppid=1 pid=5806 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 12 00:40:54.392348 systemd-logind[1208]: New session 23 of user core. Jul 12 00:40:54.393088 systemd[1]: Started session-23.scope. Jul 12 00:40:54.387000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:54.395620 kernel: audit: type=1327 audit(1752280854.387:1598): proctitle=737368643A20636F7265205B707269765D Jul 12 00:40:54.397000 audit[5806]: USER_START pid=5806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.398000 audit[5808]: CRED_ACQ pid=5808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.402685 kernel: audit: type=1105 audit(1752280854.397:1599): pid=5806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.402763 kernel: audit: type=1103 audit(1752280854.398:1600): pid=5808 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.520526 sshd[5806]: pam_unix(sshd:session): session closed for user core Jul 12 00:40:54.520000 audit[5806]: USER_END pid=5806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.523122 systemd-logind[1208]: Session 23 logged out. Waiting for processes to exit. Jul 12 00:40:54.523362 systemd[1]: sshd@22-10.0.0.133:22-10.0.0.1:59910.service: Deactivated successfully. Jul 12 00:40:54.524092 systemd[1]: session-23.scope: Deactivated successfully. Jul 12 00:40:54.521000 audit[5806]: CRED_DISP pid=5806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.524682 systemd-logind[1208]: Removed session 23. Jul 12 00:40:54.526330 kernel: audit: type=1106 audit(1752280854.520:1601): pid=5806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.526403 kernel: audit: type=1104 audit(1752280854.521:1602): pid=5806 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 12 00:40:54.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.133:22-10.0.0.1:59910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 12 00:40:54.865546 kubelet[1958]: E0712 00:40:54.865511 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 12 00:40:55.649226 systemd[1]: run-containerd-runc-k8s.io-33fc88b3a2292209b9cbe1a388573ac9b0424dcd86fa265376a19b43c63315bd-runc.ABV8wU.mount: Deactivated successfully. Jul 12 00:40:55.865746 kubelet[1958]: E0712 00:40:55.865713 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"